Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Nyxe?

Nyxe is ransomware that we discovered during our inspection of samples uploaded to VirusTotal. Our examination revealed that Nyxe encrypts data, renames files by adding the ".nyxe" extension, creates a ransom note titled "Decryption Instructions.txt", and changes the victim's desktop wallpaper.

An example of how Nyxe modifies filenames: it renames "1.jpg" to "1.jpg.nyxe", "2.png" to "2.png.nyxe", and so forth.

What kind of extension is RapidFinder?

We have inspected RapidFinder and found that it is a shady browser extension that functions as a browser hijacker. It hijacks a browser by modifying its settings. The purpose of RapidFinder is to promote a fake search engine. Also, this extension activates the "Managed by your organization" feature.

What kind of page is everestpeak[.]top?

We have inspected everestpeak[.]top and found that it displays misleading content to obtain permission to send notifications. Sites like everestpeak[.]top usually deliver unreliable notifications. Thus, everestpeak[.]top and similar web pages should be avoided (and never granted permission to show notifications).

What is "Coinbase - Deposits Verification Request"?

During our inspection, we identified this as a phishing email disguised as a message about important invoice details. The scammers use this email to steal personal information from recipients. Their goal is to lure recipients into entering details on a phishing website. Recipients should ignore this email.

What is "Important Invoice Information From Accounts"?

During our inspection, we identified this as a phishing email disguised as a message about important invoice details. The scammers use this email to steal personal information from recipients. Their goal is to lure recipients into entering details on a phishing website. Recipients should ignore this email.

What is the fake "CYBRO Airdrop"?

We have inspected the site (claims-cybro[.]com) promoting CYBRO airdrop and found that it is designed to steal cryptocurrency from individuals. This page masquerades as the original CYBRO platform (cybro[.]io) to deceive visitors. To avoid potential financial loss, users should avoid visiting and interacting with claims-cybro[.]com.

What kind of scam is "Maximum Mailbox Space Allowed"?

Our team has examined this letter and discovered that it is a phishing email. It is created by scammers who aim to trick recipients into believing they have received a notification from an email service provider. These fraudsters aim to lure recipients into entering information on a fake website.

What is fraudulent "NOT Coin Spin Reward" site?

We have examined the site (spin-notcoin[.]xyz) and found that it is a fake web page posing as a platform for winning $NOT tokens. The scammers operating this scheme aim to lure users into taking steps that would allow fraudsters to steal cryptocurrency. Therefore, this fraudulent page should be avoided.

What is "COVID - Sick and Family Leave Act" scam?

Our team has analyzed this email and discovered that it is a fraudulent letter offering recipients to claim a large sum of money. The scammers behind it aim to trick recipients into opening a fake website and entering personal information. Thus, this email should not be trusted.

What is "Blockchain.com - Verify Your Email Address"?

We have examined this email and discovered that it includes a fake notification regarding a blockchain[.]com account. The scammers behind it aim to trick recipients into disclosing personal information through a deceptive web page. Recipients should not interact with the contents of this email and should ignore it.