Virus and Spyware Removal Guides, uninstall instructions

What is the fake "Worldcoin Invite"?

Our examination of the page (worldscoins-claims.pages.dev) reveals that it is a scam website aimed at stealing cryptocurrency from unsuspecting users. The site imitates world[.]org (the real website) to mislead visitors. This and similar sites should be recognized as scams and avoided.

What is "MAVIA Registration" scam?

While examining the MAVIA Registration site (register-mavia[.]app), we discovered that it is a fraudulent page posing as the real site (mavia[.]com). The purpose of the fake page is to trick visitors into "registering" and stealing their cryptocurrency. Thus, it is highly advisable to avoid sites like this one.

What kind of page is diddylliker[.]com?

While inspecting suspect websites, our researchers discovered the diddylliker[.]com rogue page. After investigating it, we learned that this webpage endorses browser notification spam and generates redirects to different (likely dubious/malicious) sites.

Users primarily enter pages like diddylliker[.]com via redirects caused by websites that employ rogue advertising networks.

What is the fake "OPTIMISM Airdrop"?

Our researchers discovered this fake "OPTIMISM Airdrop" promoted on optimismclaim.pages[.]dev (could be hosted elsewhere). The scam imitates the Optimism network (optimism.io) running an airdrop. Instead of distributing tokens, this scheme functions as a cryptocurrency drainer. Victims of this hoax airdrop have their digital assets stolen.

What kind of malware is Blue?

Blue is a ransomware based on another named SHINRA. Malicious software within this classification encrypts data and demands ransoms for the decryption.

On our testing system, Blue encrypted files and renamed them. Original filenames were changed to a random character string and appended with a ".blue" extension. To elaborate, a file initially titled "1.jpg" appeared as "mPquTnK1Zu.blue". Afterward, a ransom note – "#HowToRecover.txt" – was created.

What kind of email is "Donation To Charity Through You"?

After reading this "Donation To Charity Through You" email, we determined that it is spam. This letter seeks aid from the recipient in distributing the sender's funds to charity. Supposedly, the recipient will be rewarded monetarily for their help. This spam mail most likely seeks to trick victims into disclosing their personal information and/or sending scammers money.

What kind of page is streamuberswiftthe-file[.]top?

We have reviewed streamuberswiftthe-file[.]top and found that it displays deceptive content designed to manipulate visitors into consenting to receive notifications. Websites that use clickbait or other techniques to obtain permission to send notifications should be avoided. If streamuberswiftthe-file[.]top has such permission, it should be revoked.

What kind of malware is Kral?

Kral is an information-stealing malware delivered via a downloader with the same name and other similarities. It is known that Kral stealer targets cryptocurrency wallets and browser data. Systems that may be infected with this malware should be scanned using a reputable security tool as soon as possible.

What kind of page is laiphuphegrohu[.]com?

Laiphuphegrohu[.]com is a rogue page that promotes dubious content and browser notification spam. It can also redirect visitors to other (likely untrustworthy/hazardous) websites.

Most visitors to these kinds of webpages access them via redirects caused by sites that utilize rogue advertising networks. Our researchers discovered laiphuphegrohu[.]com while inspecting websites that use such networks.

What kind of page is notoings[.]com?

Our team has examined notoings[.]com and learned that this page uses deception to obtain permission to show notifications. Once allowed, sites like notoings[.]com can deliver annoying and misleading notifications designed to promote unreliable pages, apps, etc. Therefore, notoings[.]com (and similar websites) should be ignored.