Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Merdoor?

Merdoor is a backdoor-type malicious program. Software of this kind is designed to open a "backdoor" for malware and malicious components into compromised systems.

The threat actor behind Merdoor is dubbed Lancefly. This malware has been around since at least 2018. It has been observed being used in highly targeted attacks involving low numbers of infected devices. The activity centers South and Southeast Asian entities operating in the governmental, education, aviation, and telecommunication spheres. Lancyfly's goal appears to be gathering intelligence.

What kind of is "SoundCloud virus"?

"SoundCloud virus" refers to malware proliferated via hijacked SoundCloud music streaming service platform accounts. The accounts promote links to malignant sites that host malicious programs, including PrivateLoader – a Windows backdoor/loader-type malware, and MobiDash – an adware-type application targeting Android devices.

What kind of page is psistaugli[.]com?

Our research team discovered the psistaugli[.]com rogue page while investigating dubious sites. It operates by pushing browser notification spam and redirecting visitors to other (likely unreliable/harmful) websites. Most users access webpages like psistaugli[.]com via redirects caused by sites using rogue advertising networks.

What kind of email is "Bank Draft"?

After examining the "Bank Draft" spam letter, we determined that it is a phishing email. This mail aims to trick recipients into disclosing personally identifiable information. The deception entails false claims concerning a large amount of money that recipients are supposedly entitled to.

What kind of application is Leading?

We discovered Leading adware while investigating an installation setup obtained from a deceptive webpage. This piece of software is designed to run intrusive advertisement campaigns. Leading may also have other harmful capabilities.

What kind of application is SageFine?

Our research team found the SageFine rogue app during a routine inspection of new submissions to the VirusTotal site. After examining this piece of software, we determined that it is adware belonging to the AdLoad malware family.

What kind of application is Fast Incognito Mode?

Fast Incognito Mode is promoted as a tool allowing users to browse the web in incognito mode. However, while inspecting the app, we found that it displays intrusive advertisements. Thus, we classified Fast Incognito Mode as adware. Additionally, we found that this app can access certain data.

What kind of application is ClearArchive?

Our research team discovered the ClearArchive rogue app during a routine inspection of new submissions to VirusTotal. It operates as advertising-supported software (adware). Additionally, ClearArchive is part of the AdLoad malware family.

What kind of page is sweepstakessurveytoday[.]org?

While inspecting sweepstakessurveytoday[.]org, we found that it is an untrustworthy website designed to trick visitors into participating in a fake survey. Also, sweepstakessurveytoday[.]org wants to send notifications and can redirect visitors to other sites. Thus, it is recommended not to trust sweepstakessurveytoday[.]org.

What kind of page is bonalluterser[.]com?

Our research team discovered bonalluterser.com while investigating untrustworthy sites. This rogue page aims to trick visitors into allowing it to deliver browser notification spam. It can also redirect visitors to other (likely dubious/malicious) websites. Users typically enter webpages like bonalluterser[.]com through redirects caused by sites employing rogue advertising networks.