Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Vilsa?

Vilsa is a malicious program classed as a stealer. As the class implies, this malware is designed to extract and exfiltrate vulnerable data from compromised machines. Most stealers target log-in credentials (usernames/passwords) of various accounts, personally identifiable information, and finance-related data.

What kind of malware is Crystal Rans0m?

Crystal Rans0m is ransomware developed in Rust programming language. During our analysis, we noticed that it not only encrypts files but also steals information. Unlike most ransomware variants, Crystal Rans0m does not append any extension to the encrypted files. The ransom note provided by this ransomware appears in a pop-up window.

What kind of page is ladsmusic[.]com?

Our researchers discovered ladsmusic[.]com while browsing suspicious websites. This rogue page promotes spam browser notifications and redirects users to other (likely unreliable/hazardous) sites.

The majority of visitors to ladsmusic[.]com and webpages akin to it access them through redirects generated by websites that utilize rogue advertising networks.

What kind of page is zinionifeish[.]com?

Zinionifeish[.]com is a rogue webpage found by our research team during a routine investigation of untrustworthy sites. Upon examination, we determined that this page promotes browser notification spam and redirects users to different (likely dubious/malicious) websites.

Most visitors enter webpages like zinionifeish[.]com via redirects generated by sites that use rogue advertising networks. Alternatively, these pages may be accessed through spam notifications, intrusive ads, misspelled URLs, and installed adware.

What kind of email is "Internet Bank System"?

Our inspection of the "Internet Bank System" email revealed that it is spam. It notifies about a received payment. The goal of this spam mail is to lure recipients into visiting a phishing website that targets email account log-in credentials (passwords).

What is "Your Mailbox Will Automatically Synchronize"?

Our team has inspected this email and found that it is written by scammers who attempt to trick recipients into revealing their personal information. Emails of this type fall into the category of phishing emails. Recipients should be aware of phishing attempts and ignore them.

What is Cork.app?

We have tested the Cork.app application and learned that it is designed to generate intrusive advertisements. Typically, apps that behave like Cork.app are classified as adware. It is important to mention that Cork.app is part of the Pirrit family and has been flagged as malicious by over twenty security vendors.

What kind of page is gettllingovert[.]info?

We have inspected gettllingovert[.]info and concluded that the purpose of this page is to receive permission to show notifications. However, gettllingovert[.]info uses a deceptive method to obtain this permission. Typically, when such sites are allowed to send notifications, they bombard users with fake warnings and other misleading content.

What is the fake "$CATE Airdrop"?

After inspecting this "$CATE Airdrop", promoted on claim-cateoneth[.]com (could be hosted elsewhere), is fake. The scam claims to be distributing the CATE token. In fact, it operates as a cryptocurrency drainer – by draining digital assets from victims' cryptowallets.

What kind of email is "Degussa Bank"?

After reviewing this "Degussa Bank" email, we determined that it is fake. This spam letter requests the recipient to complete an identity verification process. The goal is to extract sensitive information through a phishing website. It must be emphasized that this scam email is in no way associated with the actual Degussa Bank AG.