Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Linda?

Linda is ransomware that encrypts files and modifies filenames. Also, it creates the "!INFO.HTA" file containing a ransom note. Our team has discovered Linda ransomware while checking the VirusTotal page for recently submitted malware samples. It was found that Linda is part of the VoidCrypt ransomware family.

This ransomware appends the xxdecryptxx@cock.li email address, a string of random characters, and the ".linda" extension to filenames. For example, it renames "1.jpg" to "1.jpg.[xxdecryptxx@cock.li][XSH8ZNG4R9LMBV3].linda", "2.png" to "2.png.[xxdecryptxx@cock.li][XSH8ZNG4R9LMBV3].linda"), and so forth.

What is Exobot?

Exobot (also known as Exo Android Bot) is a piece of malicious software targeting Android OSes (Operating Systems). This malware can extract a wide variety of information, and it can also create a botnet (i.e., control a group of infected devices to carry out malicious actions).

It must be mentioned that Exobot is a sophisticated malicious program, which complicates both its detection and removal.

What kind of software is DevSoftware?

We have discovered this application while inspecting various deceptive pages (e.g., websites claiming that installed software is outdated). After downloading and installing DevSoftware, we noticed that it shows unwanted (intrusive) advertisements. Software that displays ads is called adware.

What kind od page is winalert[.]net?

Winalert[.]net is an untrustworthy page that displays deceptive content to trick visitors into allowing it to show notifications. Our team has discovered winalert[.]net while inspecting pages that use rogue advertising networks - we ended up on this site while examining torrent sites, illegal movie streaming pages, and similar sites.

What is ClickManager?

ClickManager is a piece of rogue software that we discovered while inspecting new submissions to VirusTotal. After analyzing this app, we determined that it operates as adware and belongs to the AdLoad malware family.

What is Files Download Fast?

Files Download Fast is a browser extension that we found while inspecting untrustworthy websites. This extension is promoted as a file download management tool. However, our analysis revealed that Files Download Fast operates as advertising-supported software (adware).

What is Easy Tuning Videos?

Easy Tuning Videos is a rogue browser extension that our researchers discovered while inspecting questionable download pages. Easy Tuning Videos' promotional material claims that it is capable of adjusting video display for viewers' benefit. After analyzing this piece of software, we determined that Easy Tuning Videos operates as adware.

What is "more styles"?

While inspecting deceptive download webpages, our researchers discovered the "more styles" browser extension. It promises to allow users to customize website appearance, e.g., changing the page's hue, color opacity, etc. After analyzing this piece of software, we learned that it operates as adware.

What is Pay2Decrypt ransomware?

Pay2Decrypt is the name of a malicious program categorized as ransomware. Malware of this type is designed to encrypt data and demand ransoms for the decryption.

We executed a sample of Pay2Decrypt on our test machine, and this ransomware encrypted files and changed their filenames. The original filenames were appended with ".PAY2DECRYPT" and a random character string, e.g., a file initially named "1.jpg" appeared as "1.jpg.PAY2DECRYPTRLD0f5fRliZtqKrFctuRgH2", etc.

Once the encryption process was completed, Pay2Decrypt ransomware dropped a hundred ransom notes on the desktop named "Pay2Decrypt1.txt", "Pay2Decrypt2.txt", all the way to "Pay2Decrypt100.txt".

What kind of program is SafeSoft PC Cleaner?

SafeSoft PC Cleaner is advertised as a program that makes a computer fast and secure (that cleans and optimizes a computer). We have found that a few security vendors on the VirusTotal page flagged its installer (and the program itself) as malicious. We recommend not to use programs of this kind.