Virus and Spyware Removal Guides, uninstall instructions

What kind of page is blandcaptcha[.]top?

While inspecting untrustworthy sites, we found the blandcaptcha[.]top webpage. It promotes browser notification spam through the use of fake CAPTCHA verification. Additionally, this page is capable of redirecting visitors to other (likely unreliable/malicious) websites.

Most users enter pages like blandcaptcha[.]top via redirects caused by sites using rogue advertising networks.

What kind of application is SearchMok?

SearchMok is a browser hijacker designed to promote a fake search engine. It hijacks a web browser by changing some of its settings to searchmok.com. Typically, browser-hijacking apps are promoted using questionable pages and other methods. We have discovered SearchMok while inspecting deceptive websites.

What is "PancakeSwap Giveaway"?

"PancakeSwap Giveaway" is a scam we discovered while inspecting deceptive websites. This fake giveaway promises to double the amount of CAKE cryptocurrency that users "contribute" to it. However, users will receive nothing in return and lose everything that they transfer to this scam.

What is "GMAIL UK FREELOTTO" email scam?

We have examined this email and concluded that it is a fake message (winner notification) about winning a lottery from Google (Gmail). Typically, scammers behind such emails seek to trick recipients into providing sensitive information and (or) transferring money (paying some "fees"). It is strongly advisable to ignore and delete emails of this type.

What kind of page is picprosto[.]click?

We have discovered the picprosto[.]click website after receiving an email containing a link to it. After examining the page, we found that it displays a deceptive message to trick visitors into agreeing to receive notifications. It is worth mentioning that pages like picprosto[.]click usually are promoted via other pages that use rogue advertising networks.

What is the "BlockChain" scam?

While inspecting deceptive websites, our research team found the "BlockChain" scam. It operates as a phishing scam. This scheme attempts to obtain victims' BlockChain cryptocurrency wallet log-in credentials.

What kind of email is "336 Parts B.V."?

After analyzing the "336 Parts B.V." email, we determined that it is spam. This email concerns a fake invoice to view which - recipients are asked to log in again using their email account. However, the sign-in page is a phishing website designed to record the information provided to it.

Therefore, users can lose their email accounts and content associated with them by attempting to log in through the webpage promoted by "336 Parts B.V.".

What is the "DUY THANH EXPORT" email virus?

Our team has examined this email and discovered that the cybercriminals behind it aim to trick recipients into opening the attached file. They pretend to be a company called "DUY THANH EXPORT & IMPORT CO .LTD" and claim that the file attached to this email is a purchase order. That file is malicious and likely to be used to deliver NanoCore RAT.

What kind of malware is Spark?

Spark is the name of ransomware discovered by MalwareHunterTeam. It is a type of malware that encrypts files to make them inaccessible until victims decrypt them with a tool purchased from the attackers. Also, it appends the ".Spark" extension to filenames and displays a pop-up window containing a ransom note.

An example of how Spark modifies filenames: it renames "1.jpg" to "1.jpg.Spark", "2.png" to "2.png.Spark", and so forth.

What kind of page is scanoclean[.]com?

During a routine inspection of dubious webpages, our research team discovered the scanoclean[.]com site. It is designed to promote deceptive material, push browser notification spam, and redirect visitors to different (likely questionable/malicious) websites. Most users access such pages via redirects caused by sites using rogue advertising networks.