Virus and Spyware Removal Guides, uninstall instructions

What is Prynt Stealer?

Prynt is a stealer-type malicious program, which our research team found while inspecting malware selling hotspots. This piece of malicious software is designed to obtain a wide variety of sensitive information from infected systems. Prynt Stealer has multiple functionalities that allow it to exfiltrate, extract, record, and alter various content.

What kind of malware is Eagle Monitor?

Eagle Monitor is the name of a remote access Trojan (RAT) written in C# and Visual Basic programming languages. It allows the attackers to remotely control infected computers. Typically, RATs are used to steal sensitive information, inject additional malware, spy on victims, etc. We have discovered Eagle Monitor on a hacker forum.

What kind of page is yt-convert[.]com?

We have examined the yt-convert[.]com website and found that it uses rogue advertising networks. It redirects visitors to questionable websites. This page is presented as a site allowing visitors to download videos from YouTube in MP3 and MP4 formats. It is worth knowing that it is not entirely legal to download videos from YouTube.

What is Iroubalsct ransomware?

Iroubalsct is a ransomware-type program that our researchers discovered while inspecting new submissions to VirusTotal. We determined that this malicious program belongs to the Snatch ransomware family.

After being launched onto our test machine, Iroubalsct began encrypting files and changed their filenames by appending them with a ".iroubalsct" extension. For example, a file originally titled "1.jpg" appeared as "1.jpg.iroubalsct", "2.png" as "2.png.iroubalsct", and so on.

Following the completion of this process, a ransom note named "HOW TO RESTORE YOUR FILES.TXT" was dropped onto the desktop.

What kind of website is misticview[.]ru?

Misticview[.]ru is a deceptive website designed to trick visitors into allowing it to show notifications (it displays deceptive content to get permission to show notifications). Also, it redirects visitors to another similar page. We have discovered this page while examining other pages that use rogue advertising networks.

What kind of malware is Zazas?

Our team has discovered a new ransomware variant belonging to the Babuk family called Zazas. This variant was found while checking malware samples submitted to VirusTotal. After examination, it was concluded that Zazas ransomware encrypts files and creates a ransom note (the "How To Restore Your Files.txt" file).

Also, Zazas appends the ".zazas" extension to filenames. For example, it renames "1.jpg" to "1.jpg.zazas", "2.png" to "2.png.zazas", and so forth.

What is ProjectExpress?

ProjectExpress is a piece of rogue software that our researchers discovered while inspecting new submissions to VirusTotal. Our inspection of this application revealed that it operates as advertising-supported software (adware) and belongs to the AdLoad malware family.

What kind of software is VectorPathCorner?

VectorPathCorner is the name of an advertising-supported application discovered by our team while inspecting shady websites offering to update installed software. The purpose of this app is to generate annoying advertisements. Most of the apps of this type are promoted and distributed using deceptive or similar methods.

What kind of website is youconvert[.]net?

Youconvert[.]net is an online converter allowing to download YouTube videos in MP3 format. After testing this page, we found that it can lead to shady websites and display unwanted notifications. This page uses rogue advertising networks (has questionable ads on it and redirects to other pages) and asks for permission to show notifications.

What kind of application is VideoSearches?

VideoSearches is the name of a browser hijacker designed to promote video-searches.com - a fake search engine. It hijacks a web browser by changing its settings. Our team has found VideoSearches on a shady website. Like most apps of this type, VideoSearches is promoted and distributed using deceptive methods.