Virus and Spyware Removal Guides, uninstall instructions

What is SmartTransaction?

SmartTransaction is an adware-type application that our research team discovered while reviewing new submissions to VirusTotal. We also learned that this app belongs to the AdLoad malware family.

What kind of software is SmartTask?

Our malware researchers have discovered SmartTask while checking the samples on VirusTotal. After examining SmartTask, it was found that this app displays various advertisements. Apps that operate this way are classified as adware. In most cases, adware is distributed using questionable methods.

What kind of malware is Sdjm?

Sdjm is malware belonging to a family of ransomware called Djvu. We have discovered this ransomware variant while checking VirusTotal for recently submitted malware samples. Sdjm encrypts files and appends the ".sdjm" extension to filenames (for example, it renames "1.jpg" to "1.jpg.sdjm", "2.exe" to "2.exe.sdjm"), and creates the "_readme.txt" file.

What kind of page is herebelf[.]xyz?

Herebelf[.]xyz is a deceptive website designed to trick visitors into allowing it to show notifications. Also, it redirects visitors to other shady pages. Our team has discovered herebelf[.]xyz while testing various websites that use rogue advertising networks.

What kind of malware is SABS?

SABS is ransomware - malware that encrypts files. We have discovered it while checking VirusTotal for recently submitted malware samples. It was found that SABS not only encrypts but also renames files (by appending the ".SABS" extension to filenames) and creates the "RESTORE_FILES_INFO.txt" file that contains a ransom note.

An example of how SABS modifies filenames: it renames "1.jpg" to "1.jpg.SABS", "2.exe" to "2.exe.SABS", and so forth.

What kind of page is mydailynewz[.]com?

Mydailynewz[.]com is a rogue website our research team discovered while inspecting untrustworthy sites. It is designed to promote browser notification spam and redirect visitors to other unreliable/malicious webpages. Most visitors access pages like mydailynewz[.]com unintentionally via redirects generated by sites using rogue advertising networks.

What kind of page is dollarsurvey24[.]com?

During a routine inspection of rogue websites, our researchers found the dollarsurvey24[.]com page. It is designed to load deceptive content, promote browser notification spam, and redirect visitors to other dubious/malicious sites. Most visitors to dollarsurvey24[.]com and similar webpages access them through redirects caused by sites that use rogue advertising networks.

What kind of software is Meme Finder?

We have discovered the Meme Finder application on a deceptive website encouraging us to "download and install recommended Chrome extension". After examining this app, we have learned that it generates advertisements (operates as adware). It is described as an app allowing users to search and discover hilarious memes, photos, videos.

What is "Cortana - It seems your PC is locked out"?

"Cortana - It seems your PC is locked out" is a technical support scam, which our researchers found while inspecting sites that use rogue advertising networks. Scams of this type aim to trick users into calling fake helplines to resolve computer-related issues. Once on the line, victims are lured into allowing remote access to the scammers, who abuse this trust to cause various problems.

What kind of page is webjustpush[.]com?

The webjustpush[.]com site displays a fake CAPTCHA to trick visitors into allowing it to show notifications. Also, it redirects to other untrustworthy pages. Our team has discovered webjustpush[.]com while examining websites that use rogue advertising networks (various illegal movie streaming sites, torrent pages, etc.).