Virus and Spyware Removal Guides, uninstall instructions

What kind of page is wholecoolposts[.]com?

Wholecoolposts[.]com is designed to trick visitors into agreeing to receive notifications and promote other dubious pages. There are plenty of pages similar to wholecoolposts[.]com, for instance, phonenow[.]net, wholenicenews[.]com, mykiger[.]com. One more thing that these pages have in common is that users do not visit them intentionally.

What kind of application is MyADBlocksSearch?

MyADBlocksSearch is a browser hijacker designed to promote the myadblocks.com address. Myadblocks.com is a fake search engine. MyADBlocksSearch promotes this fake search engine by changing some of the web browser's settings. Typically, users install browser-hijacking apps unknowingly.

What kind of malware is RL Wana-XD?

RL Wana-XD is the name of ransomware that encrypts files. It also appends the ".XD-99" extension to filenames (for example, it renames "1.jpg" to "1.jpg.XD-99", "sample.png" to "sample.png.XD-99"), and creates a text file ("Readme.txt") containing a ransom note.

What kind of page is phonenow[.]net?

Phonenow[.]net uses a clickbait technique to trick visitors into agreeing to receive notifications and redirects them to potentially malicious pages. Phonenow[.]net shares these qualities with wholenicenews[.]com, greattypecaptcha[.]top, tropi[.]fun, and hundreds of other pages that users do not visit intentionally.

What kind of malware is Sckmedady?

Sckmedady is ransomware that encrypts files and modifies their filenames. It appends the docexkonc@gmail.com email address, a string of random characters, and the ".sckmedady" extension to filenames.

For instance, it renames "1.jpg" to "1.jpg.[docexkonc@gmail.com][MJ-JS8403912576].sckmedady", "2.jpg" to "2.jpg.[docexkonc@gmail.com][MJ-JS8403912576].sckmedady". Also, this ransomware creates a ransom note, the "Read-Me.txt" file. Sckmedady belongs to a ransomware family called VoidCrypt.

What kind of software is NoteIt?

NoteIt is advertised as a tool allowing users to send important notes privately. It also bombards users with annoying advertisements. Therefore, it falls into the category of adware/advertising-supported software. It is worth mentioning that users often install adware unknowingly.

What kind of malware is j1k0nxo7?

j1k0nxo7 is ransomware designed to encrypt files (and modify their filenames), change the desktop wallpaper, and create the "read_it.txt" file (a ransom note). It appends a randomly generated extension to filenames, for example, it renames "1.jpg" to "1.jpg.yaoc", "document.txt", to "document.txt.qnrg", and so on.

What kind of malware is Sbpg?

Sbpg is part of the Djvu ransomware family. This ransomware encrypts files and appends the ".sbpg" extension to their filenames. For instance, it renames "1.jpg" to "1.jpg.sbpg", "sample.png" to "sample.png.sbpg", and so on. Also, Sbpg creates the "_readme.txt" file - a ransom note containing contact and payment information.

What kind of malware is Drik?

Drik ransomware belongs to a family of ransomware called Phobos. This variant encrypts files and appends the victim's ID, jackrasal@privatemail.com email address, and the ".Drik" extension to filenames. It also generates two ransom notes: "info.hta" (a file designed to display a ransom note in a pop-up window) and "info.txt".

An example of how the Drik ransomware renames files: it renames "1.jpg" to "1.jpg.id[9ECFA84E-2455].[jackrasal@privatemail.com].Drik", "image.png" to "image.png.id[9ECFA84E-2455].[jackrasal@privatemail.com].Drik", and so on.

What kind of malware is Xcmb?

Xcmb is ransomware that encrypts files and appends the ".xcmb" extension to filenames. For example, it renames "1.jpg" file to "1.jpg.xcmb", "document.txt" to "document.txt.xcmb", and so on. It provides contact and payment information in a ransom note named "_readme.txt". Xcmb belongs to a ransomware family called Djvu.