Virus and Spyware Removal Guides, uninstall instructions

What is TaskBoard?

TaskBoard is an adware-type app with browser hijacker abilities. Due to the questionable techniques used to spread TaskBoard, it is also classified as a PUA (Potentially Unwanted Application).

What kind of application is OnlineTab?

OnlineTab displays unwanted advertisements and changes the web browser's settings to promote a fake search engine. This app functions as adware and a browser hijacker. Typically, apps like OnlineTab are promoted/distributed using questionable (deceptive) methods. Thus, users download/install them inadvertently.

What is kind of scam is Pornographic Spyware Alert?

It is a technical support scam using scare tactics to trick unsuspecting visitors into calling the provided number. Usually, scammers behind pages of this type ask to install remote administration software, pay for unnecessary services or programs, and (or) provide sensitive information.

What is GoAdblockSearch?

GoAdblockSearch is a piece of browser-hijacking software. It promotes the goadblocksearch.com fake search engine. Since most users unintentionally download/install browser hijackers, they are also classified as PUAs (Potentially Unwanted Applications).

What is Wnmd ransomware?

Wnmd is a ransomware-type program. This malware is designed to encrypt data (render files unusable) and demand ransoms for the decryption.

Files encrypted by Wnmd are appended with a ".wnmd" extension. For example, a file initially titled "1.jpg" would appear as "1.jpg.wnmd", "2.jpg" as "2.jpg.wnmd", "3.jpg" as "3.jpg.wnmd", and so on. Afterwards, this ransomware creates a message named "#INSTRUCTIONS DECRYPT.txt".

What is the news-befuka[.]cc site?

News-befuka[.]cc is an untrustworthy website designed to load questionable content and/or redirect visitors to other (likely unreliable or malicious) pages. The Internet is full of such rogue webpages; hrougthatsidh.club, businesspayments.org, captcharesolverhere.top, and totalnicefeed.com are just some examples.

Most visitors to these sites are redirected to them by suspect websites, intrusive ads, or PUAs (Potentially Unwanted Applications) installed onto their systems.

What kind of malware is Ndjmu?

Ndjmu is ransomware designed to encrypt files, change the filename of every encrypted file and create the "MEag_HOW_TO_DECRYPT.txt" file (a ransom note). It renames files by appending a string of random characters and the ".ndjmu" extension to filenames.

For example, Ndjmu renames "1.jpg" to "1.jpg.znWGY2t_JLdl3fUEjfCAEgSU0ShufmJR8BUen9mqOvr_2iSGwkyjPIo0.ndjmu", "sample.jpg" to "sample.jpg.znWGY2t_JLdl3fUEjfCAEgSU0ShufmJR8BUen9mqOvr_2iSGwkyjPIo0.ndjmu", and so on.

What is Page Ranking Tool?

Page Ranking Tool is an adware-type browser extension. This piece of software is endorsed as a tool allowing users to check a website's reputation. Due to the dubious methods used to distribute adware products, they are also categorized as PUAs (Potentially Unwanted Applications).

What is You have received an encrypted message email scam?

It is a phishing email claiming that recipients have received an encrypted message and can open it via the attached file. The purpose of this email is to trick recipients into opening an HTML file designed to open a fake Microsoft page and entering their account login credentials on it.

What is the hrougthatsidh[.]club website?

Similar to businesspayments.org, ourcoolstories.com, spdate.com, new-updates-service.com, and many others, hrougthatsidh[.]club is a rogue site. It is designed to load questionable content and/or redirect visitors to other (likely dubious or malicious) webpages.

Users typically access rogue websites via redirects caused by untrustworthy pages, intrusive adverts, or installed PUAs (Potentially Unwanted Applications).