Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Yqal?

Yqal is ransomware that encrypts files, appends its extension (".yqal") to filenames, and generates a ransom note (the "_readme.txt" file). An example of how Yqal modifies filenames: it renames "1.jpg" to "1.jpg.yqal", "sample.png" to "sample.png.yqal", and so on. Yqal is part of the Djvu ransomware family.

What is spdate[.]com?

Spdate[.]com is a rogue site akin to captcharesolverhere.top, new-updates-service.com, yoursurveyprogram.com, and thousands of others. It is designed to load dubious content and/or redirect visitors to different (likely unreliable or malicious) websites.

Rogue pages are typically entered via redirects caused by suspect sites, intrusive adverts, or installed PUAs (Potentially Unwanted Applications).

What is Reads ransomware?

Part of the MedusaLocker ransomware family, Reads is a malicious program that encrypts data (renders files unusable) and demands ransoms for the decryption.

Compromised files are appended with a ".reads" extension, e.g., a file like "1.jpg" would appear as "1.jpg.reads", "2.jpg" as "2.jpg.reads", etc. Once this process is finished, a ransom-demanding message named "HOW_TO_RECOVER_DATA.html" is created.

What is the "Pornographics Security Warning" scam?

"Pornographics Security Warning" is a technical support scam. It claims that due to questionable activity having been detected - users' devices were blocked. The goal of this scheme is to trick victims into contacting the scammers, and afterwards- abuse their trust to generate revenue at their expense.

Deceptive sites that promote scams are typically accessed via mistyped URLs, or redirects caused by rogue webpages, intrusive advertisements, or installed PUAs (Potentially Unwanted Applications).

What is SpyAgent?

SpyAgent is a malicious program known to abuse legitimate Remote Access Tools (RATs) to gain access and control over infected machines. This malware has also been observed injecting devices with various Remote Access Trojans and data-stealers. SpyAgent has been actively proliferated via malicious cryptocurrency-themed websites.

What is HostEurope email scam?

It is a phishing scam. Typically, phishing emails are used to trick recipients into providing sensitive information (for example, login credentials, credit card details, social security numbers). They usually contain a link to a phishing page. Scammers behind such emails pretend to be legitimate companies or other entities.

What is Psychopath ransomware?

Psychopath is a piece of malicious software classified as ransomware. It operates by encrypting data (rendering the files inaccessible) and demanding payment for the decryption (access recovery).

Compromised files are appended with an extension that follows this pattern - "[ID=victim's_ID-Mail=psychopath7@tutanota.com].[4_random_characters]". For example, a file initially titled "1.jpg" would appear similar to "1.jpg[ID=39C73m-Mail=psychopath7@tutanota.com].1ohe", and so on for all of the affected files.

Once this process is complete, ransom notes are created/displayed in a pop-up window ("ReadMe_Now!.hta") and a text file named "Read_Me!_.txt".

What kind of malware is BLUE LOCKER?

BLUE LOCKER is ransomware. Malware of this type encrypts files, modifies their filenames, and generates a ransom note. BLUE LOCKER appends the ".blue" extension to filenames, for example, it renames "1.jpg" to "1.jpg.blue", "2.jpg" to "2.jpg.blue". Its ransom note is a text file named "restore_file.txt".

What kind of software is DataFile?

DataFile displays ads and promotes a fake search engine. It functions as adware and a browser hijacker. DataFile hijacks a web browser by changing some of its settings. Adware, browser-hijacking apps rarely get downloaded/installed on purpose. Lots of them are promoted and distributed using questionable (often deceptive) methods.

What kind of malware is Moia?

Moia is ransomware that belongs to a ransomware family called Djvu. It encrypts files and appends the ".moia" extension to their filenames. For instance, it renames "1.jpg" to "1.jpg.moia", "sample.jpg" to "sample.jpg.moia". Moia creates the "_readme.txt" file to provide instructions on how to contact the attackers for data recovery.