Virus and Spyware Removal Guides, uninstall instructions

What kind of page is lightninganvil[.]top?

Lightninganvil[.]top is a rogue webpage that our researchers discovered while checking out suspicious sites. This page is designed to promote browser notification spam and redirect users to other (likely unreliable/harmful) websites.

Most visitors to lightninganvil[.]top and webpages akin to it access them via redirects generated by sites utilizing rogue advertising networks.

What kind of malware is BiBi?

BiBi is a type of malware known as a wiper, and it targets both Linux and Windows users (there are two variants of BiBi targeting different operating systems). Wiper malware is a destructive form of malicious software designed to erase or damage data on infected systems irreversibly. A group of hackers with ties to Hamas may be responsible for creating BiBi.

What kind of page is abyssalforge[.]top?

Upon inspection, it has been determined that abyssalforge[.]top is one of the numerous websites that display deceptive content to deceive visitors into allowing them to deliver notifications. Additionally, abyssalforge[.]top is designed to redirect users to unreliable websites. Thus, users should ignore and avoid visiting abyssalforge[.]top.

What kind of application is PythonRegius?

While examining the PythonRegius application, we found that it can access various data, manage apps, extensions, and themes in the Chrome browser, and activate the "Managed by your organization" feature. It is important to note that PythonRegius is distributed via a malicious installer. Thus, it can cause various issues for users.

What kind of page is streamvideoplayer.co[.]in?

Our researchers discovered the streamvideoplayer.co[.]in rogue site during a routine investigation of suspicious websites. This page operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/malicious) sites.

The majority of users access webpages like streamvideoplayer.co[.]in via redirects caused by pages that employ rogue advertising networks.

What kind of malware is 1337?

Our research team found 1337 ransomware during a routine inspection of new submissions to VirusTotal. Malware within this classification is designed to encrypt files in order to make ransom demands for their decryption.

On our test machine, 1337 ransomware encrypted files and appended their filenames with a ".1337" extension. To elaborate, a file initially titled "1.jpg" appeared as "1.jpg.1337", "2.png" as "2.png.1337", etc. Afterward, a ransom note – "yourhope.txt" – was dropped.

What kind of page is codsmedia[.]com?

While inspecting shady pages, we came across codsmedia[.]com, another page of this kind. It has been discovered that codsmedia[.]com is a deceptive page designed to display deceptive content to trick users into performing a certain action. In most cases, users open sites like codsmedia[.]com inadvertently.

What kind of page is dersibledozeder[.]com?

It has been determined that dersibledozeder[.]com is an untrustworthy website that displays deceptive content to lure visitors into making a specific action. Also, dersibledozeder[.]com redirects visitors to other suspicious pages. Therefore, users should avoid visiting dersibledozeder[.]com.

What kind of malware is Serpent?

Serpent is the name of a lightweight stealer-type malware. This malicious program targets log-in credentials (usernames/passwords) and other sensitive information by extracting it from browsers and various different applications.

What kind of page is spadshub[.]com?

Spadshub[.]com is a rogue webpage that promotes browser notification spam and redirects users to different (likely untrustworthy/hazardous) sites. Most visitors to such pages enter them through redirects generated by websites using rogue advertising networks. Our researchers discovered spadshub[.]com while investigating sites that utilize said networks.