Virus and Spyware Removal Guides, uninstall instructions

What is biosc.xyz?

biosc.xyz is the address of a fake search engine, which is promoted through at least two browser hijackers called DISI APP and SApp+, Vitos APP. Generally, browser hijackers promote fake search engines by modifying browser settings. Additionally, apps of this type can often record data.

Few users download or install browser hijackers intentionally - this is caused inadvertently through rogue apps. Therefore, browser hijackers are categorized as potentially unwanted applications (PUAs).

What is the takeprizes-now[.]life site?

The takeprizes-now[.]life website promotes dubious content by redirecting to other untrustworthy and possibly malicious sites. This web page has been observed redirecting to the download pages of browser hijackers, however, redirects to the promotional websites of other rogue software are also likely.

Additionally, takeprizes-now[.]life has been known to redirect to sites running the "Dear [ISP name] user, Congratulations!" scam. Most visitors to takeprizes-now[.]life enter it through redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs). Note that these apps do not need explicit consent to infiltrate systems.

What is the "Medicare" email?

The "Medicare" emails are part of a scam campaign designed to proliferate Ursnif malware. These deceptive emails claim to contain information regarding payment transactions to the Australian healthcare insurance provider, Medicare. Rather than providing the alleged information, however, the attached file contains malware.

If opened, the file can trick people into starting the Ursnif installation process.

What is "Delayed payment confirmation caused by COVID-19"?

There is a has been a huge increase in malicious email scams during the current pandemic, most of which are coronavirus-themed. The cyber criminals behind them usually attempt to deceive visitors into transferring money, providing sensitive information, or installing malware.

This particular scam is sent to trick recipients into opening a malicious document, which then downloads a malicious file designed to install GuLoader.

What is Sealoid?

Sealoid is a browser hijacker. Software within this classification makes modifications to browser settings and restricts/denies access to them to promote fake search engines. Sealoid operates in this manner and also promotes feed.sealoid.com. Furthermore, it possess data tracking capabilities, which are employed to gather information relating to users' browsing habits.

Due to Sealoid's dubious proliferation methods, it is also classified as a Potentially Unwanted Application (PUA).

What is Spinyon?

Spinyon is rogue software within the browser hijacker category. Following successful infiltration, it modifies browser settings and promotes feed.spinyon.com, a bogus search engine. As is common to browser hijackers, Spinyon monitors browsing activity. Additionally, due to its dubious proliferation methods, Spinyon is also classified as a Potentially Unwanted Application (PUA).

What is SearchConverter?

SearchConverter supposedly improves the browsing experience, however, this app is classified as a browser hijacker. SearchConverter changes certain browser settings to feed.search-converter.com, the address of a fake search engine. It might also be capable of accessing and recording various information.

Browser hijackers are categorized as potentially unwanted applications (PUAs), since users often download and install them accidentally.

What is SearchWizard?

SearchWizard is software, categorized as a browser hijacker. Following successful installation, it modifies browser settings to promote feed.search-wizard.com (a fake search engine).

Additionally, SearchWizard monitors users' browsing habits. Since most users download/install this browser hijacker unintentionally, it is also classified as a Potentially Unwanted Application (PUA).

What is SearchOpedia?

SearchOpedia is advertised as an app supposedly designed to improve the browsing experience, however, it promotes a fake search engine (the feed.search-opedia.com) by modifying browser settings. Note that most browser hijackers change settings and also gather various data.

Commonly, users do not download or install apps such as SearchOpedia intentionally. Therefore, all browser hijackers are categorized as potentially unwanted applications (PUAs).

What is promodayz[.]com?

promodayz[.]com is a rogue website similar to checkandgo.info, overiesarticu.info, pushpush.net and thousands of others. It operates by promoting dubious content and/or by redirecting visitors to other untrusted or malicious web pages. Most users enter promodayz[.]com inadvertently - they are redirected to it by intrusive ads or by Potentially Unwanted Applications (PUAs).

Note that these apps do not require express permission to be installed onto devices. PUAs cause redirects, deliver intrusive advertisement campaigns, and record browsing-related data.