Virus and Spyware Removal Guides, uninstall instructions

What is Andradegalvao?

Andradegalvao is a new variant of BitPyLock ransomware. This malicious program is designed to encrypt data and demand payment for decryption tools/software. During the encryption process, all affected files are appended with the ".andradegalvao" extension.

For example, a file such as "1.jpg" would appear as "1.jpg.andradegalvao" following encryption, and so on for all compromised files. After this process is complete, an HTML file ("# HELP_TO_DECRYPT_YOUR_FILES #.html") containing the ransom message is stored in each encrypted folder.

What is Get Your Coupons Now?

As its name suggests, the Get Your Coupons Now app is designed to provide quick access to various websites that contain coupons, deals, and so on. In fact, this app is categorized as a potentially unwanted application (PUA), a browser hijacker. This application promotes a fake search engine (search.getyourcouponsnowtab.com) by changing certain browser settings.

Most browser hijackers also collect browsing data. Note that people often download and install browser hijackers (and other PUAs) inadvertently. Furthermore, Get Your Coupons Now is installed together with another PUA called Hide My Searches.

What is Your Streaming TV App?

Your Streaming TV App is a rogue application, categorized as a browser hijacker. It is endorsed as a tool for easy access to TV and video streaming services. Following successful infiltration, this app modifies browsers in order to promote search.yourstreamingtvapptab.com - a fake search engine.

Additionally, Your Streaming TV App has data tracking abilities, which are employed to spy on users' browsing habits. Due to its dubious proliferation methods, it is also classified as a PUA (Potentially Unwanted Application). Your Streaming TV App is often distributed alongside Hide My Searches - another PUA.

What is Gamez 4 Us Search?

Gamez 4 Us Search is a potentially unwanted application (PUA) that is classified as a browser hijacker. Browser hijackers usually promote fake search engines (by changing certain browser settings) and gather information relating to users' browsing habits.

Gamez 4 Us Search promotes feed.gamez4us.com. In most cases, people download and install apps of this type inadvertently (this is the main reason why they are classified as PUAs).

What kind of malware is R2D2?

R2D2 is a malicious program belonging to the Crysis/Dharma ransomware family. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption.

When encryption is underway, all affected files are renamed according to the following pattern: original filename, unique ID (generated individually for each victim), cyber criminals' email address and ".R2D2 " extension. For example, a file such as "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[1024back@tuta.io].R2D2" following encryption.

After this process is complete, a text file ("FILES ENCRYPTED.txt") is created on the desktop and a pop-up window is displayed.

What is Major Lazer Fortnite Wallpapers Tab?

Major Lazer Fortnite Wallpapers Tab is a browser hijacker designed to promote google.megathemes.info, a fake search engine. It operates by modifying browser settings and monitoring users' browsing activity. Additionally, it attempts to disguise its bogus search engine as a customized Google web search.

Due to the dubious methods used to proliferate Major Lazer Fortnite Wallpapers Tab, it is also classified as a Potentially Unwanted Application (PUA).

What is trendyarticle[.]com?

trendyarticle[.]com is a rogue website, which is similar to newscoder7.com, twok.pro, restonovius.com and thousands of others. Visitors to this site are presented with dubious or harmful content, and they can also be redirected to other untrusted or malicious websites.

Few users enter trendyarticle[.]com intentionally, since most are redirected to it by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system. These apps do not require express user permission to be installed onto their devices. PUAs cause redirects, run intrusive ad campaigns and gather browsing-related information.

What is Play Radio Easily?

Play Radio Easily supposedly provides access to various online radio streaming websites, however, after installation, it assigns certain browser settings to search.playradiotab.com. Therefore, Play Radio Easily is classified as a browser hijacker, a potentially unwanted application (PUA) that promotes the address of a fake search engine.

PUAs often collects various system information relating to users' browsing habits. Note that Play Radio Easily is also distributed with another PUA called Hide My Searches.

What is "Adobe Flash Player" is out of date"?

When opened, this deceptive website displays a pop-up window suggesting that the installed version of Adobe Flash Player is out of date and encourages users to download and install the latest version. At the time of research, this page downloaded an installer of two applications: Media Player and MyCouponsmart.

Like most websites of this type, this page is designed to trick people into installing potentially unwanted applications (PUAs). In most cases, these sites distribute PUAs such as browser hijackers and adware, however, some attempt to trick visitors into installing Trojans, ransomware and other high-risk malware.

What is View Online Recipes?

View Online Recipes is endorsed as a tool for easy access to various popular food recipe websites. This application is categorized as a browser hijacker, as it makes modifications to browser settings to promote search.viewonlinerecipestab.com (a fake search engine).

Furthermore, View Online Recipes has data tracking capabilities, which are employed to monitor users' browsing activities. It is also classified as a potentially unwanted application (PUA) due to the dubious methods by which it is proliferated. View Online Recipes is often distributed together with another PUA called Hide My Searches.