Virus and Spyware Removal Guides, uninstall instructions

What is younwild[.]com?

younwild[.]com has similar behavior to zahkit[.]pro, usinesmycete[.]info, scuseami[.]net and many other rogue websites. When visited, it opens a number of other untrusted pages or loads dubious content.

Typically, websites such as younwild[.]com are opened through various dubious web pages, deceptive ads or by potentially unwanted applications (PUAs) installed on the system. Apps of this type usually gather browsing-related details and/or display advertisements.

What is yourday-winprize[.]life?

yourday-winprize[.]life redirects visitors to various other potentially malicious, deceptive and untrusted websites.

Typically, people do not arrive at websites such as yourday-winprize[.]life intentionally - in most cases, they are opened through other untrusted websites, dubious advertisements or potentially unwanted applications (PUAs) installed on the browser and/or operating system. No websites opened through yourday-winprize[.]life can be trusted.

What is rewardsawesome[.]com?

rewardsawesome[.]com is a rogue website designed to promote untrusted/malicious pages and/or present visitors with dubious content. The site has been observed promoting various fake prize-oriented scams.

During research, rewardsawesome[.]com has promoted "Congratulations Amazon shopper!", "Congratulations Samsung user!", "Dear YouTube user, Congratulations!", "Congratulations Walgreens shopper!" and "Congratulations Walmart shopper!" scams.

Most users enter rewardsawesome[.]com via redirects generated by intrusive advertisements and/or Potentially Unwanted Applications (PUAs) already infiltrated into the system. Note that these apps do not need express user consent to be installed onto devices.

What is AlphaBetaCrypt?

AlphaBetaCrypt ransomware is designed to encrypt victims' files, change the filenames and create a text file (containing the ransom message).

The program renames all files by appending the ".CRYPT" extension (e.g., it renames "1.jpg" to "1.jpg.CRYPT", and so on), and creates the "README_README_README_README.txt" text file, which contains instructions about how to contact AlphaBetaCrypt's developers plus some other information.

What is "Congratulations Samsung user!"?

"Congratulations Samsung user!" is a scam run on deceptive web pages. It claims that, due to visitors' support of "Samsung" services, the company is offering the chance to win an "exclusive reward". Note that this dubious scheme has no connection with Samsung.

Additionally, any prizes offered are bogus. At the time of research, the scam simply redirected to a website stating "Thank You", however, in most cases, these scams steal users' personal information (e.g. names, email addresses, banking details, etc.) and/or to trick them into making monetary transactions (e.g. paying shipping fees for the bogus prize, etc.).

Typically, visits to deceptive/scam web pages occur via redirects caused by intrusive ads or by Potentially Unwanted Applications (PUAs) already infiltrated into the system.

What kind of malware is LIVE?

LIVE is a malicious program belonging to the Dharma ransomware family. Systems infected with it have their data encrypted and users receive ransom demands for decryption tools/software. When this ransomware encrypts, all filenames are appended with a unique ID, the developer's email address and the ".LIVE" extension.

For example, a file originally entitled "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[cryptlive@aol.com].LIVE". When this process is  complete, a text file ("FILES ENCRYPTED.txt") is dropped onto the desktop and a pop-up window is displayed. Both contain ransom messages.

What is "Congratulations Walgreens shopper!"?

This lottery scam is disguised as a lottery organized by Walgreens. Like many other legitimate companies, Walgreens is not a part this or other similar scams in any way. Typically, scammers behind these websites attempt to deceive visitors into participating in a fake lottery and providing personal details so that they can misuse them to generate revenue.

We strongly recommend that you ignore this and other similar scams. Typically, these sites are opened through other dubious web pages, deceptive advertisements or potentially unwanted applications (PUAs) that are installed on browsers and/or operating systems. I.e., people do not visit websites of this kind intentionally.

What is lucky-gifts-center[.]com?

lucky-gifts-center[.]com is the address of a website that is designed to display various lottery scams. For example, "Dear [ISP name] user, Congratulations!", "Congratulations Walmart Shopper!" and "Dear Safari User, You Are Today's Lucky Visitor". It loads fake lottery web pages designed by scammers who seek to obtain various personal details.

Note that no web pages loaded by lucky-gifts-center[.]com can be trusted. Typically, they are opened through other untrusted websites, deceptive advertisements or by potentially unwanted apps (PUAs) that are installed on browsers and/or computers. I.e., people rarely visit these sites intentionally.

What is "Dear YouTube user, Congratulations!"?

"Dear YouTube user, Congratulations!" is a scam, which is promoted on deceptive sites. It operates by claiming that visitors have been selected as one of "10 lucky YouTube watchers" to claim a prize in the form of an Amazon or Walmart gift-card.

At the time of research, this scam simply redirected to a web page stating "Thank You", however, such scams are employed to trick users into revealing their personal information (e.g. bank accounts or credit card details, names, email addresses, etc.) and/or making monetary transactions, (e.g. fake prizes/gift shipping fees and similar payments).

Few visitors to deceptive websites enter them intentionally - most are redirected by intrusive ads or dubious apps already infiltrated into the system. Note that unwanted apps do not require express permission to be installed onto users' devices.

What is zahkit[.]pro?

Sharing many similarities with usinesmycete.info, scuseami.net, pushbestdevice.com and countless others, zahkit[.]pro is an untrusted/rogue website. It presents visitors with highly dubious content and/or redirects them to other dubious or malicious web pages.

Typically, these pages are accessed via redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs). Note that PUAs do not need users' permission to infiltrate their systems.