Virus and Spyware Removal Guides, uninstall instructions

Delete Facebook Messages Browser Hijacker

What is Delete Facebook Messages?

The Delete Facebook Messages app supposedly allows users to archive and/or delete Facebook messages. In fact, this is a browser hijacker that changes browser settings (thereby promoting a dubious website) and gathers details relating to users' browsing habits.

Most people do not download or install these apps intentionally and they are categorized as potentially unwanted applications (PUAs).

   
Arsium Ransomware

What is Arsium?

Discovered by Jan0fficial, Arsium is the name of a ransomware builder - software that allows cyber criminals to generate malicious executables. If launched, these infect computers with ransomware. Programs of this type lock files strong encryption algorithms.

Ransomware is used to blackmail people by forcing them to buy decryption software and/or keys from the cyber criminals who designed the program. Use of programs such as Arsium and spreading ransomware is illegal. Arsium is promoted through a nulled[.]to forum.

   
Likemyculture.info Ads

What is likemyculture[.]info?

likemyculture[.]info is a rogue website that shares many similarities with checking-your-browser.comgoodmedia.meloostnews.biz, and many others. The purpose of this site is to redirect users to other rogue websites and feed them with dubious content.

Websites such as likemyculture[.]info are typically visited unintentionally - users are redirected by potentially unwanted applications (PUAs) or intrusive ads delivered by other rogue sites. PUAs infiltrate computers without users' consent and cause unwanted redirects. They also deliver intrusive advertisements and gather information relating to web browsing activity.

   
Masok Ransomware

What is Masok?

Discovered by Michael Gillespie, Masok is a ransomware-type program that belongs to the Djvu family. The cyber criminals who designed Masok spread it to make money from unsuspecting people who cannot access their files due to encryption by this ransomware.

To decrypt their files, victims are encouraged to purchase a decryption tool and key. Masok modifies the extension of each encrypted file by changing it to ".masok". For example, "1.jpg" becomes "1.jpg.masok". Instructions about how to pay the ransom (and contact Masok developers) are provided in the "_readme.txt" text file.

   
Dingboronhartal.pro Ads

What is dingboronhartal[.]pro?

Identical to ernorvious.comclckworld.clubdreamteammyfriend.com, and many others, dingboronhartal[.]pro is a rogue website designed to feed users with dubious content and redirect them to other rogue sites.

Most visitors arrive at dingboronhartal[.]pro inadvertently - they are redirected by potentially unwanted applications (PUAs) or intrusive ads that people click on untrustworthy sites. PUAs infiltrate computers without users’ permission. Following infiltration, they cause redirects, generate intrusive advertisements, and redirect to rogue websites.

   
MyOfficeX Browser Hijacker

What is MyOfficeX?

MyOfficeX supposedly allows users to access an online office, which includes free processing of Word files, spreadsheets, and presentations. In fact, research shows that this app is a browser hijacker and a potentially unwanted application (PUA). Frequently, people download and install PUAs inadvertently.

Like most browser hijackers, MyOfficeX promotes a dubious search engine (in this case, services.myofficex-svc.org) by changing browser settings and collecting various data relating to users' browsing activities.

   
Free-coupons.network Ads

What is free-coupons[.]network?

free-coupons[.]network is one of many rogue websites designed to feed users with dubious content and redirect them to other rogue sites. It is virtually identical to goodmedia.me, seplumming.pro, checking-your-browser.com, and many others.

Many users visit this site inadvertently, as they are redirected by potentially unwanted applications (PUAs) or intrusive ads generated by other rogue sites. PUAs often infiltrate computers without users' consent and, as well as causing redirects, deliver intrusive advertisements and gather sensitive data.

   
ERIS RANSOMWARE v2

What is ERIS RANSOMWARE v2?

As its name suggests, ERIS RANSOMWARE v2 it is a new version of Eris ransomware. Cyber criminals proliferate it to extort money from people by forcing them to pay ransoms. These programs lock (encrypt) files and prevent access unless a ransom is paid.

This version of Eris creates a text file (ransom message) and renames all encrypted files by adding a random extension such as ".OBIDC". For example, "1.jpg" might be renamed to "1.jpg.OBIDC". The name of the text file/ransom message is "HELP-random characters" and, in our example, is called "HELP-OBIDC".

   
Optimalsearch.me Redirect (Mac)

What is optimalsearch.me?

Identical to searchitnow.info and searchmarquis.com, optimalsearch.me is a fake search engine that supposedly enhances the browsing experience by generating improved results. In fact, this site is promoted using rogue downloaders/installers designed to modify browser settings without users' permission (browser hijackers). Additionally, optimalsearch.me gathers data relating to browsing habits.

   
Junior Ransomware

What is Junior?

Discovered by Jakub Kroustek, Junior is the name of a new version of Paradise ransomware. Like many other programs of this type, Junior encrypts data and encourages victims to pay a ransom.

It creates a ransom message within an HTML file called "%= RETURN FILES =&.html" and renames locked filenames by adding an email address, a unique victim ID, and the ".junior" extension. For example, Junior renames "1.jpg" to "1.jpg.id-Q7T4L8ZL].[mr.yoba@aol.com].junior".

   

Page 1353 of 2107

<< Start < Prev 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal