Virus and Spyware Removal Guides, uninstall instructions

Light Cleaner Unwanted Application

What is Light Cleaner?

According to Light Cleaner's developers, this program is designed to clean Windows Registry. It also works as an optimizer to improve PC performance. There are many programs of this type available and some developers promote them using dubious methods.

In this case, they distribute Light Cleaner using the "bundling" method. Therefore, it is categorized as potentially unwanted application (PUA). Be aware that most people install PUAs inadvertently.

   
a800 Ransomware

What is a800?

There are many ransomware-type programs that cyber criminals use to encrypt data and blackmail people (make ransom demands). Note that a800, a new variant of RotorCrypt ransomware discovered by Michael Gillespie, is an example of one of these programs.

This malicious program renames every encrypted file by adding the "!__help2decode@mail.com__.a800" extension. For example, "1.jpg" becomes "1.jpg!__help2decode@mail.com__.a800". Like most ransomware-type programs, a800 creates a ransom message - in this case, within a new text file called "recovery.instruction.txt".

   
Search.prosearchtip.com Redirect (Mac)

What is search.prosearchtip.com?

ProSearchTip is a deceptive application that supposedly enhances the browsing experience by improving search results, providing faster searches, and so on. This functionality may seem legitimate and useful, however, this app often infiltrates computers without users’ permission.

After successful infiltration, ProSearchTip modifies browser settings and continually monitors browsing activity by gathering data. Therefore, ProSearchTip is categorized as a browser hijacker and a potentially unwanted application (PUA).

   
Centers For Disease Control And Prevention Email Virus

What is "Centers for Disease Control and Prevention Email Virus"?

There are many spam email campaigns used on the internet. Cyber criminals send emails to infect users' computers with malicious programs.

"Centers for Disease Control and Prevention Email Virus" is just one example. It contains a link leading to a malicious attachment that infects computers with the Gandcrab 5.2 ransomware-type program. Once the attachment is opened, it downloads and installs the aforementioned computer infection.

   
Search.coloringhero.com Redirect (Mac)

What is search.coloringhero.com?

Identical to search.convertallfiles.com, search.playeti.com, search.byoml.com, and many others, search.coloringhero.com is a fake search engine that supposedly enhances the browsing experience by generating improved results.

Judging on appearance alone, search.coloringhero.com may seem legitimate and useful, however, developers promote this website using a browser-hijacking adware called Coloring Hero. In addition, search.coloringhero.com and Coloring Hero continually gather information relating to users' browsing habits.

   
Vidar Trojan

What is Vidar?

Vidar (also known as Vidar Stealer) is a trojan (a malicious program) commonly used by cyber criminals. The program steals various personal information from users who have computers infected with the virus.

Vidar is distributed mainly through Fallout exploit kit, however, there might also be other ways. The program can be purchased by anyone at a cost of $700 (at time of research).

   
NWA Ransomware

What is NWA?

NWA is a new variant of high-risk ransomware called Dharma. Following successful infiltration, NWA encrypts most stored data. In addition, this malware appends filenames with the victim's ID, developer's email address, and the ".NWA" extension.

For instance, "sample.jpg" might be renamed to a filename such as "sample.jpg.id-1E857D00.[dr.crypt@aol.com].NWA". Once encryption is complete, NWA places a "FILES ENCRYPTED.txt" text file on the victim's desktop and opens a pop-up window.

   
FootbalScores24 Browser Hijacker

What is blpsearch.com?

FootbalScores24 is a sports-themed application that, according to its developers, allows users to receive the latest football results directly from their browsers. A convenient, fast web search is also promised. This may seem to be a useful and legitimate application, however, it is categorized as a potentially unwanted application (PUA), a browser hijacker.

If installed, PUAs regularly collect information relating to users' browsing activity. Furthermore, FootbalScores24 modifies browser settings and promotes a fake search engine called blpsearch.com.

   
Yatron Ransomware

What kind of malware is Yatron?

Yatron is a ransomware-type virus that is promoted as 'Ransomware as a Service' (RaaS). After successful infiltration, Yatron encrypts most stored data and appends filenames with the ".Yatron" extension (e.g., "sample.jpg" is renamed to "sample.jpg.Yatron"). Another variant of Yatron ransomware appends ".down_with_usa" extension.

This malware is also known to delete shadow volume copies of encrypted data. Once encryption is complete, Yatron generates a text file ("Read@My.txt"), places a copy in each existing folder, and opens a pop-up window that contains a ransom-demand message. Furthermore, Yatron is implemented with several features that allows it to proliferate itself even further.

   
SecureDossier Unwanted Application

What is SecureDossier?

SecureDossier is a program that supposedly allows users to optimize their computers by cleaning drives, improving system performance, and protecting them while browsing the web. Note that many people install this program on their systems unintentionally.

SecureDossier is categorized as a potentially unwanted application (PUA), since developers promote it using the "bundling" method (it is often installed together with other software).

   

Page 1459 of 2130

<< Start < Prev 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal