Virus and Spyware Removal Guides, uninstall instructions

XiaoBa Ransomware

What is XiaoBa?

First discovered by MalwareHunterTeam, XiaoBa is a ransomware-type virus that stealthily infiltrates systems and encrypts stored files. During encryption, XiaoBa appends filenames with the ".Encrypted[BaYuCheng@yeah.net].XiaBa" extension (e.g., "sample.jpg" is renamed to "sample.jpg.Encrypted[BaYuCheng@yeah.net].XiaBa").

Following successful encryption, XiaoBa creates two files ("_XiaoBa_Info_.hta" and "_XiaoBa_Info_.bmp"), placing them on the desktop. It also opens the .hta file and sets the .bmp file as the desktop wallpaper. Other variants of this ransomware use ".[BaYuCheng@yeah.net].china" and .[xiaoba_666@163.com]Encrypted_(victim ID).XIAOBA extensions for encrypted files.

   
Windows Product Key Expired POP-UP virus

What is Windows Product Key Expired?

"Windows Product Key Expired" is another fake error similar to Google Security Warning, Cydoor Spyware, Internet Security Alert, and many others. 

This error is displayed by a malicious website that users often visit inadvertently - they are redirected by various PUPs (potentially unwanted programs) that infiltrate systems without permission. Be aware that most PUPs deliver intrusive ads (coupons, banners, pop-ups, so forth), gather sensitive data, and reduce overall system performance.

   
One System Care Unwanted Application

What is One System Care?

One System Care is presented as an application that helps to clean computer systems of various junk files - "OneSystemCare fully cares for your laptop and computer to protect it from unnecessary junk files and recurring issues by thoroughly scanning and inspecting its many components." 

This functionality may seem legitimate and useful, however, One System Care is classed as a potentially unwanted program (PUP). The reasons for these negative associations are stealth installation and tracking of web browsing activity.

   
Go.mennythanks.com Redirect

What is go.mennythanks.com?

Identical to go.bonefreeze.com, and a number of others sites, go.mennythanks.com is a fake web search engine that, according to the developers, enhances the browsing experience by generating improved results. Judging on appearance alone, go.mennythanks.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, many users believe that go.mennythanks.com is also legitimate, however, developers promote this fake search engine using a browser-hijacking app called Mennythanks. In addition, go.mennythanks.com and Mennythanks continually record user-system information relating to web browsing activity.

   
Junbi-tracker.com POP-UP Redirect

What is junbi-tracker.com?

Similar in many ways to billmscurlrev.com, questionfly.com, popunderzone.com, and many others, junbi-tracker.com is a rogue website designed to redirect users to various other deceptive sites.

In most cases, users visit junbi-tracker.com inadvertently - they are redirected to it by potentially unwanted programs (PUPs) that are installed on computers without consent. PUPs also provide intrusive advertisements and gather sensitive user-system information.

   
Jumpers.mobi POP-UP Redirect

What is jumpers.mobi?

jumpers.mobi is a rogue website that is identical to many other sites (such as nametraff.com, thesterminator.com, and celeryleek.com) of this type.

These sites redirect from one rogue site to another. Users are likely to to visit jumpers.mobi inadvertently - they are redirected by potentially unwanted programs (PUPs) that infiltrate systems without users' consent. They can cause redirects, but also deliver intrusive ads and collect information relating to browsing habits (and other data).

   
Incluster.com POP-UP Redirect

What is incluster.com?

incluster.com is another rogue website (similar to dealclicks.us, goldoffer.online, redirecting.zone, and many more) that redirects to various other dubious/suspicious websites.

Users are often redirected to these websites by potentially unwanted programs (PUPs) or intrusive ads that are displayed on other dubious websites. Therefore, many users visit incluster.com without their consent. PUPs are typically installed without permission, cause redirects, collect sensitive data, and deliver intrusive ads.

   
Hyptas.com POP-UP Redirect

What is hyptas.com?

Identical to other sites (such as allbest.mobi, bestabid.com, and securecould-dl.com), hyptas.com is a rogue website that redirects to other dubious and potentially malicious websites.

In most cases, users arrive at hyptas.com inadvertently - probably via potentially unwanted programs (PUPs) or intrusive ads that trigger redirects to the website. PUPs usually infiltrate systems without permission, cause redirects, provide intrusive ads, and collect information relating to browsing activity.

   
Greatene.com POP-UP Redirect

What is greatene.com?

greatene.com is a rogue website similar to toroadavdertisingmedia.com, smartoffer.site, adskpak.com and many others of this type that redirect to other (potentially malicious) websites.

In most cases, users visit these sites inadvertently - they are redirected by intrusive advertisements or potentially unwanted programs (PUPs). These are usually installed without permission, cause redirects to unwanted/dubious websites, provide users with intrusive ads, and collect private information.

   
DjvuApp Adware

What is DjvuApp?

DjvuApp (also known as WniDjView) is an open-source application that allows users to view the DjVu file format. This app is legitimate and useful, however, cyber criminals inject DjvuApp's source code with malicious scripts.

Therefore, some variants of this application are categorized as adware and potentially unwanted programs (PUPs). The main reasons for these negative associations are: 1) stealth installation without users' consent; 2) tracking of web browsing activity, and; 3) display of intrusive advertisements.

   

Page 1600 of 2134

<< Start < Prev 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal