Virus and Spyware Removal Guides, uninstall instructions

What is Macro Malware?

Macro Malware (also known as Microsoft Office Macro Virus or simply Macro Virus) is the generic name for system infections distributed using Microsoft Office macro commands.

Cyber criminals design MS Office documents to execute commands that download and install viruses onto the system. In most cases, these infections are in the form of documents proliferated using spam email campaigns.

What is search.pdftycoon.com?

search.pdftycoon.com is a fake search engine that is virtually identical to search.yadbazelet.com, search.elifaint.com, search.fegline.com and many others of this type. Developers promote this site using an adware-type potentially unwanted app (PUA) called PDF Tycoon.

This app (and its associated fake search engine) collects data relating to users' browsing habits and modifies browser settings.

What is Advanced Clean Pro?

Advanced Clean Pro is a dubious application that supposedly allows users to optimize their computers and enhance performance by removing infections and fixing system errors.

Initially, this app may seem legitimate, however, it is distributed using a deceptive marketing method called "bundling" and often infiltrates systems without users' consent. Therefore, Advanced Clean Pro is categorized as a potentially unwanted application (PUA).

What is "TD Bank Email Virus"?

"TD Bank Email Virus" is a scam that cyber criminals use to infect computers by tricking people into opening attachments included within rogue emails. Scammers use this particular spam campaign to proliferate the TrickBot malicious program. This is high-risk computer infection that can cause serious problems. If you receive this email, ignore it.

What is mystreamingtab.com?

mystreamingtab.com is another fake search engine that supposedly enhances the browsing experience by generating improved results and providing quick access to popular websites. Judging on appearance alone, mystreamingtab.com may seem legitimate and useful, however, this site is promoted using a browser-hijacking app called MyStreamingTab.

This is a potentially unwanted application (PUA), which claims to provide free access to various movies and TV shows. In addition, mystreamingtab.com records user-system information relating to browsing activity.

What is "Fake Flash Player Update"?

"Fake Flash Player Update" is a scam used to trick people into downloading an unofficial (fake) Flash Player that is presented as the Adobe Flash Player (it uses a very similar logo). This scam is distributed through a deceptive and unofficial website.

Generally, people arrive at websites of this type due to adware-type, potentially unwanted apps (PUAs) installed on their systems. These installations are often caused unintentionally. Once installed, PUAs deliver annoying, unwanted advertisements and collect user-system information.

What is deparationew.info?

deparationew.info is a typical rogue website similar to others of this type such as concreasun.info, verifycaptcha.com, newpush.support, and many more. It redirects visitors to untrustworthy sites or displays dubious content. Most users visit this site unintentionally - they are redirected to it by potentially unwanted applications (PUAs).

People often install these apps inadvertently. PUAs usually feed users with advertisements and collect information relating to browsing habits.

What is Rietspoof?

Rietspoof is relatively new malware that entered the scene in mid-2018. Initially, the malware was not widely proliferated or sophisticated, however, developers continually add features and the infection rate increases. Therefore, Rietspoof becomes more of an issue as time passes.

At time of writing, Rietspoof was used to cause chain infections. Therefore, cyber criminals employ Rietspoof to inject other malware into the system.

What is GANDCRAB 5.2?

GANDCRAB 5.2 is ransomware-type program used by developers (cyber criminals) to encrypt data stored on victims' computers and to keep it in that state until a ransom is paid. This program creates a ransom message and generates a random name for it. For example, "DSEWRBG-DECRYPT.txt".

GANDCRAB 5.2 does the same with the extension, which it adds to each encrypted file. For example, "1.jpg" becomes "1.jpg.dsewrbg". It also changes the victim's desktop wallpaper. GANDCRAB 5.2 is one of many variants of GANDCRAB ransomware.

What is stalluva.pro?

stalluva.pro is another rogue site that shares similarities with chromext.club, omumultation.club, shaimsaijels.com, bodelen.com, and dozens of others. As with these examples, stalluva.pro causes redirects to rogue websites and displays dubious content.

Research shows that users typically visit stalluva.pro inadvertently, since they are redirected by potentially unwanted applications (PUAs) or intrusive ads displayed on other rogue sites. PUAs usually infiltrate computers without users' permission, cause unwanted redirects, generate advertisements, and record information relating to browsing habits.