Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is MetaStealer?

MetaStealer is the name of an information stealer. Our team has discovered MetaStealer after analyzing a malspam campaign - an email sent by cybercriminals with a malicious file (MS Excel document) attached to it. Malware of this type gathers login information, credit card details, and other sensitive information.

What kind of page is dailyprotectioncentr[.]com?

Dailyprotectioncentr[.]com is a rogue webpage our research team discovered while inspecting untrustworthy sites. This page promotes deceptive content (scams), pushes browser notification spam, and redirects visitors to other (likely unreliable or malicious) webpages.

It is noteworthy that websites like dailyprotectioncentr[.]com are seldom accessed intentionally. Most users enter them through redirects caused by pages using rogue advertising networks.

What kind of scam is "Donation Campaign Has Been Launched To Support Ukraine"?

Our team has examined this email and concluded that it is a scam pretending to raise money for Ukrainian families. The email is disguised as a letter from Ukrainian Crisis Media Center. Scammers behind it attempt to trick recipients into transferring cryptocurrency.

What is "STC" email virus?

After analyzing this "STC" email, our researchers determined that it is illegitimate and intended to infect recipients' systems with FormBook malware.

This spam email is presented as a letter from STC SRL - an Italian science, technology, and consulting company. It must be emphasized that this mail is in no way associated with the aforementioned company.

What is Encyclopedia Wanderer?

Encyclopedia Wanderer is a browser extension endorsed as a learning tool, which our researchers discovered while inspecting deceptive download webpages. After analyzing this extension, we learned that it operates as advertising-supported software (adware).

What kind of page is freeadvworld[.]com?

Freeadvworld[.]com is a deceptive website designed to trick visitors into allowing it to show notifications. Our team has discovered it while examining other pages such as illegal movie streaming, torrent sites, and similar sites that use rogue advertising networks.

What is NetConnection?

NetConnection is an adware-type app that our research team discovered while inspecting new submissions to VirusTotal. We learned that this piece of software belongs to the AdLoad malware family. Our analysis uncovered that NetConnection is designed to run intrusive advertisement campaigns and may also have other harmful abilities.

What kind of application is Ad Block Ultra?

We have discovered the Ad Block Ultra application on a website offering faster web browsing with no advertisements (including ads on YouTube, Facebook, news sites, and many more). During our analysis, we noticed that this app generates its own advertisements. Thus, we concluded that Ad Block Ultra is an advertising-supported application.

What kind of malware is Erinalexralf?

Erinalexralf is ransomware that encrypts files and appends the ".enc" extension to filenames. It also creates the "HOW_TO_RETURN_FILES.txt" file containing a ransom note. We have discovered Erinalexralf ransomware while checking the malware samples submitted to the VirusTotal page.

An example of how files encrypted by Erinalexralf are renamed: "1.jpg" is renamed to "1.jpg.enc", "2.png" to "2.png.enc", "3.exe" to "3.exe.enc", and so forth.

What kind of malware is Uyjh?

Uyjh is ransomware designed to encrypt files, append the ".uyjh" extension to filenames, and create a ransom note (the "_readme.txt" file). We have discovered this ransomware variant while checking the VirusTotal site for recently submitted malware samples. We also found that Uyjh is part of the Djvu ransomware family.

An example of how this ransomware changes filenames: it renames a file named "1.jpg" to "1.jpg.uyjh", "2.png" to "2.png.uyjh", "3.exe" to "3.exe.uyjh", and so forth.