Virus and Spyware Removal Guides, uninstall instructions

What kind of page is reminderapp[.]store?

We have discovered the reminderapp[.]store site while examining various shady websites that use rogue advertising networks. We found that it runs various scams that use scare tactics to trick visitors into downloading a certain application and displays other questionable content. Thus, reminderapp[.]store website cannot be trusted.

What kind of malware is Udla?

Udla is ransomware that belongs to a ransomware family called Djvu. Our team has discovered the Udla ransomware variant while examining the samples submitted to VirusTotal. After analyzing it, we found that it encrypts files, appends the ".udla" extension to filenames, and creates the "_readme.txt" file as its ransom note.

An example of how Udla modifies filenames: it renames "1.jpg" to "1.jpg.udla", "2.png" to "2.png.udla", and so forth.

What kind of malware is Gtys?

Gtys is ransomware that encrypts files and changes their extension to ".gtys". It is one of the variants belonging to the Djvu ransomware family. Our team has discovered it while checking malware samples submitted to VirusTotal. The ransom note ("_readme.txt" file) contains instructions on how to contact the attackers for data decryption.

An example of how Gtys renames files: it changes "1.jpg" to "1.jpg.gtys", "2.png" to "2.png.gtys", and so forth.

What kind of malware is Mpag?

Mpag is ransomware that encrypts files, modifies filenames by appending the ".mpag" extension to them, and creates a text file ("_readme.txt") containing a ransom note. Mpag is part of the Djvu ransomware family. We have discovered this variant while checking VirusTotal for recently submitted malware samples.

An example of how Mpag renames files: it replaces "1.jpg" with "1.jpg.mpag", "2.jpg" with "2.jpg.mpag", and so forth.

What kind of malware is Voom?

Voom is the name of a Djvu ransomware variant that has been discovered by our team during the analysis of malware samples submitted to the VirusTotal page. This variant encrypts files and appends the ".voom" extension to filenames. It also generates the "_readme.txt" file containing contact and payment information/a ransom note.

An example of how files are renamed by Voom ransomware: "1.jpg" is renamed to "1.jpg.voom", "2.png" to "2.png.voom", and so on.

What kind of malware is Muse Miner?

Muse Miner is the name of a cryptocurrency miner. Our team has discovered it in a hacker forum. The cost of its weekly subscription is $25, the monthly subscription costs $80, and the lifetime subscription costs $500. Muse Miner mines Bitcoin (BTC), Ethereum (ETH), and Ethereum Classic (ETC) cryptocurrencies.

What kind of website is mydefensivesoft[.]com?

Mydefensivesoft[.]com is a deceptive website running the "McAfee - Your PC is infected with 5 viruses!" scam and asking for permission to show notifications. Our team has discovered it while analyzing other pages (illegal movie streaming, torrent, and similar pages) that use rogue advertising networks.

What kind of application is SmartLauncher?

Our team has discovered the SmartLauncher while examining shady websites that displayed deceptive content to trick visitors into downloading questionable applications. Once installed, SmartLauncher started to generate advertisements. Thus, we have concluded that SmartLauncher is a typical advertising-supported app (adware).

What kind of application is ProcessorCactus?

ProcessorCactus is an untrustworthy application that is promoted using shady websites. After downloading and installing it, we learned that it operates as adware - it generates intrusive advertisements. It is not recommended not to have apps of this type installed on the operating system. Especially when they are downloaded from unreliable sources.

What kind of scam is "Free Msg: Your bill is paid for March."?

It is a type of scam carried out over mobile text messaging. Scammers behind it seek to trick recipients into believing that they have received a "little gift" for paying a monthly bill. The message comes from the recipient's number - it looks like a legitimate message from the recipient himself. It also contains a website link.