Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Vtym?

Vtym is ransomware that encrypts files and appends the ".vtym" extension to filenames. Our malware researchers have discovered this ransomware variant while analyzing the samples submitted to the VirusTotal page. It was found that Vtym is part of the Djvu ransomware family. It also creates the "_readme.txt" file containing contact and payment information.

An example of how Vtym modifies filenames of the encrypted files: it renames "1.jpg" to "1.jpg.vtym", "2.png" to "2.png.vtym", "3.exe" to "3.exe.vtym", and so forth.

What is "TROJAN Zeus2021 spyware adware detected"?

"TROJAN Zeus2021 spyware adware detected" is a scam our research team discovered while inspecting sites promoted by spam browser notifications. This scheme is presented as a virus alert from Microsoft. It must be emphasized that it is in no way associated with the Microsoft Corporation or its products.

Furthermore, it is noteworthy that no website can detect threats/issues present on a system - hence, any that claim such are scams.

What is UltraADSBlockSearch?

UltraADSBlockSearch is a browser extension our research team found while inspecting dubious download webpages. Following its analysis, we have determined that this piece of software operates as a browser hijacker. UltraADSBlockSearch modifies browser settings to promote the ultraadsblocksearch.com fake search engine. Additionally, this extension spies on users' browsing activity.

What kind of page is myhypestories[.]com?

Our researchers discovered the myhypestories[.]com page while inspecting rogue websites. This site is designed to promote browser notification spam and redirect visitors to other untrustworthy/malicious webpages. Most users enter myhypestories[.]com and similar sites through redirects caused by pages that use rogue advertising networks.

What kind of scam is "UN Ukraine Humanitarian Organization"?

Not so long ago, scammers were taking advantage of the COVID-19 pandemic by pretending to be legitimate organizations or other entities and asking to send money, provide sensitive information, etc. We have examined this email and found that scammers behind it are pretending to raise money for Ukraine.

What is the "UNHCR" scam email?

After inspecting this "UNHCR" email, our researchers determined that it is fake. The letter is presented as a donation campaign held by the UNHCR (United Nations High Commissioner for Refugees). It must be emphasized that this email is fake and in no way associated with the actual UNHCR. This scam uses the war in Ukraine as a backdrop to trick recipients into transferring funds to the cyber criminals.

We strongly advise using only official channels to make any donations. Since those endorsed via random emails, SMSes, or other messages - are likely to be fraudulent. Even if a source appears legitimate, we urge you not to use donation channels promoted through unsolicited mail.

What kind of page is captcha4greatpeaple[.]top?

Captcha4greatpeaple[.]top is designed to trick visitors into allowing it to show notifications (into clicking the "Allow" button displayed by a browser). Our team discovered this page while examining torrent sites, illegal movie streaming sites, and other pages that use shady advertising networks.

What is the "Zoho Email Phishing Scam"?

"Zoho Email Phishing Scam" refers to spam emails that operate as phishing scams - under the guise of messages from the Zoho Corporation. It must be emphasized that such emails are in no way associated with the actual Zoho technology company.

Our researchers have found multiple instances of scam letters that use this company's name to promote practically identical phishing websites. These spam campaigns aim to trick recipients into disclosing their email account log-in credentials through said sites.

What kind of website is deretikijob[.]xyz?

After analyzing the deretikijob[.]xyz site, we found that it displays deceptive a message to trick visitors into agreeing to receive notifications. Also, it redirects to other websites. We discovered deretikijob[.]xyz while examining websites that use rogue advertising networks (such as torrent sites, illegal streaming pages, etc.).

What kind of scam is "Enter Your Best Valid Email to Confirm That You're Not a Robot"?

Our team has discovered this scam website during the analysis of websites that use rogue advertising networks (that display shady ads and redirect visitors to other pages). We found that scammers behind this page attempt to trick visitors into providing their email addresses.