Virus and Spyware Removal Guides, uninstall instructions

What is "Incoming Mail Notification"?

After conducting an examination, it has become evident that the content of this email is the work of scammers intending to deceive recipients into divulging sensitive information. Such fraudulent emails are commonly referred to as phishing emails. Recipients should exercise utmost caution and refrain from engaging with or responding to such deceptive communications.

What kind of application is EngineOfflineAlgorithm?

During a routine investigation of new file submissions to the VirusTotal website, our research team discovered the EngineOfflineAlgorithm application.

Our inspection revealed that this app is adware belonging to the AdLoad malware family. EngineOfflineAlgorithm operates by delivering intrusive ad campaigns, and it may have additional harmful capabilities.

What kind of email is "Microsoft Security Team - Password Expiration"?

Our inspection of the "Microsoft Security Team - Password Expiration" email revealed that it is spam. This letter urges the recipient to update their email account, as its password is due to expire today. This phishing mail aims to obtain the log-in credentials of victims' emails.

What is "Quarantine Area"?

Upon examination, it has been determined that this email is a fraudulent attempt disguised as a notification from an email service provider. The intention behind this scam is to deceive recipients into divulging sensitive information. These deceptive communications fall into the category of phishing emails.

What kind of application is CrocutaCrocuta?

Upon testing, it has become apparent that CrocutaCrocuta is a malicious extension capable of reading data on all websites, enabling the "Managed your organization" feature, and performing other actions within Chrome (and Edge) browsers. CrocutaCrocuta has been discovered after obtaining a malicious installer from a shady website.

What kind of application is OptimizationSquare?

OptimizationSquare is a rogue app that we discovered during a routine review of new submissions to the VirusTotal website. After analyzing this application, we determined that it is advertising-supported software (adware). OptimizationSquare is part of the AdLoad malware family.

What kind of scam is "You've Got Mail"?

We have identified this email as a fraudulent scheme orchestrated by scammers seeking to acquire personal information from recipients. These deceptive emails are widely recognized as phishing attempts. In this case, the scammers masquerade as an email service provider to extract information.

What kind of email is "FedEx - Delivery Of The Suspended Package"?

After examining the "FedEx - Delivery Of The Suspended Package" email, we determined that it is spam. This fake letter states that the recipient has a pending package delivery.

It must be stressed that the information provided by this phishing email is false, and this mail is in no way associated with FedEx or any other legitimate service providers.

What is "Mailbox Storage Re-validation"?

We have determined that this email is a fraudulent attempt by scammers to obtain personal information from recipients. Such emails are commonly known as phishing emails. In this instance, scammers pose as an email service provider to entice recipients into revealing their information on a phishing page.

What kind of malware is BlackLegion?

BlackLegion is ransomware that restricts access to files by encrypting them. Victims cannot open encrypted files without decrypting them. Additionally, BlackLegion creates a ransom note ("DecryptNote.txt") and renames files by appending a string of random characters, an email address, and the ".BlackLegion" extension.

An illustration of how BlackLegion modifies filenames: it changes "1.jpg" to "1.jpg.[34213633].[BlackLegion@zohomail.eu].BlackLegion", "2.png" to "2.png.[34213633].[BlackLegion@zohomail.eu].BlackLegion", and so forth.