Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Eqza?

Eqza is ransomware that has been discovered during an analysis of malware samples submitted to VirusTotal. Also, it has been found that Eqza belongs to the Djvu family, encrypts files, adds the ".eqza" extension to filenames, and drops a ransom note named "_readme.txt". An illustration of how Eqza changes filenames: it replaces "1.jpg" with "1.jpg.eqza", "2.png" with "2.png.eqza", etc.

Since Eqza is part of the Djvu family, there is a high chance that cybercriminals distribute Eqza alongside information stealers like Vidar or RedLine.

What kind of page is totaltopwords[.]com?

Our research team discovered the totaltopwords[.]com rogue page during a routine inspection of suspect websites. Upon review, we determined that this webpage promotes browser notification spam and may redirect users to other (likely unreliable/dangerous) sites.

Most visitors enter totaltopwords[.]com and similar pages through redirects caused by websites utilizing rogue advertising networks.

What kind of application is LaunchImprovment?

Our research team found LaunchImprovment while reviewing new file submissions to the VirusTotal platform. This application runs intrusive advertisement campaigns, and due to this behavior – it is classified as adware. LaunchImprovment is part of the AdLoad malware family.

What kind of software is MetricMaster?

MetricMaster is a rogue browser extension promising a widget capable of providing metric system unit conversions. Our research team discovered this piece of software during a routine investigation of dubious sites.

After examining MetricMaster, we determined that it is a browser hijacker. This extension makes alterations to browser settings in order to promote (via redirects) the goog.metermasterext.com fake search engine.

What kind of application is VideoEthernetInteger?

We discovered the VideoEthernetInteger application during a routine inspection of new file submissions to the VirusTotal site. Our analysis revealed that this app is adware belonging to the AdLoad malware family. VideoEthernetInteger delivers intrusive ad campaigns and may have additional harmful functionalities.

What kind of application is SyncedAdmin?

Our examination of the SyncedAdmin application revealed that the purpose of this app is to bombard users with intrusive advertisements. Thus, SyncedAdmin has been classified as adware. In addition to displaying ads, SyncedAdmin may gather various data and perform other actions. Thus, users should not install this app on their computers.

What kind of application is ThemeRanked?

ThemeRanked is a rogue app that we found while investigating new file submissions to the VirusTotal platform. After analyzing this application, we determined that it is advertising-supported software (adware). ThemeRanked is part of the AdLoad malware family.

What kind of malware is Ansiety?

Ansiety is an information stealer that possesses the capability to extract sensitive information not only from browsers but also from specific applications and cryptocurrency wallets. This multifaceted threat underscores the breadth of its reach, posing a comprehensive risk to the security and privacy of individuals.

What kind of malware is Shanova?

While inspecting new submissions to the VirusTotal platform, our researchers discovered the Shanova malicious program, which is based on the Chaos ransomware. Malware within this classification operates by encrypting data and demanding payment for its decryption.

On our test machine, Shanova ransomware encrypted files and appended their filenames with a ".shanova" extension. For example, a file originally titled "1.jpg" appeared as "1.jpg.shanova", "2.png" as "2.png.shanova", and so on. Afterward, a ransom note – "read_it.txt" – was created.

What kind of app is MacacaFascicularis?

Our investigation into the MacacaFascicularis application has revealed that it possesses the capability to access a wide range of data, manage apps, extensions, and themes within the Chrome browser, and activate the "Managed by your organization" feature. It is important to emphasize that the distribution of MacacaFascicularis involves the use of a malicious installer.