Virus and Spyware Removal Guides, uninstall instructions

What is the fake "$LOC PRE-SALE"?

"$LOC PRE-SALE" is a scam that supposedly runs a presale event for the LOC cryptocurrency. It operates as a crypto drainer that steals funds from exposed digital wallets. It must be mentioned that scams of this kind are often disguised as existing platforms, yet this does not mean that they are associated with one another.

What kind of page is likudservices[.]com?

In the course of our inspection of likudservices[.]com, we noticed that this deceptive website uses a clickbait technique to receive permission to show notifications. We have examined lots of similar pages and found that in addition to displaying misleading content, most of them redirect visitors to other shady sites.

What kind of page is myflisblog[.]com?

Myflisblog[.]com is one of the numerous websites that employ clickbait to receive permission to deliver notifications to users. We discovered myflisblog[.]com while inspecting similar websites. Users should not visit myflisblog[.]com, and more importantly, this site should not be allowed to show notifications.

What is "Santander Bank Deal" email scam?

Our analysis of the email has led us to conclude that it is a scam commonly referred to as an advance-fee scam. Typically, scammers behind such schemes aim to trick unsuspecting recipients into transferring their money. They may also ask for personal information. Thus, recipients should not respond to such emails.

What kind of malware is Wormhole?

During our examination of the Wormhole malware, we discovered that it operates as ransomware: its purpose is to encrypt files and demand ransom for file decryption. In addition to encrypting files, Wormhole appends its extension (".Wormhole") to filenames and provides a ransom note ("How to recover files encrypted by Wormhole.txt").

Here is an example of how Wormhole modifies filenames: it renames "1.jpg" to "1.jpg.Wormhole", "2.png" to "2.png.Wormhole" and so forth. Our discovery of Wormhole ransomware occurred during an analysis of malware samples submitted to VirusTotal.

What is the fake "Ice Token Distribution" platform?

We have inspected the fraudulent Ice token distribution site (giveaway-ice[.]io) and found that its purpose is to steal cryptocurrency from unsuspecting individuals. The fake website (giveaway-ice[.]io) masquerades as the real Ice Open Network page (ice[.]io) to trick users into participating in a fraudulent scheme.

What kind of page is lovelypush[.]club?

Lovelypush[.]club is a rogue page discovered by our researchers during a routine inspection of suspicious websites. Upon examination, we determined that lovelypush[.]club promotes browser notification spam and redirects users to different (likely dubious/malicious) sites.

Most visitors to webpages like lovelypush[.]club access them via redirects generated by websites utilizing rogue advertising networks.

What kind of email is "Salary Increase"?

After examining the "Salary Increase" email, we determined that it is spam. This phishing mail targets email account log-in credentials. The lure used to trick recipients into disclosing this information is a fake document sent by their HR regarding a salary increase.

What is a fake "Polyhedra Network $ZK Airdrop"?

Upon inspection, we determined that this "Polyhedra Network $ZK Airdrop" is fake. This cryptocurrency giveaway promoted on polyhedra[.]ltd is merely a lure, and it is not associated with either the Polyhedra Network or zkBridge. This scheme impersonates the aforementioned platform and protocol.

Yet despite the scam's convincing appearance, it has no association with the content it imitates. This "Polyhedra Network $ZK Airdrop" operates as a cryptocurrency drainer that steals funds out of exposed digital wallets.

What kind of scam is "Claim Sum Release"?

We have examined this email and discovered that it is a scam email masquerading as a letter regarding a large amount of money that has been supposedly stolen from the recipient. The intent of the scammers behind this email is to deceive the recipient into divulging personal information and (or) transferring money. Such emails must be ignored.