Virus and Spyware Removal Guides, uninstall instructions

What kind of application is Converter Tab?

An examination of Converter Tab showed that this app operates as a browser hijacker. It takes control over a web browser by changing its settings. The purpose of Converter Tab is to promote convertertab.com, which is a fake search engine. It is advisable for users to exercise caution and avoid applications that promote fake search engines while also tampering with their browsers.

What kind of software is Forest New Tab?

Forest New Tab is an extension that promises to display forest-themed browser wallpapers. After inspecting this piece of software, we determined that it is a browser hijacker. Forest New Tab makes changes to browser settings in order to endorse (via redirects) the ysrc2u.com illegitimate search engine.

What kind of malware is Enmity?

Enmity is ransomware designed to encrypt data, modify the filenames of all encrypted files, and leave a ransom note (a file named "Enmity-Unlock-Guide.txt"). Enmity replaces filenames with a random string, email address, victim's ID, and a random extension.

For instance, it renames "1.jpg" to "YGEzHZNsWwkSiXP-Mail[rxyyno@gmail.com]ID-[38925526170190].QOXAMW", "2.png" to "NisSWkwzGXyHZEPS-Mail[rxyyno@gmail.com]ID-[38925526170190].QOXAMW", and so forth.

What kind of software is Beautiful Beach Tab?

Beautiful Beach Tab is a rogue browser extension. It modifies browser settings in order to promote (via redirects) the beautifulbeachtab.com fake search engine. Due to this behavior, Beautiful Beach Tab is classified as browser-hijacking software.

What kind of malware is Hyj?

Our researchers found the Hyj ransomware while reviewing new submissions to the VirusTotal website. This malicious program belongs to the Xorist ransomware family. Hyj encrypts data and demands payment for its decryption.

After we launched a sample of this ransomware on our test machine, it encrypted files and appended their filenames with a ".hyj" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.hyj", "2.png" as "2.png.hyj", and so on for all of the compromised files.

After the encryption process was completed, identical ransom notes in Russian – a pop-up window and a text file named "КАК РАСШИФРОВАТЬ ФАЙЛЫ.txt" – were created. Note that if the system does not have the Cyrillic alphabet, the text in the pop-up will appear as garbled nonsense.

What kind of application is LoniceraCaprifolium?

LoniceraCaprifolium is a browser extension that has attracted attention during an investigation into a harmful installer found on a dubious website. This browser extension exhibits several significant functionalities, some of which have induced apprehension regarding user privacy and browser security.

What kind of page is wandsservices[.]com?

Wandsservices[.]com is a website designed to display a deceptive message to trick visitors into allowing it to show notifications. This site was discovered while inspecting pages associated with rogue advertising networks. It is uncommon for sites like wandsservices[.]com to be visited on purpose.

What is "A New Sign-in On Windows"?

After examination, it has been determined that this email constitutes a phishing scam. The perpetrators behind this fraudulent campaign intend to deceive recipients into disclosing sensitive information on a deceptive website. Consequently, it is highly advised to disregard and refrain from responding to this email.

What kind of malware is PepeCry?

PepeCry is ransomware discovered during an analysis of samples uploaded to the VirusTotal website. PepeCry is designed to encrypt files (which makes them inaccessible), add the ".cry" extension to filenames, and display a ransom note. An example of how PepeCry modifies filenames: it renames "1.jpg" to "1.jpg.cry", "2.png" to "2.png.cry", and so forth.

What kind of app is RosaCanina?

RosaCanina is a browser extension that has come under scrutiny when examining a malicious installer hosted on a suspicious website. This browser extension possesses several noteworthy capabilities, some of which have raised concerns regarding user privacy and browser security.