Virus and Spyware Removal Guides, uninstall instructions

What kind of application is ExploreFast?

Our research team found the ExploreFast app while reviewing new file submissions to the VirusTotal site. After analyzing ExploreFast, we determined that it is advertising-supported software (adware). Additionally, we learned that this application is part of the AdLoad malware family.

What kind of page is fundatingquest[.]fun?

Our researchers discovered the fundatingquest[.]fun page during a routine investigation of untrustworthy websites. Upon inspection, we determined that this rogue webpage promotes browser notification spam and redirects users to other (likely unreliable/hazardous) sites.

The majority of visitors to fundatingquest[.]fun and pages akin to it access them through redirects caused by websites that employ rogue advertising networks.

What kind of application is InitialEngine?

Our researchers discovered InitialEngine during a routine inspection of file submissions to the VirusTotal platform. After examining this piece of software, we learned that it is adware from the AdLoad malware family. InitialEngine is designed to display ads and may possess other harmful capabilities.

What kind of application is VisualFlexibility?

While reviewing file submissions to the VirusTotal platform, our research team discovered an advertising-supported software called VisualFlexibility. This application is part of the AdLoad malware family. VisualFlexibility adware is designed to deliver intrusive advertisement campaigns.

What kind of email is "Order List"?

After inspecting the "Order List" email, we determined that it is malspam. This malicious spam email claims to have an order list attached to it. If a recipient is lured into clicking the bogus attachment, they download the Agent Tesla RAT's executable. This RAT (Remote Access Trojan) is a piece of versatile high-risk software.

What kind of scam is "Blast Airdrop"?

This "Blast Airdrop" is fake. When users attempt to participate in this airdrop (giveaway), they trigger a cryptocurrency-draining mechanism that empties their wallets of funds.

What is "WeTransfer - Order Specifications"?

Our analysis of the email identified it as a fake notification posing as a letter from WeTransfer, a Dutch internet-based file transfer service company. The email is designed to deceive recipients into divulging personal information, a tactic commonly known as phishing. Emails of this kind should be ignored.

What kind of page is magmaheartforger[.]top?

When examining magmaheartforger[.]top, it was noted that the page uses deceptive methods to trick visitors into allowing it to show notifications. There are at least two versions of magmaheartforger[.], both created for the same purpose. Also, magmaheartforger[.]top may redirect to other unreliable websites.

What kind of malware is Rage?

Rage (also known as RageStealer, xStealer) is an information-stealing malware. This stealer was previously known as Priv8 until its rebrand – Rage – resurfaced in the summer of 2023. This malicious program is designed to exfiltrate data, predominantly log-in credentials (usernames/passwords).

What is mobilisearch.com (mobility-search.com)?

During our investigation, we discovered that mobilisearch.com is a fake search engine promoted through malicious browser extensions. Typically, users are compelled to utilize such search engines via a technique known as browser hijacking. Trusting mobilisearch.com or applications created to hijack browsers is not advised.