Virus and Spyware Removal Guides, uninstall instructions

What kind of program is PachyrhinosaurusLakustai?

Our analysis of the PachyrhinosaurusLakustai app revealed worrisome capabilities, such as reading and altering data on websites, managing browser themes and extensions, and activating the "Managed by your organization" feature in Chrome and Edge browsers. Its distribution is facilitated through a malicious installer, which includes other dubious apps.

What kind of application is HelperFraction?

Our researchers found the HelperFraction application while checking out new file submissions to VirusTotal. Following our analysis, we determined that this app is advertising-supported software (adware). HelperFraction is also part of the AdLoad malware family. Applications within this group run intrusive ad campaigns and may have other harmful capabilities.

What kind of program is StratocumulusCastellanus?

When examining the app, we noted that StratocumulusCastellanus is a shady app that can read and change data on websites, manage themes and extensions within a browser, and activate the "Managed by your organization" feature in Chrome and Edge browsers. Moreover, StratocumulusCastellanus is distributed via a malicious installer.

What kind of malware is Frivinho?

While investigating new file submissions to the VirusTotal site, our research team discovered the Frivinho ransomware. This malicious program operates by encrypting data and demanding payment for its decryption.

On our test machine, this ransomware encrypted files and appended their filenames with a ".Frivinho0[cold_face_emoji]" extension ("cold_face_emoji" stands for an actual emoji). For example, a file initially titled "1.jpg" appeared as "1.jpg.Frivinho0[cold_face_emoji]", "2.png" as "2.png.Frivinho0[cold_face_emoji]", etc.

Once the encryption process was finished, Frivinho changed the desktop wallpaper and created a ransom note named "PLS_READ_ME.txt".

What is "Trust Wallet Mystery Box"?

Upon inspecting this webpage and the associated post on X (Twitter) promoting it, it became evident that it constitutes a fraudulent giveaway, designed as a scam to pilfer cryptocurrency from unsuspecting individuals. Scammers commonly use enticing prizes or giveaways to attract victims into falling for their deceptive schemes.

What is Activator?

Recently, cracked apps on pirating websites that carried a Trojan proxy were discovered. The bad actors took pre-cracked apps, repackaged them as PKG files, and hid a Trojan proxy along with a script to infect systems after installation. The application named Activator is also involved in the malicious campaign.

What kind of scam is "ZetaChain Airdrop"?

After inspecting the "ZetaChain Airdrop", we determined that it is fake. This cryptocurrency airdrop is supposedly run on the ZetaChain platform. While the scam webpage appears practically identical to the original website, it is fraudulent and operates as a crypto drainer once a user connects their wallet to it.

What is LaserGradualActivity?

After examining the application, it was determined that LaserGradualActivity functions as adware, displaying unwanted advertisements to users. In addition to ad display, LaserGradualActivity may collect various user data. It is advisable to refrain from installing LaserGradualActivity and to remove it if it is already present.

What kind of application is Araucarian.app?

Upon inspection of Araucarian.app, it was observed that it functions as adware. It can present intrusive advertisements and is associated with the Pirrit family. Additionally, Araucarian.app may possess the ability to access and collect diverse information. It is advisable not to trust Araucarian.app and similar applications, and they should be removed from affected computers.

What is "Visa Awards"?

After examining the email, we determined that this is a lottery scam designed to deceive recipients into thinking they won a significant amount of money. This specific scam disguises itself as a notification from VISA AWARDS. Generally, scams of this nature are utilized with the intention of illicitly obtaining personal information and (or) money.