Step-by-Step Malware Removal Instructions

Congratulations You Just Received TetherUSDT POP-UP Scam
Phishing/Scam

Congratulations You Just Received TetherUSDT POP-UP Scam

While inspecting deceptive sites, our researchers discovered the "Congratulations You just received TetherUSDT" scam. It is yet another phishing scam targeting cryptocurrency wallet credentials. When we accessed a website running this scam, it presented us with a statement claiming that th

Zpps Ransomware
Ransomware

Zpps Ransomware

Zpps is a ransomware-type program that our researchers found while inspecting new malware submissions to VirusTotal. This malicious program is part of the Djvu ransomware family. After launching a sample of Zpps ransomware on our test machine, it encrypted files and appended their filenames with

Qlln Ransomware
Ransomware

Qlln Ransomware

Qlln is the name of ransomware belonging to the ransomware family called Djvu. We have discovered this variant during our routine check for malware samples submitted to VirusTotal. It was found that Qlln encrypts files and appends ".qlln" extension to filenames, and provides a ransom note (creates

Nnuz Ransomware
Ransomware

Nnuz Ransomware

Nnuz is ransomware that encrypts files and appends the ".nnuz" extension to filenames. Also, it creates the "_readme.txt" file that contains instructions on how to contact the attackers and other information. Our malware researchers have discovered Nnuz while checking samples submitted to the Viru

Web Saver Adware
Adware

Web Saver Adware

We discovered the Web Saver application on a shady website offering to install it before continuing to the page. After installing this app, we learned that it functions as adware - it displays annoying advertisements. The download page for Web Saver states that this app removes error pages and pro

VastVista Adware (Mac)
Mac Virus

VastVista Adware (Mac)

VastVista is a rogue app that our researchers found while inspecting new submissions to VirusTotal. Once we installed this application on our test machine, we learned that VastVista operates as adware and belongs to the AdLoad malware family. Advertising-supported software may require sp

Text Info Adware
Adware

Text Info Adware

While inspecting questionable download webpages, our research team discovered the text info browser extension. Our analysis of this piece of software revealed that it operates as adware. Adware enables the placement of third-party graphical content (various advertisements) on visited websi

Keep Secure Search Browser Hijacker
Browser Hijacker

Keep Secure Search Browser Hijacker

Our researchers found the Keep Secure Search browser extension while inspecting deceptive download webpages. After analyzing this piece of software, we determined that it is a browser hijacker promoting the keepsecuresearch.com fake search engine. With Keep Secure Search installed onto our

Tap togo Browser Hijacker
Browser Hijacker

Tap togo Browser Hijacker

We have discovered the Tap togo application while inspecting various deceptive websites. After downloading the app, we found that it functions as a browser hijacker: it changes certain settings to promote togosearching.com - a fake search engine. Tap togo hijacks a web browser replacing th