Step-by-Step Malware Removal Instructions

New Contract Documents Received Email Scam
Phishing/Scam

New Contract Documents Received Email Scam

"New Contract Documents Received" is a spam email that we inspected and classified as a phishing scam. This letter attempts to trick the recipient into disclosing their email account log-in credentials by claiming they have been sent documents concerning a new contract. The spam email with

Snowy Tab Browser Hijacker
Browser Hijacker

Snowy Tab Browser Hijacker

Discovered by our research team while inspecting dubious software-endorsing webpages, Snowy Tab is a browser extension. It is advertised as a tool that allows users to change their browser background/wallpaper and use other handy features. Having analyzed Snowy Tab, we can conclude that it is a b

Daily Tab Browser Hijacker
Browser Hijacker

Daily Tab Browser Hijacker

We have discovered the Daily Tab application/browser extension while examining pages that use questionable advertising networks and other suspicious pages. It was found that Daily Tab is a browser hijacker that changes the settings of the affected web browser to promote search.daily-stop.com (a fa

Spin Dark Browser Hijacker
Browser Hijacker

Spin Dark Browser Hijacker

Spin Dark is a browser extension discovered by our research team while inspecting untrustworthy download webpages. This piece of software is advertised as a tool capable of enabling dark mode for simple design websites. After analyzing Spin Dark, we determined that it behaves like a browser hijac

Electron Bot Malware
Trojan

Electron Bot Malware

Electron Bot is the name of the malware that has been discovered by Check Point Research. We have learned that Electron Bot is used to gain remote access to computers and execute various commands. It is distributed via various applications on the Microsoft Store (Electron Bot targets Windows devic

Vote2024 Ransomware
Ransomware

Vote2024 Ransomware

Vote2024 (also known as HermeticRansom and PartyTicket) is the name of a malicious program that was discovered during geopolitically-motivated malware attacks against Ukraine and its surrounding territories, which occurred during the onset of war in Ukraine. Vote2024 is a ransomware-type program.

CleanTextSize Adware (Edge)
Adware

CleanTextSize Adware (Edge)

We have discovered the CleanTextSize application while analyzing various cracked software download sites. After testing the app, we learned that it is adware - software that generates unwanted advertisements. Although, it is promoted as a tool allowing to change the text size on the Edge browser.

Rg116 Ransomware
Ransomware

Rg116 Ransomware

Rg116 is the name of typical ransomware - malware that encrypts files. Our team has discovered it while analyzing the malware samples submitted to VirusTotal. It was found that Rg116 also renames encrypted files by appending a string of random characters and the ".rg116" extension to filenames, an

Scorp Ransomware
Ransomware

Scorp Ransomware

Discovered by our researchers while inspecting new malware submissions to VirusTotal, Scorp is a piece of malicious software classified as ransomware. After analyzing this program, we found that it is part of the VoidCrypt ransomware family. On our testing system, Scorp encrypted files and append

Neptun Tab Browser Hijacker
Browser Hijacker

Neptun Tab Browser Hijacker

Neptun Tab is a rogue browser extension, which our research team discovered while analyzing fake Google Chrome updates. This piece of software is endorsed as a tool capable of allowing users to customize their browsers' homepage and new tab appearance - including such widgets as weather, time, rem