Virus and Spyware Removal Guides, uninstall instructions

What is Bifrose?

Bifrose is a family of Remote Administration Tools (RATs). Cyber criminals seek to infect computers with programs of this type to take control over them and perform specific actions, which allow them to generate revenue.

Research shows that Bifrose's RATs can be used to manage files, processes, log keystrokes, take screenshots, access webcams, execute commands, edit the registry and steal passwords.

What is the BlackNix RAT?

BlackNix is a Remote Access Trojan (RAT) that allows cyber criminals to gain access and control over infected devices. BlackNix is high-risk malware with malicious capabilities, which can cause serious issues.

What is Ap0calypse?

Ap0calypse is a Remote Administration Tool (RAT). Cyber criminals commonly attempt to trick users into installing this software so that they can remotely control computers and perform tasks to generate revenue. If you suspect that Ap0calypse or another RAT is installed on the operating system (and it was installed unintentionally), it should be removed immediately.

What is My Job Partner?

The My Job Partner app supposedly provides quick access to job listings, however, it actually promotes a fake search engine and collects user-system information. My Job Partner promotes search.myjobpartnertab.com by changing certain browser settings.

Note that few people download or install browser hijackers intentionally. Therefore, apps of this kind are categorized as potentially unwanted applications (PUAs).

What is MZReverenge?

Discovered by GrujaRS, MZReverenge is malicious software classified as ransomware. Ransomware-type programs are designed to encrypt the data of infected systems so that ransoms can be made for decryption tools/software. During the encryption process, MZReverenge renames all affected files by appended filenames with the ".MZR" extension.

For example, a file such as "1.jpg" would appear as "1.jpg.MZR" following encryption. Typically, after the encryption process is complete, ransomware programs create ransom messages in files or pop-ups, however, in this case, the text file within "MZReverengeReadME.txt" (which the malware drops into every compromised folder) does not contain any ransom demands.

What is My Weather Today?

My Weather Today is a browser hijacker that promotes search.hmyweathertoday.com (the address of a fake search engine) by changing browser settings. These apps also collect various user-system information. People often download apps such as My Weather Today inadvertently. Therefore, browser hijackers are also categorized as potentially unwanted applications (PUAs).

What is WebAidSearch?

WebAidSearch is a rogue application belonging to the AdLoad adware family. Apps classified as adware operate by running intrusive advertisement campaigns. Therefore, WebAidSearch delivers various unwanted and harmful ads.

Furthermore, this piece of software shares common traits with browser hijackers, such as browser modification and promotion of fake search engines. Most adware-types and browser hijackers monitor users' browsing habits as well. Since most users download/install WebAidSearch unintentionally, it is also classified as a Potentially Unwanted Application (PUA).

It has known to be proliferated using fake Adobe Flash Player installers and updaters. Note that bogus installers/updaters are often used to spread PUAs and malware (e.g. Trojans, ransomware and other malicious software).

What is d0wnload3d[.]com?

Virtually identical to dataf0ral1.com, d0wnload3d[.]com is designed to promote a fake Adobe Flash Player installer. Once accessed, it automatically downloads the .dmg file ("Install.dmg"), which is a rogue installer associated with the aforementioned plug-in.

These fake installation setups are often used to proliferate a variety of untrustworthy and even malicious content. They can infiltrate adware, browser hijackers and other Potentially Unwanted Applications (PUAs) into systems and infect them with Trojans, ransomware and other malware.

Note that d0wnload3d[.]com and similar sites are usually accessed unintentionally - most visitors are redirected to them by intrusive advertisements or PUAs already installed on the system.

What is LeadingSignSearch adware?

Part of the AdLoad adware family, LeadingSignSearch is a rogue app that operates by delivering various intrusive advertisements. This application possesses some browser hijacker characteristics, such as making modifications to browser settings and promotion of fake search engines.

Additionally, most adware and browser hijacker types have data tracking capabilities, which are employed to monitor users' browsing activity. Due to the dubious methods used to promote LeadingSignSearch, it is also classified as a Potentially Unwanted Application (PUA).

For example, this app has been distributed using fake Flash Player updates. Note that bogus updaters are commonly used to proliferate PUAs and even malicious software (e.g. ransomware, Trojans, etc.).

What is exq-timepieces[.]com?

exq-timepieces[.]com is similar to many other rogue web pages designed to load dubious content or redirect visitors to other untrusted websites. For example, odicfulbrid[.]info, ryseconomi[.]info and goodbase[.]biz. Typically, people do not visit these sites intentionally.

In most cases, they are redirected to them through other dubious websites, deceptive ads or potentially unwanted applications (PUAs) installed on the browser or operating system. Note that people tend to download and install PUAs inadvertently. Once installed, these apps open dubious websites, display ads and gather data.