Virus and Spyware Removal Guides, uninstall instructions

What is Web Gamer World?

Web Gamer World is rogue application endorsed as a tool for quick access to free online games. It allegedly provides easy access to popular action, adventure, sports, racing, girls, puzzle, strategy, and other genre games.

It is classified as a browser hijacker and Potentially Unwanted Application (PUA), since it makes unauthorized changes to browsers and promotes a fake search engine (webgamerworld.com). Additionally, This PUA monitors users' browsing activity. Note that this app is often distributed with another PUA called Search Defender Prime.

What is FileConvertPro?

FileConvertPro is a potentially unwanted application (PUA), a browser hijacker that can supposedly convert files online. Like most apps of this type, it promotes a fake search engine.

This particular app promotes fileconvertpro.co by changing certain browser settings. Furthermore, FileConvertPro is designed to gather various browsing-related data and promote another PUA called Search Defender Prime. Typically, people do not download or install software of this type intentionally.

What is Grod?

Discovered by Michael Gillespie, Grod is malicious software belonging to the Stop/Djvu ransomware family. It operates by encrypting data and demanding ransom payments for decryption. During the encryption process, all files are appended with the ".grod" extension.

Therefore, "1.jpg" becomes "1.jpg.grod", and so on for all affected files. After this process is complete, a text file called "_readme.txt" is created on the infected device's desktop.

What is mp3hub[.]com?

mp3hub[.]com offers a video download and conversion service. People can use this page to download videos from YouTube, Soundcloud, and Facebook. We advise against using it for two reasons: 1) it is illegal to download videos from YouTube, and; 2) mp3hub[.]com uses rogue advertising networks. This website redirects visitors to various other untrustworthy, deceptive sites.

What is "Noname"?

Noname is a group of scam sites. For example, nonamenba and nonamebnm are part of this family. These websites are designed to endorse untrustworthy applications. One of their commonly promoted applications is Smart Mac Booster, a Potentially Unwanted Application (PUA).

By using scare tactics, these sites encourage visitors into downloading/installing the software they advertise. The web pages warn of detected threats/issues and recommend an app for their elimination. Note that no site can detect such problems present on devices.

Therefore, any claim to this effect cannot be trusted. Most visitors to Noname do not access these web pages intentionally, they are redirected by intrusive ads or PUAs already infiltrated into the system.

What is Search Defender Prime?

Search Defender Prime (previous version was simply called Search Defender) is a rogue application that supposedly allows users to search safely and avoid system infections.

This functionality may seem legitimate and useful, however, Search Defender Prime is categorized as a potentially unwanted application (PUA) and a browser hijacker, since it often infiltrates systems without users' consent. In addition, Search Defender Prime promotes a fake search engine and records information relating to browsing activity.

What is LimeRevenge?

Discovered by PaulM, LimeRevenge is a remote access trojan (RAT) and a new variant of RevengeRAT. This malware is designed to allow remote access to infected devices, thereby granting control over them. RAT infections are deemed to be high-risk and can cause a variety of severe issues.

What is losx.xyz?

losx.xyz is one of many fake search engines. Two of the apps used to promote it are called APP (on Chrome) and SDL (on Firefox), however, other apps might also be used. Typically, apps that promote fake search engines are categorized as browser hijackers and potentially unwanted applications (PUAs).

Typically, they change browser settings, however, these particular apps do not change any settings. Note that PUAs of this type usually collect information relating web browsing activity.

What is qqs7.xyz?

qqs7.xyz is the address of a fake search engine, which is promoted through a potentially unwanted application (PUA) called APP (in fact, it is likely that developers also promote qqs7.xyz via other rogue applications). This PUA is related to another app of this type called QIP.

Both are categorized as browser hijackers. These apps typically promote fake search engines by changing browser settings and gathering user information, however, research shows that this particular PUA (APP) does not change any settings.

What is "CVE-2018-10562" email scam?

"CVE-2018-10562" is the code name of a vulnerability discovered in a variety of Dasan GPON home routers. Cyber criminals have recently started a new spam campaign naming it after this vulnerability. It is designed to extort money by threatening to expose evidence of users' sexual activity.

The cyber criminals behind this email claim to have hacked the addressee's OS (Operating System) and gained access to the device's camera.

I.e., they have recorded the victim apparently visiting adult websites. Unless a certain sum is paid, this content will supposedly be sent to all of the addressee's contacts. Note that these alleged videos do not exist and the device's integrity has not been compromised.