Virus and Spyware Removal Guides, uninstall instructions

What kind of application is DiscoveryAdmin?

While investigating file submissions to the VirusTotal platform, our researchers discovered the DiscoveryAdmin application. After analyzing DiscoveryAdmin, we learned that it is adware from the AdLoad malware family. Advertising-supported software is designed to generate revenue for its developers.

What kind of application is IndexerAdmin?

Our research team found the IndexerAdmin application during a routine inspection of new submissions to the VirusTotal website. After examining this app, we determined that it is adware. IndexerAdmin is part of the AdLoad malware family.

What kind of page is gouvevop[.]com?

Upon thorough examination, it has become evident that gouvevop[.]com is an unreliable website with deceptive content. Its primary function seems to be promoting other dubious pages through notifications and redirects. Users should steer clear of gouvevop[.]com and refrain from consenting to receive notifications from it.

What is hogarlainz.com?

Upon analyzing hogarlainz.com, we ascertained that it functions as a fake search engine. Our discovery of hogarlainz.com occurred during the examination of a malicious installer. Commonly, fake search engines like hogarlainz.com are propagated through browser hijackers. However, the installer associated with hogarlainz.com does not add any extensions to a browser.

What kind of malware is Pegasus?

Pegasus is a ransomware-type program discovered by our researchers during a routine investigation of new file submissions to the VirusTotal platform. The sample of Pegasus that we executed on our test machine, encrypted files and altered their titles.

Original filenames were appended with an extension consisting of a random character string, e.g., a file named "1.jpg" appeared as "1.jpg.tBC8M", "2.png" as "2.png.qGuj7", etc. Following the completion of the encryption process, a ransom note titled "Ghost_ReadMe.txt" was dropped.

What kind of application is MetroBrowser?

Our research team discovered MetroBrowser while reviewing new file submissions to the VirusTotal site. Upon examination, we determined that this application is advertising-supported software (adware) belonging to the AdLoad malware family. MetroBrowser runs intrusive advertisement campaigns, and it may have other undesirable/harmful abilities.

What kind of malware is Crocodile Smile?

While investigating file submissions to the VirusTotal platform, our researchers discovered the Crocodile Smile ransomware. This malicious program operates by encrypting data and demanding ransoms for the decryption.

After we executed a sample of Crocodile Smile on our test machine, it began encrypting files. Names of the affected files were appended with a ".CrocodileSmile" extension, e.g., "1.jpg" appeared as "1.jpg.CrocodileSmile", "2.png" as "2.png.CrocodileSmile", and so forth for all of the encrypted files.

Once this process was completed, Crocodile Smile changed the desktop wallpaper and created a ransom note titled "READ_SOLUTION.txt".

What kind of scam is a fake notification from Reserve Bank of Australia?

Following our inspection, it is clear that this email is a phishing scam posing as a notification from the Reserve Bank of Australia. Crafted by scammers, the deceptive email aims to lure unsuspecting recipients into disclosing sensitive personal information. Recipients should exercise caution to avoid falling victim to such malicious tactics.

What kind of malware is L00KUPRU?

During our analysis of malware samples submitted to VirusTotal, we encountered L00KUPRU, a ransomware variant belonging to the Xorist family. This ransomware encrypts files, triggers a pop-up window, and generates a "HOW TO DECRYPT FILES.txt" file, both of which contain a ransom note.

Also, L00KUPRU renames files by appending its extension (".L00KUPRU") to filenames. For instance, it changes "1.jpg" to "1.jpg.L00KUPRU", "2.png" to "2.png.L00KUPRU", and so forth.

What kind of application is IndexerTask?

Upon thorough analysis, it has been determined that IndexerTask is a deceitful application designed to flood users with intrusive advertisements. As a result, IndexerTask has been categorized as adware. Users commonly unknowingly download and install such software, unaware of its tendency to showcase unwanted ads.