Virus and Spyware Removal Guides, uninstall instructions

What is Inspirational Quotes Ext?

While inspecting the Inspirational Quotes Ext application, we noticed that it takes control over a web browser by making certain changes in its settings. Apps of this type are known as browser hijackers. It is worth noting that most users unknowingly download and add apps like Inspirational Quotes Ext to their browsers.

What kind of application is IndexerHardDisk?

After investigating IndexerHardDisk, our team has determined that its primary function is to display intrusive advertisements to users, categorizing it as adware. It is essential to highlight that unintentionally downloading and installing applications like IndexerHardDisk is a common scenario.

What kind of malware is FreeWorld?

While investigating new submissions to the VirusTotal website, our researchers discovered the FreeWorld ransomware-type program. It is designed to encrypt data and demand payment for decryption.

After we launched a sample of FreeWorld on our test system, it encrypted files and appended their filenames with a ".FreeWorldEncryption" extension. For example, a file originally titled "1.jpg" appeared as "1.jpg.FreeWorldEncryption", "2.png" as "2.png.FreeWorldEncryption", etc. Once this process was concluded, a ransom note – "FreeWorld-Contact.txt" – was created.

What kind of application is Dog Cuties?

In our examination of the Dog Cuties extension, we found characteristics often linked with a browser hijacker. These types of programs usually seize control of web browsers by changing their settings. Browser hijackers often promote fake search engines. Dog Cuties promotes dogcuties.com.

What kind of scam is "Notice Of Regular Maintenance"?

Upon examination, our team has assessed that the purpose of this email is to mislead recipients into divulging their personal information. These emails fall under the category of phishing attempts, wherein the senders, who are scammers, aim to deceive recipients into providing sensitive details on deceitful websites.

What kind of application is FiberOpticJoin?

After examining FiberOpticJoin, our team has determined that its primary function is to display intrusive advertisements to users, categorizing it as adware. It is crucial to highlight that applications similar to FiberOpticJoin are frequently promoted and spread through deceitful techniques.

What kind of malware is Top?

During a routine examination of malware samples submitted to VirusTotal, our research team encountered ransomware dubbed Top. This malicious software is intended to encrypt data and then demand payment for decrypting the files. Top ransomware provides two ransom notes: "info.hta" and "info.txt". It is worth noting that Top is part of the Phobos family.

Additionally, this ransomware renames the targeted files by appending the victim's ID, an email address, and the ".top" extension. For example, it renames a file named "1.jpg" to "1.jpg.id[9ECFA84E-3449].[topcorp@usa.com].top", "2.png" to "2.png.id[9ECFA84E-3449].[topcorp@usa.com].top", etc.

What kind of malware is Wzqw?

While examining malware samples submitted to VirusTotal, our group came across Wzqw ransomware belonging to the Djvu family. When a computer is compromised, Wzqw encrypts various files and adds the ".wzqw" extension to their initial filenames. As an illustration, a file labeled "1.jpg" is transformed into "1.jpg.wzqw", "2.png" is changed to "2.png.wzqw", etc.

Aside from encrypting files, Wzqw also produces a ransom note in the form of a text file named "_readme.txt". Furthermore, the propagation of Wzqw seems to entail cooperation with information-stealing malware such as Vidar and RedLine.

What kind of malware is Wztt?

In the process of analyzing malware samples submitted to the VirusTotal platform, we came across the Wztt ransomware. This malicious software encrypts various files and adds the ".wztt" extension to their filenames. Additionally, the ransomware generates a ransom note named "_readme.txt".

An example of how Wztt changes filenames: it renames "1.jpg" to "1.jpg.wztt", "2.png" to "2.png.wztt", etc. Of significant note is the classification of Wztt within the Djvu ransomware family. This implies that malicious actors might disseminate it alongside data-stealing malware such as RedLine, Vidar, and comparable malicious software.

What kind of scam is "IMAP Is Currently Marked Inactive"?

Upon reviewing this email, our team has determined that it is crafted by scammers with the intention of obtaining personal information from recipients who might not be aware of their motives. They pose as an email service provider and insert a link to a phishing page to deceive users into revealing information.