Virus and Spyware Removal Guides, uninstall instructions

What kind of application is IndexerStart?

While analyzing recently submitted samples on VirusTotal, our researchers encountered the IndexerStart application. After conducting an examination, we discovered that IndexerStart operates as adware, primarily designed to display advertisements. It is common for such adware apps to be distributed using questionable methods.

What kind of application is ExperienceSys?

ExperienceSys is a rogue app that we discovered while investigating new submissions to the VirusTotal website. Our analysis of this application revealed that it is adware belonging to the AdLoad malware family.

What kind of email is "Your Account Has Been Temporarily Disabled"?

"Your Account Has Been Temporarily Disabled" is a phishing email. This mail aims to trick recipients into disclosing the email account log-in credentials by falsely claiming that their account has been blocked for the time being.

What kind of software is DogsFan extension?

Our research team discovered the DogsFan extension while investigating suspect websites. This piece of software displays browser wallpapers featuring canines.

However, after examining this browser extension, we learned that it modifies browser settings in order to promote the goog.dogsfanext.com fake search engine. Due to this, DogsFan extension is classified as a browser hijacker.

What kind of email is "Account Violation Detected"?

Our analysis of the "Account Violation Detected" email revealed that it is spam. This letter makes false claims regarding violations of the recipient's email account. The aim of this phishing mail is to trick users into disclosing their log-in credentials.

What kind of application is TradeAero?

TradeAero is a rogue application discovered by our researchers during a routine inspection of new submissions to VirusTotal. After examining this app, we determined that it is advertising-supported software (adware) belonging to the AdLoad malware family.

What kind of application is FeedWild?

Following a thorough analysis of FeedWild, our team has concluded that its main purpose is to show disruptive advertisements to users. These types of applications are classified as adware. It is crucial to emphasize that apps like FeedWild are often downloaded and installed without users' knowledge or awareness.

What kind of application is Your Best World News Extension?

During our examination of Your Best World News Extension, it became clear that its purpose is to act as a browser hijacker (to promote search.best-news-world.com, a deceptive search engine). Your Best World News Extension modifies the settings of the web browser to force users to use search.best-news-world.com.

What kind of software is Dancing Tubes?

Our researchers found the Dancing Tubes browser extension during a routine inspection of dubious websites. After analyzing this extension, we determined that it operates by hijacking browsers.

Dancing Tubes makes alterations to browser settings in order to promote (via redirects) the search.dancingtubes.net fake search engine. Additionally, this browser hijacker spies on users' browsing activity.

What kind of malware is Wspn?

While examining malware samples submitted to VirusTotal, our team came across Wspn, a Djvu ransomware family member. Wspn's main objective is to encrypt files, and it also modifies filenames by adding the ".wspn" extension. Furthermore, it creates a ransom note named "_readme.txt".

As an example, Wspn alters the names of files such as "1.jpg" to "1.jpg.wspn", "2.png" to "2.png.wspn", and so on. In certain instances, cybercriminals resort to data-stealing malware like RedLine and Vidar to extract sensitive information before employing Djvu ransomware to encrypt data.