Virus and Spyware Removal Guides, uninstall instructions

What kind of application is Never Forget Tab?

While inspecting the Never Forget Tab browser extension, we found that it is a browser hijacker designed to promote two fake search engines: find.eonenavigate.com and neverforgettab.com. This app promotes them by changing the web browser's settings. It is strongly recommended not to trust the Never Forget Tab app and fake search engines promoted through it.

What kind of application is Simple Ad Blocker?

While examining a deceptive website instructing visitors to update their Flash Player, our team came across a browser extension called Simple Ad Blocker. However, upon adding it, we discovered that it actually functions as adware. This app displays intrusive advertisements. Therefore, we advise against trusting Simple Ad Blocker.

What is kind of scam is "Email Storage Has Exceeded Its Limit"?

Upon examining this letter, we have determined that it is a fraudulent email composed by scammers with the intention of tricking recipients into divulging sensitive information. The email is disguised as a message from an email service provider and includes a hyperlink to a phishing website. It is advisable to disregard this scam email.

What kind of malware is SkullLocker?

While examining malware samples submitted to VirusTotal, we discovered a ransomware variant based on Chaos ransomware dubbed SkullLocker. This ransomware encrypts files, creates the "read_it.txt" file (a ransom note), and appends the ".skull" extension to filenames.

An example of how SkullLocker changes filenames: it renames "1.jpg" to "1.jpg.skull", "2.png" to "2.png.skull", and so forth.

What is Blacksnaketeam ransomware?

Blacksnaketeam is a ransomware-type program designed to encrypt data and demand payment for its decryption. When we executed a sample of Blacksnaketeam on our test machine, it began encrypting files.

The filenames of affected files were appended with a ".pay2unlock" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.pay2unlock", "2.png" as "2.png.pay2unlock", etc.

After the encryption process was completed, Blacksnaketeam changed the desktop wallpaper and created a ransom-demanding message named "UNLOCK_MY_FILES.txt".

What kind of page is factor1right[.]com?

Our team has examined factor1right[.]com and found that this site offers to download a malicious file and asks for permission to send notifications. We discovered factor1right[.]com while inspecting pages that use shady advertising networks. Usually, users access sites like factor1right[.]com inadvertently.

What kind of application is My Cloud Tab?

During our analysis of the My Cloud Tab browser extension, our team discovered that it functions as a browser hijacker. The primary objective of this application is to promote search.mycloudtab.com, a bogus search engine. My Cloud Tab achieves browser hijacking by manipulating the browser's settings.

What kind of scam is "Your Email Access Will Be Removed"?

We have examined this email and found that it is a phishing letter. Emails of this type are fraudulent emails sent by cybercriminals with the intention of tricking the recipient into revealing sensitive information such as login credentials or other personal data. In this case, the phishing email is a fake letter from an email service provider.

What kind of page is worldcommonjournal[.]com?

Our researchers discovered the worldcommonjournal[.]com rogue page while investigating dubious websites. It is designed to promote browser notification spam and redirect users to other (likely unreliable/dangerous) sites.

Visitors to worldcommonjournal[.]com and pages akin to it – primarily access them through redirects caused by websites using rogue advertising networks.

What is Tidings?

Our research team discovered an installer containing the Tidings application while inspecting deceptive websites. After analyzing this app, we determined that it is advertising-supported software (adware). Tidings operates by displaying ads, and it may have additional harmful abilities.