Step-by-Step Malware Removal Instructions

Sync Wallets Scam
Phishing/Scam

Sync Wallets Scam

"Sync Wallets" is a phishing scam, which our researchers found when inspecting shady websites. Schemes of this type can be promoted on many rogue pages simultaneously; we found it on fixedvalidity[.]online website, but it may be encountered on others as well. "Sync Wallets" is presented as a dApp

Color Darker Browser Hijacker
Browser Hijacker

Color Darker Browser Hijacker

We have found the installer for the color darker application on multiple deceptive websites. While analyzing the color darker application, we learned that it hijacks a web browser by changing some of its settings to wwmnnl.com (a fake search engine). At the time of the research, we discove

Facebookteens.com Ads
Notification Spam

Facebookteens.com Ads

We discovered facebookteens[.]com whilst researching other questionable websites. The page in question is designed to load dubious content, promote browser notification spam, and redirect visitors to various unreliable/dangerous sites. Most visits to facebookteens[.]com are unintentional as they a

Webdefencesupprot.com Ads
Notification Spam

Webdefencesupprot.com Ads

Detected by our researchers when inspecting untrustworthy webpages, webdefencesupprot[.]com is a site designed to load deceptive content, promote its browser notifications, and redirect visitors to other unreliable/harmful pages. During our observation, this website ran the "McAfee - Your PC is in

WaspLocker Ransomware
Ransomware

WaspLocker Ransomware

While searching VirusTotal for new malware submissions, our researchers found a new ransomware called WaspLocker. On our test system, this ransomware-type program encrypted files and appended them with the ".locked" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.locked"

Wholewowblog.com Ads
Notification Spam

Wholewowblog.com Ads

Wholewowblog[.]com is a deceptive website that has been discovered by our team while testing sites that use questionable advertising networks. We examined wholewowblog[.]com and found that it uses a clickbait technique to trick visitors into agreeing to receive notifications that promote other unt

White Rabbit Ransomware
Ransomware

White Rabbit Ransomware

Discovered by Michael Gillespie, White Rabbit is a ransomware-type program designed to encrypt data and demand payment for the decryption. When unleashed upon our test machine, this malicious program encrypted and appended targeted files with a ".scrypt" extension, as well as created correspondin

iPhone 12 Mini Giveaway POP-UP Scam
Phishing/Scam

iPhone 12 Mini Giveaway POP-UP Scam

Our team has discovered this iPhone 12 Mini giveaway scam website while visiting other shady websites (websites that use questionable advertising networks) and inspecting notifications from untrustworthy pages. Scammers behind this page attempt to trick unsuspecting visitors into providing persona

Aucfuu.com Ads
Notification Spam

Aucfuu.com Ads

Our team has discovered aucfuu[.]com while visiting websites (torrent, illegal movie streaming, and similar pages) that use questionable advertising networks. At the time of the research, aucfuu[.]com used a clickbait technique to get permission to show notifications and redirected to a shady webs

Video***.live Ads
Notification Spam

Video***.live Ads

While analyzing questionable sites, our research team discovered the video***.live websites. This webpage group includes many domains, e.g., videosol[.]space, videobtc[.]space, videofun[.]space, videoeth[.]space, videofan[.]space, videofon[.]space, videofen[.]space, etc. These sites are designed