Virus and Spyware Removal Guides, uninstall instructions

What kind of application is Photon Search?

While assessing the Photon Search browser extension, we observed its intention to promote a fake search engine by manipulating web browser settings, a behavior often known as browser hijacking. It is essential to note that browser hijackers like Photon Search are typically advertised through dubious methods.

What kind of software is Qwik Ant?

While inspecting dubious sites, our research team discovered the Qwik Ant browser extension. It is endorsed as a productivity tool for easy access to various popular platforms and services. Qwik Ant makes changes to browser settings to promote (via redirects) the search.qwikant.com illegitimate search engine. Due to this, this extension is classed as a browser hijacker.

What kind of software is I AM Daily?

I AM Daily is a rogue extension that promises to provide "positive affirmation" to users whenever they open a new browser tab. This piece of software makes modifications to browser settings in order to generate redirects. Due to this behavior, I AM Daily is categorized as a browser hijacker.

What kind of software is Bazaar Virtual?

Our researchers discovered the Bazaar Virtual browser extension during a routine investigation of dubious websites. This piece of software promises quick access to online clothes stores.

However, our analysis revealed that Bazaar Virtual is a browser hijacker. This extension modifies browsers to promote the seektrailblazers.com fake search engine.

What kind of application is Finance Tab?

During our evaluation of the Finance Tab browser extension, we identified its intent to endorse a counterfeit search engine by altering web browser settings, a practice commonly referred to as browser hijacking. It is noteworthy that browser hijackers, such as the Finance Tab, are frequently promoted through questionable means.

What kind of application is DeinocheirusMirificus?

After conducting a thorough evaluation of the DeinocheirusMirificus application, it has become evident that this is an untrustworthy app with the capacity to access a broad spectrum of data and manage browser components. Moreover, it is distributed via a malicious installer. As a result, users are strongly urged to refrain from adding DeinocheirusMirificus to their browsers.

What kind of malware is Zombi?

While investigating new file submissions to VirusTotal, our research team discovered yet another ransomware from the MedusaLocker family – titled Zombi.

This malicious program encrypts data and demands ransoms for its decryption. It targets large entities (companies, organizations, etc.) rather than home users. This ransomware also uses double extortion tactics.

After we executed a sample of Zombi on our test machine, it encrypted files and appended their filenames with a ".zombi2" extension (note that the number may differ based on the program's variant). For example, an original filename such as "1.jpg" appeared as "1.jpg.zombi2", "2.png" as "2.png.zombi2", etc. Afterwards, a ransom note titled "How_to_back_files.html" was created.

What kind of application is SpinosaurusAegyptiacus?

After thoroughly examining the SpinosaurusAegyptiacus application, it has been established that this is an untrustworthy app with the ability to access a wide range of data and manage browser components. Also, it is distributed through a malicious installer. Consequently, users are strongly advised against adding SpinosaurusAegyptiacus to their browsers and should promptly remove it if it has already been added.

What kind of software is Things To Do?

Things To Do is a browser extension endorsed as a tool that allows users to create to-do lists. We discovered this piece of software during a routine inspection of untrustworthy websites.

Our examination revealed that Things To Do is a browser hijacker. The extension changes browser settings to promote (via redirects) the srchingocttd.com fake search engine.

What kind of malware is Read?

A new ransomware variant, referred to as Read and associated with the Makop family, has been uncovered during an examination of malware samples submitted to VirusTotal. This variant encrypts files and alters their filenames, in addition to creating the "+README-WARNING+.txt" file featuring a ransom note and changing the desktop wallpaper.

Read ransomware appends a string of random characters, readdecoding@outlook.com email address, and the ".read" extension to filenames. For instance, it renames "1.jpg" to "1.jpg.[2AF20FA3].[readdecoding@outlook.com].read" and "2.png" to "2.png.[2AF20FA3].[readdecoding@outlook.com].read".