Virus and Spyware Removal Guides, uninstall instructions

What kind of application is GoldenLooker?

Following the assessment of GoldenLooker, it has been concluded that its main purpose is to inundate users with intrusive advertisements, classifying it as adware. It is important to note that apps like GoldenLooker are often promoted and distributed through deceptive tactics, leading users to install them unintentionally.

What kind of application is PhotosFox?

After examining the PhotosFox application, it has been concluded that its primary intent is to operate as a browser hijacker designed to endorse searchinmda.com, which is a fake search engine. This extension modifies browser settings in order to establish control over it. Users should not trust apps that hijack browsers.

What kind of software is "key pro"?

Our research team found the "key pro" browser extension while investigating untrustworthy websites. After analyzing this piece of software, we learned that it is a browser hijacker. This extension changes browser settings to endorse (via redirects) the keysearchs.com fake search engine. Additionally, key pro spies on users' browsing activity.

What kind of malware is B-Panther?

B-Panther is a ransomware-type program that we discovered while inspecting new submissions to the VirusTotal platform. It is part of the Xorist ransomware family. This ransomware encrypts files and demands ransoms for the decryption.

On our test system, B-Panther encrypted files and appended their filenames with a ".B-Panther" extension. To elaborate, a file originally named "1.jpg" appeared as "1.jpg.B-Panther", "2.png" as "2.png.B-Panther", and so forth for all of the affected files.

Once the encryption process was finished, B-Panther created identical ransom notes in a pop-up window and text file titled "HOW TO DECRYPT FILES.txt". The text therein was in Portuguese.

What kind of email is "Email Routine Check"?

After reviewing "Email Routine Check", we determined that it is a phishing email. It claims that the recipient's mail account is using outdated security settings – hence, they need to update it to avoid service interruptions.

The aim of this spam mail is to trick recipients into entering their email account log-in credentials into a phishing website that imitates their sign-in page.

What kind of malware is SpotifyxBiden?

Our researchers discovered the SpotifyxBiden ransomware while inspecting new malware submissions to the VirusTotal site. This malicious program is based on the Chaos ransomware. SpotifyxBiden is designed to encrypt data and demand ransoms for its decryption.

On our test machine, the ransomware added the ".spotifyxbiden" to the titles of encrypted files. For example, a file initially named "1.jpg" appeared as "1.jpg.spotifyxbiden", "2.png" as "2.png.spotifyxbiden", and so on.

After the encryption process was finished, SpotifyxBiden changed the desktop wallpaper and dropped a ransom-demanding message titled "read_it.txt".

What kind of email is "Deceased Relative"?

Our inspection of the "Deceased Relative" email revealed that it is spam. This phishing mail is presented as a letter from an attorney who had represented the recipient's deceased relative. As the next of kin, the recipient is supposedly entitled to a large sum.

Spam emails of this kind target personally identifiable information and may trick victims into transferring money to the scammers.

What is MelursusUrsinus?

During our examination of a malicious installer downloaded from a shady website, we encountered the MelursusUrsinus browser extension. Our team learned that it is a malicious extension that can activate the "Managed by your organization" feature within the Chrome browser, gather various data, and manage certain browser components.

What kind of application is GeneralAccess?

After reviewing GeneralAccess, our team has determined that its primary function is to deliver intrusive advertisements to users, categorizing it as adware. It is worth highlighting that similar apps to GeneralAccess are frequently promoted and distributed through deceptive means. Thus, users install them inadvertently.

What kind of software is fake Google Drive extension?

While investigating dubious websites, our research team found a deceptive page promoting an installer containing this fake Google Drive browser extension. This piece of malicious software has data-stealing capabilities, and it can display spam browser notifications.

It must be emphasized that this extension is fake, and it is in no way associated with the actual Google Drive file storage and synchronization service or its developer – Google.