Virus and Spyware Removal Guides, uninstall instructions

What kind of application is FrequencyField?

FrequencyField is an adware-type application that we discovered while investigating new submissions to the VirusTotal website. This app is part of the AdLoad malware family. FrequencyField runs intrusive advertisement campaigns and may have other harmful abilities.

What kind of application is ElementSync?

Our research team discovered the ElementSync application during a routine inspection of new file submissions to the VirusTotal platform. After analyzing this app, we determined that it is advertising-supported software (adware). It is pertinent to mention that ElementSync belongs to the AdLoad malware family.

What kind of software is Travel Tab?

Our research team discovered the Travel Tab browser extension while investigating questionable websites. It is promoted as an easy-access tool for news relating to travel and hotels.

After analyzing this piece of software, we determined that it is a browser hijacker. Travel Tab modifies browsers to endorse (via redirects) the traveldailydiscounts.com fake search engine.

What kind of application is EffortPlanning?

Our researchers found the EffortPlanning app during a routine investigation of new submissions to VirusTotal. After examining this piece of software, we determined that it is adware. Additionally, it was evident that EffortPlanning is part of the AdLoad malware family.

What kind of email is "ICLOUD Outlook Storage"?

Our inspection of the "ICLOUD Outlook Storage" email revealed that it is malicious spam (malspam). It falsely claims that the recipient's iCloud-linked Outlook account is almost full – hence, multiple incoming messages failed delivery.

This fake notification states that the undelivered emails can be found in the attachments which, in fact, are malicious documents designed to infect systems with the Agent Tesla RAT (Remote Access Trojan).

What kind of email is "Unsuccessful Search For Relatives"?

After examining two emails, referred to as "Unsuccessful Search For Relatives", we determined that they are spam. These letters are thematically identical; they inform recipients that a wealthy family has passed away in an accident, thus prompting legal representatives to search for surviving relatives. Supposedly, the recipient is a candidate, and they must contact the sender urgently since the inheritable funds will soon be confiscated by the bank.

It must be stressed that all these claims are false and that this is a phishing scam. It is noteworthy that this scheme may also aim to trick victims into sending the scammers money.

What kind of page is heavypcnetwork[.]com?

In our analysis of heavypcnetwork[.]com, we discovered that the website's primary purpose is to deceive visitors into thinking that their computers are at risk. Additionally, heavypcnetwork[.]com prompts users to grant permission for notifications. It is important to be aware that users frequently end up on websites like heavypcnetwork[.]com unintentionally.

What kind of software is To Do Search?

Our researchers discovered To Do Search while inspecting questionable websites. This browser extension is endorsed as a task-managing tool. After investigating To Do Search, we determined that it is a browser hijacker. This extension makes changes to browser settings in order to promote the search.todosearchs.com fake search engine.

What kind of malware is Elibe?

While investigating new submissions to the VirusTotal website, our research team discovered the Elibe ransomware. It is designed to encrypt data and demand ransoms for the decryption.

On our testing system, this ransomware encrypted files and altered their filenames. Original titles were appended with the attackers' email, a unique ID assigned to the victim, and a ".elibe" extension. For example, a file initially named "1.jpg" appeared as "1.jpg.EMAIL=[recoveryfile7@gmail.com]ID=[1730E6121CD87855].elibe".

After the encryption process was concluded, a ransom-demanding message titled "FILES ENCRYPTED.txt" was dropped.

What kind of application is Zen Searcher?

Following our evaluation of the Zen Searcher app, our team has determined that its primary purpose is to function as a browser hijacker aimed at promoting search.zensearcher.com (a fake search engine). This extension alters browser settings to assert control. It is advisable to remove Zen Searcher from affected browsers without delay.