Virus and Spyware Removal Guides, uninstall instructions

What kind of application is DefaultBoost?

Our research team discovered the DefaultBoost rogue application during a routine inspection of new file submissions to VirusTotal. After examining this app, we determined that DefaultBoost is adware belonging to the AdLoad malware family. It is designed to generate revenue for its developers by feeding users unwanted and potentially malicious ads.

What kind of software is Purrfect Tab?

Purrfect Tab is promoted as an extension that displays feline-themed browser wallpapers. Our researchers discovered this piece of software while investigating suspicious websites. After analyzing Purrfect Tab, we determined that it is a browser hijacker. It modifies browser settings in order to cause redirects to the ssrcunow.com fake search engine.

What kind of application is DesktopMapper?

During a routine inspection of new submissions to the VirusTotal website, our research team discovered the DesktopMapper app. Our examination of it revealed that this piece of software is adware. DesktopMapper belongs to the AdLoad malware family.

What kind of application is ConnectionProjector?

ConnectionProjector is a rogue application that we discovered while reviewing new file submissions to the VirusTotal site. Our examination of this piece of software revealed that ConnectionProjector is adware belonging to the AdLoad malware family.

What kind of software is Swift Searcher?

Our research team discovered the Swift Searcher browser extension while checking out deceptive sites. After inspecting this extension, we determined that it is browser-hijacking software. Swift Searcher makes changes to browser settings in order to promote (through redirects) the search.swiftsearcher.com fake search engine.

What is "Avast - Your PC Is Infected With 5 Viruses!"?

During our examination of this webpage, we identified its use of deceptive messages designed to deceive visitors into thinking that their computers are infected. It is essential to avoid such websites, as they are crafted with the intent to either extort money, gather personal information, or for other malicious objectives. Usually, users stumble upon these websites inadvertently.

What kind of email is "Repair Response"?

After inspecting the "Repair Response" email, we determined that it is spam. This fake letter claims that multiple messages failed to reach the recipient's inbox due to an error caused by a server outage.

"Repair Response" promotes a phishing website disguised as an email account sign-in page. Hence, by trusting this spam mail – the user can have their email account stolen and experience other serious issues.

What is "Contract For Invoice"?

During our scrutiny of this email, our team identified it as a fraudulent notification, falsely claiming the sharing of a contract document with the recipients. The primary objective of this email is to entice recipients into accessing a deceptive website and providing their login credentials. Such emails are referred to as phishing emails.

What kind of malware is 6y8dghklp?

Our researchers discovered the 6y8dghklp ransomware while reviewing new submissions to the VirusTotal platform. This malicious program is part of the Phobos ransomware family.

On our test system, 6y8dghklp ransomware encrypted files and modified their filenames. Original names were appended with a unique ID assigned to the victim, the cyber criminals' email address, and a ".6y8dghklp" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.id[9ECFA84E-3481].[datarecoverycenterOPG@onionmail.org].6y8dghklp".

After the encryption process was completed, ransom-demanding messages were created/displayed in a pop-up window ("info.hta") and text file ("info.txt").

What kind of app is ParasaurolophusWalkeri?

While examining the ParasaurolophusWalkeri browser extension, we came across disturbing activities, such as the enabling of the "Managed by your organization" feature in Chrome settings and the gathering of user data. Our interaction with ParasaurolophusWalkeri emerged as a result of our investigation into a malicious installer.