Virus and Spyware Removal Guides, uninstall instructions

What kind of software is Key Searchs?

While investigating untrustworthy websites, our researchers discovered the Key Searchs browser extension. After inspecting this piece of software, we determined that it is a browser hijacker promoting (via redirects) the keysearchs.com fake search engine.

What kind of malware is SapphireStealer?

SapphireStealer is an information-stealing malware. Its codebase was released to GitHub in December 2022. Since then, several variants with differing capabilities have been discovered. Due to this, it is likely that SapphireStealer is used by multiple threat actors.

It is noteworthy that this stealer has been utilized in attacks targeting corporate credentials. Information of this kind is commonly resold to cyber criminals seeking it to facilitate cyber-espionage, ransomware, and other attacks on the compromised corporate entity.

What kind of app is HaastsEagle?

While assessing the HaastsEagle browser extension, we encountered troubling behavior. Notably, it introduces the "Managed by your organization" feature into Chrome browsers. Our discovery of HaastsEagle occurred during the examination of a malicious installer obtained from an untrustworthy website.

What kind of malware is SuperBear?

SuperBear is the name of a Remote Access Trojan (RAT). Programs within this category operate by enabling remote access and control over devices.

RATs can be highly versatile; however, research shows that SuperBear is a targeted malware. Likewise, this trojan has been used in strongly targeted attacks, i.e., spam email baiting victims with incredibly relevant information. There is reason to believe that SuperBear is used to target civil society organizations.

What kind of malware is Remo?

Remo is an Android banking Trojan that exploits the Accessibility service to illicitly acquire sensitive data. This malicious software specifically focuses on over 50 banking and cryptocurrency wallet applications. Remo primarily directs its attacks toward banking applications in the regions of Vietnam and India.

What kind of email is "Signed Agreement"?

"Signed Agreement" is a phishing email. It attempts to lure the recipient into providing their email account log-in credentials into the attachment (phishing file) by claiming that it contains remittance information. Victims of this spam mail can lose their emails and experience other serious issues.

What kind of scam is "View And Upload Required Documents"?

Our team has reviewed this email and found that its intent is to entice recipients into revealing their personal information. It includes a file that presents a fake form, prompting users to share sensitive details. It is imperative to disregard such emails.

What kind of scam is "Emails Did Not Reach Your Inbox"?

Our investigation of this email revealed that it is a phishing attempt, disguising itself as a notification from an email service provider. Scammers use this tactic to trick recipients into visiting a fake website and sharing their personal information. Therefore, it is highly recommended that recipients avoid interacting with this email and disregard it.

What kind of application is AdditionalResults?

While examining the AdditionalResults application, our team noticed that it displays various advertisements. For this reason, we categorized AdditionalResults as adware. It is worth noting that software of this type is often promoted and distributed in deceptive ways. Thus, users often install it without knowing that it will show ads.

What kind of software is Turbo Download?

Our researchers discovered the Turbo Download browser extension while investigating suspicious websites. According to its promotional material, this piece of software is advertised with the following functionalities: fast and secure downloads, all webpage image download in a single click, multi-selection tool, streamlined new browser tab gallery, etc.

After analyzing Turbo Download, we determined that it is advertising-supported software (adware). This extension feeds users with undesirable and deceptive advertisements.