Virus and Spyware Removal Guides, uninstall instructions

What kind of application is Search101?

After examining the Search101 browser extension, it became apparent that its purpose is to serve as a browser hijacker, with the goal of promoting find.dnavigate-now.com, a fake search engine. Search101 modifies the settings of a web browser, effectively taking control of it.

It is important to highlight that most users add applications like Search101 to their browsers, without realizing that such actions will result in their browser being hijacked.

What kind of malware is Wzer?

During the analysis of malware samples submitted to VirusTotal, our team encountered the Wzer ransomware, which is associated with the Djvu family. Upon infecting a computer, Wzer encrypts a range of files and appends the ".wzer" extension to their original filenames. For instance, a file named "1.jpg" undergoes a conversion to "1.jpg.wzer" while "2.png" becomes "2.png.wzer" and so on.

In addition to its file encryption function, Wzer generates a ransom note presented as a text file named "_readme.txt". Moreover, the distribution of Wzer may involve collaboration with information-stealing malware like Vidar and RedLine.

What kind of application is ManagerUnit?

ManagerUnit is an adware-type application that we discovered while reviewing new file submissions to the VirusTotal site. This app belongs to the AdLoad malware family. ManagerUnit is designed to run intrusive advertisement campaigns. This app feeds users with unwanted and deceptive ads.

What kind of email is "Request To Deactivate Your Email"?

"Request To Deactivate Your Email Account" is a phishing scam. This fake letter claims that the recipient's request to deactivate their email account has been received and will be processed. This spam mail aims to extract victims' log-in credentials as they attempt to stop the alleged deactivation.

What kind of application is AssuranceForcast?

Our research team found the AssuranceForcast app during a routine investigation of new file submissions to the VirusTotal website. After inspecting this piece of software, we learned that it is adware. AssuranceForcast is part of the AdLoad malware family. This application is designed to generate revenue for its developers by feeding users with undesirable and deceptive advertisements.

What kind of software is My Weather Tab?

While inspecting deceptive websites, our researchers discovered the My Weather Tab browser extension. Our examination revealed that this extension operates as browser-hijacking software. It makes alterations to browser settings in order to promote (via redirects) the myweathertab.xyz fake search engine.

What kind of email is "Queued Messages Notification"?

After inspecting the "Queued Messages Notification" email, we determined that it is spam promoting a phishing scam. The letter claims that messages are pending delivery to the recipient's mailbox. Supposedly, the email account must be verified by signing in through the endorsed phishing site.

What kind of scam is "Security Risk For Your Email"?

After thorough analysis, our team has determined that the intent of this email is to trick recipients into revealing their personal information. Such emails are classified as phishing endeavors, where the senders, who are malicious actors, intend to defraud recipients by coaxing them into sharing sensitive data on fraudulent websites.

What kind of app is ForwardLean?

After analyzing ForwardLean, our team has determined that its primary function is to present bothersome advertisements to users. Such applications fall under the category of adware. It is important to highlight that users often download and install adware inadvertently, often without being aware of it.

What kind of email is "Norton Subscription Renewal Confirmation"?

Our examination of the "Norton Subscription Renewal Confirmation" email revealed that it is spam. This scam letter proclaims that the recipient's protection subscription has been renewed for another year. The goal is to trick recipients into calling the fake helpline and entangling them in a scam.

It must be stressed that the information provided by this email is false, and this mail is in no way associated with the Norton AntiVirus.