Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Wzqw?

While examining malware samples submitted to VirusTotal, our group came across Wzqw ransomware belonging to the Djvu family. When a computer is compromised, Wzqw encrypts various files and adds the ".wzqw" extension to their initial filenames. As an illustration, a file labeled "1.jpg" is transformed into "1.jpg.wzqw", "2.png" is changed to "2.png.wzqw", etc.

Aside from encrypting files, Wzqw also produces a ransom note in the form of a text file named "_readme.txt". Furthermore, the propagation of Wzqw seems to entail cooperation with information-stealing malware such as Vidar and RedLine.

What kind of malware is Wztt?

In the process of analyzing malware samples submitted to the VirusTotal platform, we came across the Wztt ransomware. This malicious software encrypts various files and adds the ".wztt" extension to their filenames. Additionally, the ransomware generates a ransom note named "_readme.txt".

An example of how Wztt changes filenames: it renames "1.jpg" to "1.jpg.wztt", "2.png" to "2.png.wztt", etc. Of significant note is the classification of Wztt within the Djvu ransomware family. This implies that malicious actors might disseminate it alongside data-stealing malware such as RedLine, Vidar, and comparable malicious software.

What kind of scam is "IMAP Is Currently Marked Inactive"?

Upon reviewing this email, our team has determined that it is crafted by scammers with the intention of obtaining personal information from recipients who might not be aware of their motives. They pose as an email service provider and insert a link to a phishing page to deceive users into revealing information.

What kind of software is Live Weather Report?

We discovered the Live Weather Report browser extension while investigating untrustworthy websites. This piece of software promises easy access to weather-related information. After analyzing this extension, we determined that it is adware.

What kind of page is mcafchecking[.]click?

Mcafchecking[.]click is the URL of a rogue webpage designed to promote online scams and spam browser notifications. Additionally, it can redirect visitors elsewhere (likely untrustworthy/dangerous sites).

Most users access mcafchecking[.]click and pages akin to it via redirects generated by websites utilizing rogue advertising networks. Our research team discovered this webpage while investigating sites that use said networks.

What kind of application is NativeSeason?

Our researchers found the NativeSeason app during a routine inspection of new file submissions to VirusTotal. This application operates as advertising-supported software (adware). NativeSeason is also part of the AdLoad malware family.

What kind of software is AwesomeNewTab?

Our research team discovered the AwesomeNewTab browser extension while investigating deceptive websites. This extension is promoted as a tool that allows easy access to specific sites.

After examining AwesomeNewTab we determined that it is a browser hijacker. It modifies browser settings to generate redirects and spies on users' browsing activity.

What kind of application is ClearIndexer?

ClearIndexer is an adware-type app that we discovered during a routine investigation of new submissions to the VirusTotal website. Our examination revealed that ClearIndexer is adware and part of the AdLoad malware family. This application operates by running intrusive advertisement campaigns.

What kind of software is Brick PDF?

Our researchers discovered the Brick PDF browser extension during a routine investigation of dubious websites. This piece of software is promoted as a tool capable of merging PDF format files.

After inspecting this extension, we learned that it is a browser hijacker. Brick PDF makes changes to browser settings to endorse (through redirects) the find.gmysearchup.com fake search engine.

What kind of software is Skip Those Ads?

While investigating deceptive websites, our researchers found the Skip Those Ads browser extension. It promises to block and skip advertisements. However, instead of operating as an adblocker – this extension works as advertising-supported software (adware). Skip Those Ads feeds users with unwanted and deceptive advertisements.