Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Jaqw?

In the process of analyzing malware samples that were provided to the VirusTotal site, we came across a ransomware variant known as Jaqw. Jaqw functions by encrypting files and altering their filenames through the addition of the ".jaqw" extension. Additionally, Jaqw is programmed to generate a text file named "_readme.txt", which includes a message detailing the ransom demands.

Notably, Jaqw is categorized within the Djvu ransomware family. It is worth noting that Djvu ransomware is frequently disseminated alongside information stealers like RedLine or Vidar by malicious actors. An example of how Jaqw changes filenames: it renames "1.jpg" to "1.jpg.jaqw", "2.png" to "2.png.jaqw", and so forth.

What kind of application is BackupTelephone?

Upon evaluating the BackupTelephone application, our assessment has determined that it exhibits intrusive advertisements, leading to its classification as adware. Users frequently install applications like BackupTelephone without fully comprehending their operations. It is recommended to uninstall BackupTelephone or comparable programs from compromised computers.

What kind of application is LookupSystem?

While investigating new submissions to the VirusTotal website, our researchers discovered the LookupSystem app. Our inspection revealed that LookupSystem is adware from the AdLoad malware family. It is designed to run intrusive advertisement campaigns, and this application may have additional harmful capabilities.

What kind of email is "Webmail Account Upgrade"?

Our examination of the "Webmail Account Upgrade" email revealed that it is spam. This fake message claims that the recipient must reactivate their email account to prevent its termination. The goal of this phishing scam is to deceive recipients into disclosing their log-in credentials.

What kind of application is OptimalBrowser?

OptimalBrowser is a rogue application discovered by our research team while inspecting new submissions to the VirusTotal website.

Our analysis revealed that this app is advertising-supported software (adware) belonging to the AdLoad malware family. OptimalBrowser is designed to generate revenue for its developers by feeding users with unwanted and deceptive advertisements.

What kind of software is Quick World Clock?

Our research team found the Quick World Clock browser extension while checking out deceptive sites. This piece of software promises easy access to user-selected world clocks and other widgets.

After analyzing this extension, we learned that it modifies browser settings in order to generate redirects to the find.msrc-now.com fake search engine, and it spies on users' browsing activity. Due to this behavior, Quick World Clock is classified as a browser hijacker.

What kind of email is "New Version For Your Mailbox"?

Our analysis of "New Version For Your Mailbox" revealed that it is a phishing email. This letter attempts to trick the recipient into disclosing their email log-in credentials by encouraging them to upgrade their account and avoid service interruptions.

What kind of malware is NoBit?

NoBit is a piece of malicious software classed as ransomware. It is designed to encrypt data and demand payment for its decryption.

On our testing system, NoBit encrypted files and appended their filenames with a ".bit" extension. To elaborate, a file initially named "1.jpg" appeared as "1.jpg.bit", "2.png" as "2.png.bit", and so on for all of the locked files.

After the encryption process was finished, this ransomware changed the desktop wallpaper and displayed a ransom note in a pop-up window.

What kind of email is "Funds Has Been Credited To Your Account"?

After examining the "Funds Has Been Credited To Your Account" email, we determined that it is spam. The letter states that it contains an attached file concerning a revised payment. However, the attachment is a phishing file that targets email account log-in credentials.

What kind of application is ConnectionLocator?

Our researchers found the ConnectionLocator app during a routine investigation of new submissions to the VirusTotal site. This piece of software operates as adware. It is pertinent to mention that ConnectionLocator is part of the AdLoad malware family.