Virus and Spyware Removal Guides, uninstall instructions

What kind of application is Space Spiders?

Our team examined Space Spiders and found that it hijacks a web browser by changing some of its settings to search.spacespiders.net - it promotes a fake search engine. It is common for browser hijackers to be promoted using shady methods. Thus, users often add browser hijackers to their browsers inadvertently.

What kind of application is Subtitles?

While investigating deceptive websites, our researchers discovered an installer containing an application called Subtitles. After inspecting this piece of software, we determined that it is adware.

What kind of page is cropsibagen[.]com?

Cropsibagen[.]com is a rogue webpage that is designed to push spam browser notifications and redirect visitors to other (likely unreliable/harmful) sites.

Users primarily enter cropsibagen[.]com and pages akin to it via redirects generated by websites utilizing rogue advertising networks. Our research team discovered this webpage while inspecting sites that use said networks.

What kind of page is axegrinder[.]top?

Axegrinder[.]top is the address of a rogue page. It operates by promoting browser notification spam and redirecting visitors to other (likely dubious/malicious) sites.

Users primarily access pages of this kind through redirects caused by websites employing rogue advertising networks. Our research team found axegrinder[.]top while investigating sites that utilize such networks.

What kind of application is Flexi Search New Tab?

During our examination of Flexi Search New Tab, we found that this extension functions as a browser hijacker. We learned that the purpose of Flexi Search New Tab is to promote searchflexi.com, which is a fake search engine. Flexi Search New Tab promotes searchflexi.com by taking control over a web browser (by changing its settings).

What kind of application is DesignationDrive?

DesignationDrive is an adware-type application that our research team discovered while investigating new submissions to the VirusTotal website. This app is part of the AdLoad malware family. DesignationDrive is designed to feed users with unwanted/deceptive advertisements.

What kind of page is mycaptchaspace[.]top?

Upon examination of mycaptchaspace[.]top, our team has determined that its purpose is to deceive visitors into granting permission for notification delivery. Mycaptchaspace[.]top utilizes deceptive content to obtain this permission. Our team came across mycaptchaspace[.]top while investigating dubious pages associated with untrustworthy advertising networks.

What kind of malware is DEADbyDAWN?

While inspecting malware samples submitted to VirusTotal, our team discovered DEADbyDAWN - ransomware designed to encrypt files. Also, DEADbyDAWN alters file names by replacing them with a random string of characters and appending its unique extension. It is important to note that different samples of DEADbyDAWN append different extensions to filenames.

Additionally, DEADbyDAWN drops fifty text files onto the desktop, labeled sequentially from "README0.txt" to "README50.txt". Each of these files contains an identical ransom note. An example of how DEADbyDAWN renames files: it changes "1.jpg" to "11ab8ba41c795a7da222ba7005fc7405.OGUtdoNRE", "2.png" to "d33e68b8101c81f1e51c640baea47623.OGUtdoNRE", and so forth.

What kind of malware is Raasv2?

Raasv2 is ransomware that our team discovered while examining samples submitted to VirusTotal. Our analysis revealed that Raasv2 encrypts files, renames all encrypted files, and creates the "#FILES-ENCRYPTED.txt" file (a ransom note). It prepends the decryption.helper@aol.com email address and the victim's ID and appends the ".raasv2" extension to filenames.

For example, Raasv2 renames "1.jpg" to "[decryption.helper@aol.com][9ECFA84E]1.jpg.raasv2", "2.png" to "[decryption.helper@aol.com][9ECFA84E]2.png.raasv2", and so forth.

What kind of application is DisplayFraction?

Upon examination of the DisplayFraction application, our team has concluded that it displays characteristics of adware, categorizing it as such. Adware typically relies on questionable tactics for promotion and distribution. Our discovery of DisplayFraction occurred while investigating misleading websites.