Virus and Spyware Removal Guides, uninstall instructions

What kind of software is Lookup for Wikipedia?

While examining suspicious sites, our research team discovered the Lookup for Wikipedia browser extension. It is presented as an easy-access tool to Wikipedia, which is also capable of saving the search history of this online encyclopedia.

However, after analyzing this extension, we determine that it is a browser hijacker. Lookup for Wikipedia promotes the lookcompwiki.com fake search engine.

What kind of application is LauncherLocator?

Our research team discovered the LauncherLocator application during a routine inspection of new submissions to VirusTotal. After examining this piece of software, we learned that it is adware. It is noteworthy that LauncherLocator is part of the AdLoad malware family.

What kind of application is Motivational Quotes?

Our team inspected the Motivational Quotes app and found that its purpose is to hijack web browsers. It is common for browser hijackers to promote fake or unreliable search engines. Motivational Quotes promotes motivational-quotes.com - a fake search engine. It does so by changing the settings of the affected web browser.

The developers of this extension have also released a different version titled Daily Motivational Quotes.

What kind of malware is Qxtfkslrf?

The Qxtfkslrf ransomware is our newest find from the VirusTotal website. This malicious program belongs to the Snatch ransomware family. Qxtfkslrf is designed to encrypt data and demand payment for its decryption.

On our test machine, this ransomware encrypted files and appended their filenames with a ".qxtfkslrf" extension. For example, a file titled "1.jpg" appeared as "1.jpg.qxtfkslrf", "2.png" as "2.png.qxtfkslrf", and so on for all of the affected files.

After the encryption process was finished, Qxtfkslrf created a ransom note titled "HOW TO RESTORE YOUR QXTFKSLRF FILES.TXT" and dropped it onto the desktop. The message therein made it evident that this ransomware targets companies rather than home users.

What kind of page is vinetguide[.]com?

After our investigation of vinetguide[.]com, we discovered that this website utilizes a deceptive tactic, a clickbait message, to manipulate visitors into subscribing to notifications. Furthermore, vinetguide[.]com has the potential to redirect users to other unreliable websites. Therefore, it is strongly recommended to exercise caution and avoid placing trust in vinetguide[.]com.

What kind of malware is GreetingGhoul?

GreetingGhoul is a piece of malicious software that targets cryptocurrency wallets. This stealer-type malware is focused exclusively on digital currencies. GreetingGhoul is currently active in Europe, South America, and the United States. There is tenuous evidence pointing to the cyber criminals behind this stealer being from a Russian-speaking region.

What kind of page is robots-verify-checkio[.]com?

During our investigation, it came to our attention that robots-verify-checkio[.]com is one of the many websites employing deceptive tactics to trick visitors into agreeing to receive notifications. Additionally, while browsing robots-verify-checkio[.]com, users are redirected to other untrustworthy websites.

Our team stumbled upon robots-verify-checkio[.]com while analyzing websites connected to questionable advertising networks.

What kind of malware is Stealth Soldier?

Stealth Soldier is a piece of malicious software. This malware has multiple functionalities geared towards surveillance and data exfiltration.

Stealth Soldier has been observed being implemented in espionage attacks targeting Libyan organizations. There is evidence linking Stealth Soldier's C&C (Command and Control) network to phishing operations. There are also some similarities between this infrastructure and other malicious campaigns active in North Africa.

What kind of website is taitlastwebegan[.]com?

While examining pages that use shady advertising networks, we discovered taitlastwebegan[.]com, a deceptive website. This page is designed to display a misleading message to lure visitors into permitting it to send notifications. Also, taitlastwebegan[.]com redirects visitors to similar pages.

What kind of page is adsforyoupro[.]com?

During our investigation, we uncovered that adsforyoupro[.]com utilizes a deceptive tactic to lure visitors into permitting it to display notifications. Furthermore, adsforyoupro[.]com redirects users to other sites. Our team encountered adsforyoupro[.]com while analyzing sites linked to dubious advertising networks.