Virus and Spyware Removal Guides, uninstall instructions

What kind of page is onegmarketing[.]com?

Onegmarketing[.]com is one of the many websites that employ deceitful messages to trick visitors into enabling them to display notifications. Additionally, while browsing onegmarketing[.]com, visitors might get redirected to other untrustworthy websites. Our team stumbled upon onegmarketing[.]com during our assessment of websites that use questionable advertising networks.

What kind of scam is "You Have New 5 Held Messages"?

After examining this email, we have concluded that it was created by scammers pretending to be an email service provider for fraudulent purposes. These scammers aim to trick the recipients into sharing sensitive information on a fake login page (a phishing site). As a result, we recommend that the recipients ignore this email.

What kind of page is fpozbd[.]com?

Our research team discovered the fpozbd[.]com rogue page while investigating suspicious websites. It operates by promoting spam browser notifications and redirecting visitors to other (likely untrustworthy/harmful) sites. Users typically enter webpages like fpozbd[.]com via redirects caused by websites that use rogue advertising networks.

What kind of page is oratefinauknceiwo[.]com?

During a routine investigation of untrustworthy sites, we discovered the oratefinauknceiwo[.]com rogue page. It is designed to promote dubious content and spam browser notifications. Furthermore, it can redirect visitors to other (likely unreliable/hazardous) websites.

Most visitors to oratefinauknceiwo[.]com and similar webpages access them via redirects caused by sites using rogue advertising networks.

What kind of scam is "Your McAfee Subscription Is Out Of Date"?

Our research team discovered the "Your McAfee Subscription Is Out Of Date" scam while investigating rogue websites. This deceptive content makes false claims regarding infections on the user's device. Typically, scams of this type are used to promote untrustworthy/harmful software.

It must be stressed that this scheme is in no way associated with either the McAfee anti-virus software or its developer McAfee Corp.

What kind of email is "Ledger Wallet Has Been Suspended Due To Suspicious Activity"?

Our inspection of the "Ledger Wallet Has Been Suspended Due To Suspicious Activity" email revealed that it is spam. This letter is presented as a notification regarding the suspension of the recipient's cryptocurrency wallet. It must be emphasized that this email is a scam, and it is not associated with the actual Ledger Wallet.

This fake mail aims to trick recipients into providing their wallet credentials to a phishing site disguised as the official Ledger website.

What is btc-A ransomware?

While examining new submissions to the VirusTotal website, our researchers discovered the btc-A ransomware. This malicious program belongs to the Xorist ransomware family.

When we launched a sample of this ransomware on our test system, it encrypted files and appended their titles with a ".btc-Apt2" extension. To elaborate, an original filename like "1.jpg" appeared as "1.jpg.btc-Apt2", "2.png" as "2.png.btc-Apt2", etc.

Afterwards, btc-A displayed a pop-up window and created a text file named "HOW TO DECRYPT FILES.txt". Both contained identical ransom notes in Portuguese.

What is Amazon Rain Forest - New Tab Search?

Our research team found the Amazon Rain Forest - New Tab Search browser extension while investigating deceptive webpages. This extension is endorsed as a tool that displays browser wallpapers depicting the Amazon rainforest.

After analyzing this piece of software, we determined that it is a browser hijacker promoting (through redirects) the amazonforextnewtab.com fake search engine.

What kind of application is Convert Page to PDF?

Convert Page to PDF browser extension is advertised as a tool that allows users to convert a web page into a PDF file simply by clicking on its icon. However, during our examination, we noticed that Convert Page to PDF app displays annoying advertisements. Thus, we classified this program as adware.

What kind of scam is "New/Old Staff Payroll"?

Upon analyzing the email, our team has determined that its purpose is to trick recipients into revealing their personal information. Such letters are called phishing emails. The email in question urges recipients to review certain documents, but in reality, it is a fraudulent message that should be disregarded.