Virus and Spyware Removal Guides, uninstall instructions

What kind of email is "Help My Daughter"?

We have examined this email and determined that it is a scam. Scammers behind this email aim to trick recipients into believing they will receive a certain amount of money for helping to take care of a daughter of a woman diagnosed with cancer. Scammers who have written this email only intend to steal money and (or) information.

What kind of malware is Gigabud?

Gigabud is the name of an Android Remote Access Trojan (RAT) Android that can record the victim's screen and steal banking credentials by abusing the Accessibility Service. Gigabud masquerades as banking, shopping, and other applications. Threat actors have been observed using deceptive websites to distribute Gigabud RAT.

What kind of malware is Marnet?

Marnet is ransomware that encrypts and renames files. Also, it drops the "how_to_back_files.html" file containing a ransom note. We discovered Marnet while examining malware samples submitted to the VirusTotal web page. We also found that Marnet belongs to a ransomware family called MedusaLocker.

An example of how Marnet modifies filenames: it renames "1.jpg" to "1.jpg.marnet2", "2.png" to "2.png.marnet2", and so forth. The number in Marnet's extension may vary.

What kind of email is "Send Us Your Company Updated Bank Info"?

After inspecting the "Send Us Your Company Updated Bank Info" email, we determined that it is spam. This fake letter requests the recipient to provide their company's banking data in order to clear the attached invoice. The attachment is a phishing file targeting email account log-in credentials.

What kind of page is protectusonline[.]xyz?

We have examined protectusonline[.]xyz and learned that it runs the "McAfee - Your PC is infected with 5 viruses!" scam. Protectusonline[.]xyz displays deceptive content (fake virus messages) to trick visitors into believing that their computers are infected and purchasing antivirus software. This page should be ignored.

What kind of scam is "Update Your Email Account"?

After inspecting this letter, we concluded that it is a scam email written by scammers who aim to lure recipients into providing sensitive information. It is disguised as a letter from an email service provider and contains a link to a phishing website. This scam email should be ignored.

What kind of malware is Mzqw?

Mzqw is ransomware belonging to the Djvu family. Our malware researchers discovered Mzqw while analyzing samples submitted to VirusTotal. Ransomware is a type of malware that encrypts files. In addition to encrypting data, Mzqw appends ".mzqw" extension to filenames and drops a ransom note (the "_readme.txt" file).

An example of how Mzqw modifies filenames: it renames "1.jpg" to "1.jpg.mzqw", "2.png" to "2.png.mzqw", and so forth. It is known that ransomware belonging to the Djvu family is often distributed alongside information stealers like RedLine and Vidar.

What is Today Weather?

While inspecting deceptive sites, our researchers discovered the Today Weather browser extension. It is presented as a quick access tool to weather forecasts and related content. After examining this extension, we determined that Today Weather operates as advertising-supported software (adware).

What kind of page is fasterpcnetwork[.]com?

While checking out questionable websites, our researchers discovered the fasterpcnetwork[.]com rogue page. It runs scams, promotes browser notification spam, and redirects visitors to other (likely untrustworthy/malicious) sites. Most users access such webpages via redirects caused by sites that use rogue advertising networks.

What is GlossGlamor?

Our research team found the GlossGlamor app during a routine inspection of new submissions to VirusTotal. Our analysis of this piece of software revealed that GlossGlamor is adware belonging to the AdLoad malware family. It operates by running intrusive ad campaigns (displaying adverts) and may have other harmful abilities.