Virus and Spyware Removal Guides, uninstall instructions

What is Quick Online Recipes?

Quick Online Recipes is a rogue browser extension that our researchers discovered while investigating suspicious software-promoting webpages. This extension is presented as an easy-access tool for food recipes and other cooking-related content. Our analysis of this piece of software revealed that Quick Online Recipes operates as adware.

What kind of software is IntranetLookup?

While testing the IntranetLookup application, we found that it is an advertising-supported application - it shows annoying advertisements. Typically, users install such apps inadvertently. Our team discovered this IntranetLookup on a deceptive website claiming that the Adobe Flash Player is out of date.

What is JourneyDrive?

Our researchers found the JourneyDrive application while inspecting new submissions to VirusTotal. After analyzing this app, we learned that it operates as adware and belongs to the AdLoad malware family.

What kind of malware is ZeNyA?

ZeNyA is ransomware belonging to a ransomware family called Xorist. We discovered ZeNyA while checking the VirusTotal page for recently submitted malware samples. ZeNyA encrypts files and appends its extension (".ZeNyA" to filenames. Also, it shows an error window and creates the "HOW TO DECRYPT FILES.txt" file. Both of them contain the same ransom note.

An example of how ZeNyA renames files: it changes "1.jpg" to "1.jpg.ZeNyA", "2.png" to "2.png.ZeNyA", and so forth.

What kind of page is scanuralerts[.]com?

After examining scanuralerts[.]com, we learned that it is a deceptive website running the "McAfee - Your PC is infected with 5 viruses!" scam. Also, it asks for permission to deliver notifications. Our team discovered scanuralerts[.]com while inspecting websites that use rogue advertising networks.

What is AccessibleInput?

Our research team discovered the AccessibleInput application while investigating new submissions to VirusTotal. After analyzing this app, we determined that it operates as adware and is part of the AdLoad malware family.

What is "Avira - Your System Was Corrupted"?

While investigating suspicious websites, our researchers discovered the "Avira - Your System Was Corrupted" scam. It claims that the visitor's device is infected and urges them to perform a scan. It must be emphasized that this scam is in no way associated with either the Avira anti-virus or Avira Operations GmbH & Co. KG.

What is Dood Colors?

While inspecting suspect software-promoting websites, our research team found the Dood Colors browser extension. This piece of rogue software promises to allow users to change webpage background colors. After analyzing Dood Colors, we determined that it operates as advertising-supported software (adware) instead.

What kind of program is Travel?

Travel is the name of adware - an untrustworthy advertising-supported application that shows annoying advertisements. We discovered it after examining an ISO file downloaded from a shady website. We also found that it runs as "Travel tech Copyright © all rights reserved" in the Task Manager.

What kind of malware is BISAMWARE?

BISAMWARE is ransomware that encrypts files, changes the desktop wallpaper, creates the "SYSTEM=RANSOMWARE=INFECTED.TXT" file (a ransom note) and modifies filenames. It appends the ".BISAMWARE" extension to filenames (e.g., it renames "1.jpg" to "1.jpg.BISAMWARE", "2.png" to "2.png.BISAMWARE").