Virus and Spyware Removal Guides, uninstall instructions

What is FunctionBlast?

We found the FunctionBlast application while inspecting new submissions to VirusTotal. Our analysis of this piece of software revealed that it is adware belonging to the AdLoad malware family.

What kind of email is "Due Payment-Invoice"?

Our inspection of the "Due Payment-Invoice" email revealed that it is spam operating as a phishing scam. This letter makes false claims regarding an invoice to view which - recipients have to provide their email account log-in credentials. It must be emphasized that this mail is fake, and it cannot be trusted.

What is Oovb ransomware?

Oovb is the name of a ransomware-type program that our research team discovered while inspecting new submissions to VirusTotal. This piece of malicious software belongs to the Djvu ransomware family.

Once we executed a sample of Oovb on our testing system, it started encrypting files and changed their filenames by appending them with a ".oovb" extension. To elaborate, a file initially titled "1.jpg" appeared as "1.jpg.oovb", "2.png" as "2.png.oovb", and so on. Following the completion of this process, a ransom note - "_readme.txt" - was created.

What is Oodt ransomware?

Our researchers discovered the Oodt malicious program during a routine investigation of new submissions to VirusTotal. This malware is classified as ransomware, and it is part of the Djvu family.

After we launched a sample of Oodt on our test machine, it began encrypting files and appended their filenames with a ".oodt" extension. For example, a file named "1.jpg" appeared as "1.jpg.oodt", "2.png" as "2.png.oodt", etc. Once this process was completed, the Oodt ransomware created a ransom note titled "_readme.txt".

What kind of page is scanprotectiontoday[.]com?

Scanprotectiontoday[.]com is a rogue webpage that runs scams, promotes browser notification spam, and redirects visitors to different (likely untrustworthy/harmful) sites.

Most users access pages of this kind via redirects caused by websites using rogue advertising networks. Our researchers discovered scanprotectiontoday[.]com while inspecting such sites.

What is Encfiles ransomware?

Our research team discovered the Encfiles ransomware while investigating new submissions to VirusTotal. This program is part of the Amnesia ransomware family.

Once a sample of Encfiles ransomware was executed on our test machine, it began encrypting files and changing their filenames. For example, a file titled "1.jpg" appeared as "2LCAG3V6eH1MqzQ8.encfiles", and so on for all of the affected files.

After the encryption process was completed, a text file named "HOW TO RECOVER ENCRYPTED FILES.TXT" was dropped onto the desktop. This file contained the ransom note.

What is Oopu ransomware?

While inspecting new malware submissions to VirusTotal, our researchers found yet another ransomware from the Djvu family - titled Oopu.

We executed a sample of Oopu on our test machine, and it encrypted files and appended their filenames with the ".oopu" extension. For example, a file named "1.jpg" appeared as "1.jpg.oopu", "2.jpg" as "2.ipg.oopu", etc. Afterwards, Oopu ransomware created a ransom note titled "_readme.txt".

What kind of email is "Norton - Your Computer Could Be At Risk"?

After inspecting the "Norton - Your Computer Could Be At Risk" email, we determined that it is spam. This letter urges recipients to protect their devices with Norton anti-virus. It must be emphasized that this spam mail is in no way associated with either Norton AntiVirus or its developers NortonLifeLock Inc.

What kind of email is "Porn Websites I Attacked With My Virus Xploit"?

Our inspection of the "Porn Websites I Attacked With My Virus Xploit" email revealed that it is yet another sextortion scam. Like most spam letters of this kind, it makes false claims about the sender having infected the recipient's device and made sexually explicit videos featuring them. The email threatens that unless a ransom is paid - the footage will be leaked.

It must be stressed that the "Porn Websites I Attacked With My Virus Xploit" email is fake; therefore, it poses no threat to anyone who has received it.

What kind of scam is "DHL Express"?

While inspecting pages that use rogue advertising networks, our researchers chanced upon a "DHL Express" scam. This deceptive content is presented as a delivery-related notification from DHL Express - a courier, package delivery, and express mail service company. It must be emphasized that the actual DHL is in not associated with this scam.