Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is Qqmt?

While checking the VirusTotal page for recently submitted malware samples, we discovered a new Djvu ransomware called Qqmt. Malware of this type encrypts files to force victims to pay for a decryption tool. Usually, ransomware also provides a ransom note and modifies filenames. Qqmt drops the "_readme.txt" file and appends the ".qqmt" extension to filenames.

An example of how files encrypted by Qqmt are renamed: "1.jpg" is renamed to "1.jpg.qqmt", "2.png" is renamed to "2.png.qqmt", and so forth.

What kind of application is AssistSample?

While testing the AssistSample application, we found that it shows annoying advertisements. Apps of this type are classified as adware (advertising-supported software). Our team discovered the AssistSample app while examining a deceptive website designed to download a fake Adobe Flash Player installer.

What kind of page is content-lib[.]biz?

Content-lib[.]biz is a rogue webpage that promotes spam browser notifications and redirects visitors to other (likely untrustworthy/malicious) sites. Users typically access content-lib[.]biz and websites akin to it - via redirects caused by pages using rogue advertising networks.

What kind of software is OpenCandy?

OpenCandy is the name of an advertising-supported application. We discovered this application while analyzing the samples submitted to the VirusTotal page. OpenCandy generates unwanted advertisements, manipulates the settings of a web browser, and adds extensions/plug-ins to it. Moreover, it gathers information about users.

What is UltraCouponSearch?

UltraCouponSearch is a rogue browser extension that operates as a browser hijacker. This piece of software makes modifications to browser settings in order to promote the ultracouponsearch.com fake search engine. UltraCouponSearch likely spies on users' browsing activity as well.

What kind of malware is VileRAT?

VileRAT is the name of a Remote Access Trojan (RAT) - malware that gives the attacker administrative control over a target computer. It is known that cybercriminals behind VileRAT are targeting foreign and cryptocurrency exchanges. This RAT is capable of executing remote commands, keylogging, and other things.

What is VIPSpace?

Malware developers often use legitimate services to diminish the detectability of their creations, and VIPSpace is an example of this. The VIPSpace malware abuses the Discord messaging platform to proliferate its payloads.

This malicious program serves as a backdoor for other malicious software to infiltrate compromised devices. However, research done by Minerva Labs indicates that VIPSpace is flawed. It introduces a large number of malicious programs into systems and, in the end result, likely crashes them.

This is unlikely to be the cyber criminals' goal, as VIPSpace injects malware that is not destructive but rather intended to steal information, control devices, or perform similar activities.

What kind of page is advertisingvt[.]com?

While analyzing the advertisingvt[.]com website, we learned that it uses deception to trick visitors into allowing it to show notifications and redirects them to other untrustworthy pages. We discovered this site while inspecting pages that use rogue advertising networks. Typically, users end up on such pages inadvertently.

What kind of application is Eye Protection?

After downloading Eye Protection from a shady website and adding it to a browser, we found that it is an extension designed to show unwanted advertisements. Software that generates ads is classified as adware. In addition to showing ads, Eye Protection can read and change all user's data on all websites.

What kind of page is broworker1s[.]com?

Broworker1s[.]com is a rogue webpage that we discovered during a routine inspection of dubious sites. This page operates by promoting spam browser notifications and redirecting visitors to different (likely untrustworthy/malicious) websites. Most users enter pages of this kind via redirects caused by sites using rogue advertising networks.