Virus and Spyware Removal Guides, uninstall instructions

What kind of page is onlinenothome[.]com?

We have examined the onlinenothome[.]com page and learned that it uses a clickbait technique to trick visitors into allowing it to show notifications. It also redirects visitors to a potentially malicious page. Our team has discovered onlinenothome[.]com while inspecting various pages that use rogue advertising networks.

What kind of malware is Errz?

Our malware researchers have discovered a new Djvu ransomware variant called Errz. It was found while examining malware samples submitted to the VirusTotal site. Errz is ransomware that encrypts files and appends the ".errz" extension to filenames. It provides a ransom note by creating a text file named "_readme.txt".

An example of how Errz renames files: it changes "1.jpg" to "1.jpg.errz", "2.png" to "2.png.errz", and so forth.

What is kind of scam is "CANADIAN LOTTERY" scam?

Our team has examined this email and concluded that it is a typical lottery scam. Scammers behind it attempt to trick recipients into sending them money (and possibly personal information) by claiming that they have won a lottery. This email is disguised as a Canadian lottery winning notice.

What kind of page is bluestringline[.]com?

Our researchers found the bluestringline[.]com rogue webpage while inspecting dubious sites. This page is designed to push browser notification spam and redirect visitors to different (likely deceptive/malicious) websites. Most users access sites like bluestringline[.]com via redirects caused by pages that use rogue advertising networks.

What is Cricket Start?

While inspecting dubious download websites, we found the Cricket Start browser extension. It promises quick access to Cricket sports results and updates. After analyzing this piece of software, we determined that it operates as a browser hijacker promoting the search.nstart.online fake search engine.

What kind of email is "World Health Organization Beneficiary"?

Following our inspection of the "World Health Organization Beneficiary" email, we determined that it is spam that operates as a phishing scam.

These fake letters attempt to extract recipients' personally identifiable details - by claiming that this information must be provided to receive a huge financial grant. These spam emails are disguised as letters from the World Health Organization (WHO).

What is Ultimate Ad Eraser?

While inspecting dubious download websites, our researchers found the Ultimate Ad Eraser browser extension. This piece of software is promoted as an adblocker - a tool capable of removing and altering online ads. However, after analyzing Ultimate Ad Eraser, we learned that it operates as adware instead. In addition to running intrusive advertisement campaigns, this extension also spies on users' browsing activity.

What is Nominatus Ransomware 2?

Nominatus Ransomware 2 is malware that encrypts files and generates a ransom note (the "NominatusRansomware2Message.txt" file). We have discovered this ransomware while inspecting malware samples submitted to the VirusTotal website. Unlike most ransomware variants, Nominatus Ransomware 2 does not rename the encrypted files.

What is Words malware?

Words is the name of a malicious program, which our research team found while inspecting fake "cracked" software download sites. The Words malware is capable of force-opening untrustworthy and hazardous websites, and it might have other harmful abilities as well.

It is noteworthy that this program attempts to avoid user detection by using the Microsoft Word icon and the process name "words" on the Task Manager.

What kind of application is shade area?

shade area adware is promoted as a tool for changing the color of the selected areas on websites. We have discovered this app on a deceptive website claiming that it is required to install a secure Chrome extension. After installing this app, we found that it generates advertisements. Thus, we classified shade area as adware.