Virus and Spyware Removal Guides, uninstall instructions

What is PlatformCache?

PlatformCache is a rogue application. After inspecting this piece of software, we have determined that it is a piece of advertising-supported software (adware) belonging to the AdLoad malware family.

What kind of application is ViewsAdjustable?

We have discovered the ViewsAdjustable while checking the samples submitted to VirusTotal. While this application was installed on our computer, it displayed unwanted advertisements. Thus, our team has concluded that ViewsAdjustable is an advertising-supported app (numerous security vendors on VirusTotal also flagged it as adware).

What kind of page is payments4u[.]org?

Payments4u[.]org is a rogue webpage our researchers discovered while inspecting untrustworthy sites. This page is designed to promote spam browser notifications and uses fake CAPTCHA verification for this purpose. Most users access websites like payments4u[.]org via others that use rogue advertising networks.

What is Wroba malware?

Wroba (also known as XLoader or MaqHao) is a backdoor-type malicious program, which our researchers have sampled from VirusTotal. This Android OS-targeting malware has been observed being proliferated via the "Roaming Mantis" SMiShing campaign. Initial operations centered Asia - Japan, Taiwan, Korea, China, and India. However, "Roaming Mantis" has begun targeting Europe as well, with France and Germany being areas of particular interest.

What kind of page is aderstono[.]com?

Our malware researchers have discovered the aderstono[.]com site while analyzing various torrent, illegal movie streaming, and similar websites that use shady advertising networks. We have found that aderstono[.]com can show untrustworthy notifications and redirect visitors to other pages.

What is Iskaluz ransomware?

Iskaluz is a ransomware-type program designed to encrypt data and demand payment for the decryption. Our researchers found this malware while researching new submissions on VirusTotal. We have determined that Iskaluz belongs to the Paradise ransomware family.

After being launched on our test machine, this ransomware encrypted files and appended their filenames with the cyber criminals' email address and a ".iskaluz" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg[Email].[iskaluz@protonmail.com].iskaluz". Once this process was completed, a ransom note - "#DECRYPT MY FILES#.txt" - was created on the desktop.

What kind of software is Nissenvelten?

Our team has discovered the Nissenvelten ransomware while checking VirusTotal for recently submitted malware samples. After testing this ransomware, it has been concluded that it encrypts files, appends the ".nissenvelten-sjj3hhut" extension to filenames, and creates a ransom note (the "!nissenvelten!HOW_TO_RESTORE.log" file).

An example of how Nissenvelten ransomware modifies the filenames of encrypts files: it renames "1.jpg" to "1.jpg.nissenvelten-sjj3hhut", "2.jpg" to "2.jpg.nissenvelten-sjj3hhut".

What is AdjustableControl?

Discovered by our researcher team while analyzing fake Adobe Flash Player updaters, AdjustableControl is a rogue app. After investigating this piece of software, our researchers conclude that it is an adware-type application belonging to the AdLoad malware family.

What kind of software is TaskSample?

We have discovered the TaskSample application after using a fake installer downloaded from a deceptive website. During our analysis, we have found that TaskSample has the qualities of adware - it displays unwanted advertisements. Software of this type is not trustworthy.

What is the "Important Update From Mail Server Registrar"?

"Important Update From Mail Server Registrar" is the name of a phishing email received and analyzed by our research team. This letter makes false claims about incoming/outgoing mail being suspended and urges recipients to resolve the issue. This spam letter aims to trick recipients into revealing their email account log-in credentials.