Virus and Spyware Removal Guides, uninstall instructions

What is WalletConnect scam?

We have discovered this scam website while examining other sites that use rogue advertising networks. After analyzing this scam, we concluded that the purpose of this scam is to trick visitors into believing that it is a legitimate WalletConnect page and providing a private key or wallet seed words.

What is "Official Solana NFT Launch"?

"Official Solana NFT Launch" is a scam, which our researchers discovered when inspecting shady websites. The scam promises Solana blockchain platform users, who take part in it, a gift of Solana's "official" NFTs (Non-Fungible Tokens). It must be emphasized that these promises are fake, and victims of this scam will only experience a financial loss and gain nothing in return.

What kind of malware is V3NOM?

We have discovered the V3NOM ransomware while checking malware samples submitted to VirusTotal. Our team has examined V3NOM and found that this ransomware changes the desktop wallpaper, creates the "VenomD3crypt0r.exe" file containing a ransom note, and appends the ".V3NOM" extension to filenames.

An example of how V3NOM ransomware modifies filenames: it renames "image.jpg" to "image.jpg.V3NOM", "document.txt" to "document.txt.V3NOM", and so on.

What kind of page is captchawall[.]top?

Discovered by our research team during a routine inspection of suspicious websites, captchawall[.]top is a page that promotes browser notification spam. Additionally, this webpage can redirect visitors to other deceptive and malicious sites.

Most visitors to captchawall[.]top and similar websites access them inadvertently via redirects caused by pages that use rogue advertising networks.

What kind of app is SharedAllocate?

We have discovered the SharedAllocate application while analyzing deceptive websites used to distribute untrustworthy installers and other shady sites. Our team has tested the SharedAllocate app and found that it generates advertisements - it functions as adware.

What kind of page is next-thing-info[.]com?

Next-thing-info[.]com is one of the untrustworthy websites designed to trick visitors into agreeing to receive notifications. Our team has discovered next-thing-info[.]com while visiting illegal streaming, torrent sites, and other pages that use questionable advertising networks.

What is Cuag ransomware?

Our research team found Cuag ransomware when inspecting new submissions to VirusTotal. It is yet another malicious program belonging to the Djvu ransomware family.

During analysis, we learned that Cuag encrypted files and appended their filenames with the ".cuag" extension. For example, a file initially titled "1.jpg" appeared as "1.jpg.cuag", "2.jpg" as "2.jpg.cuag", etc. Once the encryption process was completed, the ransomware created a ransom note named "_readme.txt".

What kind of malware is Avyu?

We have discovered the Avyu ransomware while checking malware samples submitted to VirusTotal. During our analysis, we have learned four key things about Avyu: it belongs to a ransomware family called Djvu, encrypts files, appends the ".avyu" extension to filenames, and creates the "_readme.txt" file (a ransom note).

An example of how filenames of files encrypted by Avyu are changed after encryption: "1.jpg" is renamed to "1.jpg.avyu", "document.txt" to "document.txt.avyu", "sheet.xls" to "sheet.xls.avyu", and so on.

What is SushiSwap scam?

Our team has discovered a fake SushiSwap app download page while examining other shady websites and deceptive ads. Sushi is a legitimate decentralized cryptocurrency exchange built on Ethereum. After launching the installer downloaded from the fake SushiSwap, we learned that it installs a Remote Access/Administration Tool (RAT) called Remcos.

What kind of adware is Twitch Explorer?

Our team has discovered the Twitch Explorer application/browser extension while visiting a deceptive website offering to update the installed Chrome extension. We have tested this app and noticed that it generates advertisements. Therefore, it can be said that Twitch Explorer is an ad-supported application.