Virus and Spyware Removal Guides, uninstall instructions

What is Ada ransomware?

Ada is the name of a malicious program, which is part of the VoidCrypt ransomware group. It is designed to encrypt data (render files unusable) and demand payment for the decryption.

As Ada ransomware encrypts, filenames are appended with the cyber criminals' email address, a unique ID assigned to the victim, and the ".ada" extension. For example, a file initially named "1.jpg" would appear similar to "1.jpg.[Kixonw@gmail.com][MJ-PQ4931720865].ada".

After the encryption process is complete, a text file titled "Read-me.txt" is dropped onto the desktop. This file contains the ransom note.

What is the "Sharpsmart Inc." email?

"Sharpsmart Inc. email scam" refers to a spam campaign. These emails supposedly relate to a payment invoice. It must be emphasized that the letters in question are not associated with any legitimate entities that they mention. Furthermore, all the information provided by the emails is false.

What is FlexInterval?

FlexInterval is an adware-type application with browser hijacker abilities. Due to the questionable techniques used to promote apps of this kind, they are also deemed to be PUAs (Potentially Unwanted Applications).

What is the ginmule.xyz website?

Ginmule.xyz is a fraudulent search engine. Web searchers of this type are usually promoted by Potentially Unwanted Applications (PUAs) within the browser hijacker classification.

The ginmule.xyz web searcher has been observed being pushed by a rogue browser extension misleadingly titled "Chrome". It is worth noting that this browser hijacker uses sophisticated persistence-ensuring techniques to prevent users from restoring their browsers.

What is Jet Cleaner?

Jet Cleaner is a piece of software promising to clean and optimize the performance of operating systems. Due to the dubious methods used to distribute it, this app is classified as a PUA (Potentially Unwanted Application). Software within this classification can have undesirable/harmful abilities and/or be promoted alongside such applications.

What is AddCloud?

AddCloud is a rogue application classified as adware. It also has browser hijacker traits. Since most users unintentionally download/install apps of this type, they are also considered to be PUAs (Potentially Unwanted Applications).

What is Qmak ransomware?

Qmak is a malicious program belonging to the Djvu ransomware family. It is designed to encrypt data (lock files) and demand payment for the decryption.

Affected files are appended with a ".qmak" extension, e.g., "1.jpg" would appear as "1.jpg.qmak","2.jpg" as "2.jpg.qmak", 3.jpg" as "3.jpg.qmak", etc. Once this process is complete, a ransom note is titled "_readme.txt" is created.

What is searchmime.com?

Searchmime.com is the address of a fake search engine. Browsers cause redirects to fraudulent web searchers due to installed PUAs (Potentially Unwanted Applications) classified as browser hijackers.

What is Fastvery ransomware?

Fastvery is a piece of malicious software belonging to the Phobos ransomware family. It is designed to encrypt data (lock files) and demand ransoms for the decryption.

Files are renamed according to this pattern: original filename, a unique ID assigned to the victims, the cyber criminals' email address, and a ".fastvery" extension. For example, a file like "1.jpg" would appear similar to "1.jpg.id[9ECFA84E-3268].[fastvery@veryfast.biz].fastvery".

After the encryption process is complete, ransom notes are created/displayed in a pop-up window ("info.hta") and the "info.txt" text file.

What is "Craiglist email virus"?

"Craiglist email virus" refers to an email spam campaign designed to proliferate malware. These scam emails supposedly relate to a flagged "Craiglist" advertisement. The aim of this spam mail is to infect recipients' systems with Qakbot malware.

It must be emphasized that the letters in question are in no way associated with the genuine Craigslist classified advertisements website (which is misspelled as "Craiglist" in the emails).