Virus and Spyware Removal Guides, uninstall instructions

What kind of software is Bull Checker?

Bull Checker is a malicious browser extension that operates as a cryptocurrency stealer. It modifies digital asset transactions to reroute them into wallets in the cyber criminals' possession. At the time of research, Bull Checker targeted Solana cryptocurrency (SOL).

What kind of malware is Cheana?

Cheana is an information stealer targeting three operating systems: Windows, Linux, and macOS. Cybercriminals behind Cheana utilize a deceptive website to distribute the malware. It is known that the attackers have previously offered seemingly legitimate VPN services but later started distributing malicious software.

What kind of email is "Compromise Of Your Digital Identity"?

After investigating the "Compromise Of Your Digital Identity" email, we determined that it is malspam. This spam message claims that the recipient's digital identity might have been compromised.

The personal information affected is detailed in the attachment document. Instead of containing any such records, the attachment is intended to infect recipients' devices with FormBook malware.

What kind of page is trksecurescanf[.]com?

We have examined trksecurescanf[.]com and learned that the purpose of this deceptive page is to lure visitors into taking certain actions. Like most web pages of this type, trksecurescanf[.]com asks permission to send notifications. If encountered, trksecurescanf[.]com (or any similar site) should be closed.

What is toptosearch.com?

During our examination of toptosearch.com, we noticed that it does not generate search results. Thus, we classified toptosearch.com as a fake search engine. We also found that toptosearch.com is promoted through an extension that functions as a browser hijacker. Users should avoid using toptosearch.com and adding browser hijackers to browsers.

What is IcuApp?

During our inspection of IcuApp, we noticed that this application has no clear purpose. Moreover, it is hosted on a shady web page and distributed with other dubious programs. Therefore, users should avoid installing IcuApp (and the associated apps) to avoid potential security and privacy risks.

What kind of page is subsboost[.]online?

While inspecting subsboost[.]online, we discovered that it displays misleading content to trick visitors into permitting it to send notifications. It is uncommon for sites like subsboost[.]online to be visited intentionally. Users should not allow such pages to show notifications and visit them.

What kind of website is trustedsear.ch?

Trustedsear.ch is the address of a fake search engine. Websites within this category cannot generate search results and redirect to genuine Internet search sites. They also tend to gather information about their visitors.

Typically, fake search engines are promoted by browser hijackers. We discovered trustedsear.ch while investigating the NewEngine browser hijacker.

What kind of website is search-secured.com?

Search-secured.com is a fake search engine. Sites of this kind cannot provide search results and redirect to legitimate search engines. They are also known to collect visitor data.

Fraudulent search engines are usually promoted (via redirects) by browser hijackers. We discovered search-secured.com while analyzing the NewEngine browser hijacker. It is noteworthy that this extension may be installed together with the NeverSleep PUA.

What kind of software is NewEngine?

NewEngine is a rogue browser extension discovered by our research team when analyzing the installation setup for NeverSleep PUA. Upon examination, we determined that NewEngine is a browser hijacker. It modifies browsers to promote (via redirects) the search-secured.com fake search engine.