12,194guides5,441members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos
Topic · 2531 pages

Malicious browser extensions

Malicious browser extensions: every 2-Spyware guide, news story and file page on this topic, newest first.

Dalintis
FacebookXLinkedInTelegramWhatsAppEl. paštuKopijuoti nuorodą

Latest: donutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one (10/8/2026)

Newest first

Pages about Malicious browser extensions

TrojansHigh risk

Remove donutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one

donutclientsmods.xyz is a three day old site that offers free DonutSMP clients, mods and add-ons for Minecraft 1.21.11. On 8 October 2026 URLhaus listed eleven of its downloads as…Ugnius Kiguolis ·
Web browsers and vulnerabilities

Is Fortect a Virus? Browsing Protection in 2026

Fortect is not a virus: Fortect Browsing Protection is a Chrome extension from FORTECT LTD, updated in August 2026. What it does, data it handles, fakes.Gabriel E. Hall ·
Security

MEGA Chrome Extension Hack: Is MEGA Safe in 2026?

In 2018 a hacked MEGA Chrome extension, version 3.39.4, stole passwords and crypto keys. What happened, what changed by 2026 and how to check extensions.Linas Kiguolis ·
Viruses and parasites

CoolWebSearch in 2026: The Infamous Browser Hijacker

Gabriel E. Hall ·
News

How to Reset Safari on Mac in 2026: Full Steps

Olivia Morelli ·
Security

Google Redirect Virus in 2026: How to Remove It

2-Spyware Editorial Team ·
AdwareMedium risk

Remove OperativeNavigation Mac virus

Julie Splinters ·
Browser HijackersMedium risk

Remove News Searcher Pro browser hijacker

News Searcher Pro is a potentially unwanted application that takes over your browser settings to promote shady providers News Searcher Pro is a hijacker that alters web browser…Gabriel E. Hall ·
Browser HijackersMedium risk

Remove AstralMetrus browser hijacker

AstralMetrus is a browser hijacker that injects ads and can be difficult to remove AstralMetrus is a deceptive browser extension that quietly embeds itself into your web browser,…Lucia Danes ·
RansomwareHigh risk

Remove VerdaCrypt ransomware

VerdaCrypt appends your files with .verdant extension and prevents them from being opened VerdaCrypt ransomware is an evil malware that encrypts victims' data, making it…Lucia Danes ·
AdwareMedium risk

Remove TechBoost Mac virus

Ugnius Kiguolis ·
AdwareMedium risk

Remove AdBlocker Professional adware

Olivia Morelli ·
Browser HijackersMedium risk

Remove Skyjem.com browser hijacker

Julie Splinters ·
Browser HijackersMedium risk

Remove Porseek browser hijacker

Julie Splinters ·
Browser HijackersMedium risk

Remove Find.snav-web.com browser hijacker

Find.snav-web.com is a redirect virus that changes browser settings to expose users to more ads If you have noticed that your browser is constantly bringing you to the…Julie Splinters ·
RansomwareHigh risk

Remove Qepi ransomware

Qepi ransomware is a type of malware that prevents access to all personal files on Windows Qepi ransomware is a significant cyber threat due to its potent encryption techniques,…Alice Woods ·
Browser HijackersMedium risk

Remove Weatherly browser hijacker

Weatherly is a potentially unwanted browser extension that takes over your searches and shows unwanted ads Weatherly is a common type of browser hijacker that often alters browser…Alice Woods ·
RansomwareHigh risk

Remove Nood ransomware

Alice Woods ·
Browser HijackersMedium risk

Remove MyFootballTab browser hijacker

Olivia Morelli ·
Browser HijackersMedium risk

Remove Nature Of The World Extension browser hijacker

Ugnius Kiguolis ·
RansomwareHigh risk

Remove Zpww ransomware

Jake Doevan ·
Browser HijackersMedium risk

Remove Web Tab Live browser hijacker

Web Tab Live can change the main browser settings and track users' activities online Web Tab Live is an untrustworthy browser extension that falls under the category of browser…Gabriel E. Hall ·
AdwareMedium risk

Remove Choose All Languages adware

Choose All Languages is a useless browser extension that causes an increase in commercial content Choose All Languages is a deceptive browser extension marketed as a tool for…Olivia Morelli ·
Browser HijackersMedium risk

Remove Zodiac Search browser hijacker

Zodiac Search is a bogus browser extension created by crooks to generate revenue A browser extension called Zodiac Search can change your browser's settings and appearance.…Lucia Danes ·
AdwareMedium risk

Remove Browse Keeper adware

Julie Splinters ·
AdwareMedium risk

Remove NX Gone adware

Ugnius Kiguolis ·
RansomwareHigh risk

Remove Waqq ransomware

Gabriel E. Hall ·
AdwareMedium risk

Remove Volume Extra adware

Julie Splinters ·
MalwareHigh risk

Remove Facebook virus

Facebook virus can attack you at any time: here's what you should know Facebook virus represents an array of scams and potential malware intrusions that could jeopardize the…Jake Doevan ·
MalwareHigh risk

Remove Kissanime virus

Kissanime virus is malware that can be unintentionally downloaded from anime-streaming site Kissanime virus is a term used to describe a set of infections that are associated with…Gabriel E. Hall ·
AdwareMedium risk

Remove Close your Tab adware

Close your Tab is a bogus extension used by crooks to spam users with ads Close Your Tab is a deceptive browser extension that provides no benefits. Instead, it functionsJake Doevan ·
AdwareMedium risk

Remove Play Audio adware

Jake Doevan ·
AdwareMedium risk

Remove Better Webb adware

Lucia Danes ·
Browser HijackersMedium risk

Remove Best Wallpapers browser hijacker

Linas Kiguolis ·
AdwareMedium risk

Remove Night Reading for All adware

Alice Woods ·
AdwareMedium risk

Remove Convert Page To PDF adware

Convert Page To PDF is a bogus browser extension that generates revenue from showing ads Convert Page To PDF is a bogus browser extension that provides no benefits. It worksGabriel E. Hall ·
Browser HijackersMedium risk

Remove Homerun browser hijacker

Homerun is a bogus browser extension that changes the main settings to generate revenue Homerun, a browser hijacker aimed at sports fans, can change important settings such as…Olivia Morelli ·
AdwareMedium risk

Remove Quick Close Tab adware

Quick Close Tab is a browser extension with questionable functionality and ad spam Quick Close Tab is a deceptive browser extension that claims to provide a useful feature of…Ugnius Kiguolis ·
AdwareMedium risk

Remove Audio Player Plus adware

Olivia Morelli ·
Browser HijackersMedium risk

Remove Sports Madness browser hijacker

Julie Splinters ·
RansomwareHigh risk

Remove VapeV7 ransomware

Alice Woods ·
AdwareMedium risk

Remove SkipAds for Youtube adware

Alice Woods ·
SPAM toolsLow risk

Remove "New Voice Message In Your Office365 Extension" email scam

"New Voice Message In Your Office365 Extension" is a fake email disguised as an alert from Microsoft "New Voice Message In Your Office365 Extension" - a phishing[ref en-1] scam…Gabriel E. Hall ·
AdwareMedium risk

Remove Download Pro adware

Download Pro is a browser plugin that might cause pop-ups, redirects, and other unwanted behavior Download Pro is a rogue browser extension that has adware[ref en-1] capabilities.…Alice Woods ·
RansomwareHigh risk

Remove Code ransomware

Code ransomware targets businesses and encrypts their important documents To encrypt users' personal files, such as photos, videos, and documents, Code ransomware employs advanced…Julie Splinters ·
Browser HijackersMedium risk

Remove Daily Jokes browser hijacker

Alice Woods ·
AdwareMedium risk

Remove Simple Ad Blocker adware

Alice Woods ·
AdwareMedium risk

Remove Prosecutionsocktrap.com ads

Lucia Danes ·
AdwareMedium risk

Remove Quick Video Find adware

Alice Woods ·
AdwareMedium risk

Remove iCursor adware

iCursor is a bogus browser extension that causes ads, banners, and even redirects iCursor is a fraudulent browser extension that functions as adware.[ref en-1] It increases the…Ugnius Kiguolis ·
Browser HijackersMedium risk

Remove Top10answers.com browser hijacker

Top10answers.com is a web address related to a browser-hijacking app If you notice an URL takeover in your web browser, such as Top10answers.com replacing your default search…Gabriel E. Hall ·
RansomwareHigh risk

Remove Vvoo ransomware

Vvoo ransomware: why its presence is detrimental on your Windows PC Vvoo virus is a harmful computer program notorious for its ability to encrypt personal files, including…Julie Splinters ·
Browser HijackersMedium risk

Remove Sticky Notes browser hijacker

Jake Doevan ·
RansomwareHigh risk

Remove NEVADA ransomware

Olivia Morelli ·
AdwareMedium risk

Remove Load All Links adware

Ugnius Kiguolis ·
AdwareMedium risk

Remove Block Access Site adware

Julie Splinters ·
AdwareMedium risk

Remove Survey-smiles.com ads

Survey-smiles.com is a redirect virus that keeps disturbing users on a regular basis Survey-smiles.com is a suspicious web address you may encounter whenever you are browsing the…Gabriel E. Hall ·
RansomwareHigh risk

Remove Worry ransomware

Worry ransomware encrypts users' personal files and asks for payment to decrypt them Worry ransomware is malicious software that encrypts users' personal files and renders them…Ugnius Kiguolis ·
AdwareMedium risk

Remove Total Blocker browser extension

Total Blocker is a browser extension that disrupts your online browsing experience by injecting ads on the sites you visit and intercepting search results Total Blocker is an…Olivia Morelli ·

A topic collects every page that is about it; the list updates when new pages are published.

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
All membersJoin