WhatsApp virus

September 30, 2018

What is WhatsApp

WhatsApp virus is a silent cyber infection that affects various phone users. It is a scam that uses different warning messages and potentially installs other threats on the device.

How does WhatsApp works

Am I infected with WhatsApp virus?  10/11/17 1

WhatsApp virus is a name that describes a wide range of computer threats and scams related to WhatsApp social network. There is a lot of different scammer campaigns that rely on misleading messages and warnings. One of them warned people about a “Martinelli” video. According to a scam, this video is set to infect their devices and cause a serious havoc while in reality no one has seen it. Additionally, users are warned about WhatsApp Gold which has also been reported as fake. The most recent scam was dubbed “Olivia hoax” and targeted children exclusively. The criminals behind it pretend to be “Olivia, Amelia’s friend” and later send the pornographic picture via the application. Many concerned parents in the UK posted screenshots of the scam and contacted the police.

WhatsApp virus Download Removal Toolto remove WhatsApp

The original WhatsApp messaging application is NOT malicious or dangerous. It does not belong to the category of the computer viruses. WhatsApp is a popular free messaging application compatible with iPhone, Android, BlackBerry, Windows and other mobile operating systems. Currently, its user database reaches over 1.2 billion users, so there’s no wonder that scammers and malware creators are inventing ways to benefit from that.

At the moment, there are several versions of the WhatsApp virus and the majority of them act the same. In most of the cases, cybercriminals seek to trick their victims into installing malware, Trojan, etc. or swindle confidential information. For this reason, they display fake alerts filled with bank logos and similar details that look genuine.

Typically, WhatsApp virus infects the system as an additional component and then starts illegal activity behind user’s back. Therefore, it is not enough to simply remove WhatsApp from the computer in order to solve the problem. And security flaws in the program’s code are not helping the situation.

Last year, University of California researcher Tobias Boalter detected a backdoor which enabled unauthorized and unmonitored access to the app. This vulnerability allowed decrypting the secure end-to-end message encryption, making it possible for hackers to read through victims’ conversations. Of course, the flaw was quickly patched up but is there any guarantee that such zero-day will not emerge in the future?

Even if WhatsApp deals with its security issues, there are numerous other ways to use the app for malicious purposes. In this article, we will introduce some of the currently active threats, try to determine how they reach devices and, finally, discuss WhatsApp virus removal options. If you are a user of Android, you should be able to find useful information in the Android virus elimination guide as well.

Download Removal Toolto remove WhatsApp

How to delete WhatsApp

GhostCtrl is a Trojan which may disguise itself as a variety of different programs, including WhatsApp. When installed, the fake WhatsApp app will take over the control of the device. Hackers may then start collecting any information they want, be it call logs, text messages, numbers on your contacts list, phone’s GPS location or web browsing history.

On top of that, this WhatsApp virus has the ability to enable/disable phone’s microphone and camera, meaning that you can be spied on both online and in real life. The fake app looks like a regular WhatsApp application. Thus it might be difficult to detect. Thus, you should always download apps only from the reputable sources.

If you received a voice message from WhatsApp in your email, it is most likely that you are being targeted by scammers. The subject name of such spam emails says “Missed voicemail,” while the letter itself contains fabricated information on when the message was received and a link to play it.

Unfortunately, clicking the “Play” button will not get you anywhere but a malicious website which will try to trick you into installing one of WhatsApp viruses, such as Browser 6.5. Such programs are likely to be infected with ransomware or similar viruses, so you should be extremely careful!

It is yet another fraud scheme designed to trick credulous users into downloading malicious software disguised as a new WhatsApp feature. In particular, scammers have been spreading around messages urging victims to upgrade their accounts to WhatsApp Gold premium version. The problem is that such version does not exist.

When users click on the link indicated in the message, it immediately redirects them to malware-ridden sites and exposes users to a great risk of getting their devices infected.

Similar to the previously mentioned scam, WhatsApp trial service fraud is based on a sending victims fake messages claiming that their one-year trial of WhatsApp has expired and that the user must subscribe to extend it.

To get users hooked on this bogus offer, scammers encourage victims to connect to a “customer portal” and sign in using your WhatsApp login details. Then victims are then asked to provide their banking details to purchase a monthly or yearly subscription of the service. Of course, the submitted information lands in the hands of hackers which may charge you immense amounts of money for the services that don’t exist.

“Update WhatsApp” Messenger virus

On November 2017, security experts reported about malicious Update WhatsApp Messenger available on Google Play. The application has been downloaded more than million times. Fortunately, it was removed.

Cybercriminals created a visually similar app and managed to bypass Google’s security. They used the name of the developer, logo and other credentials in order to trick Android users that it’s the original app. However, there was a difference. Criminals added Unicode character space after the WhatsApp Inc. name. However, this minor change is hard to detect for ordinary users.

Download Removal Toolto remove WhatsApp

However, later unknown malware developers changed the name of the app to “Dual Whatsweb Update.” Additionally, the name of the developer was also removed. Though, it did not help to remain on Google Play store.

This WhatsApp virus version was used for displaying ads and installing other applications on user’s Android phone. Users who downloaded WhatsApp updates from Google Play are suggested to check their smartphones’ security using anti-virus or anti-malware program. The malicious app may have installed spyware or other dangerous components on the system.

“Olivia” message with pornographic picture targeting children

The second week of September 2018 came with the news of WhatsApp scammers returning with a new campaign that targets children specifically. The first message appears to be from a person that claims to have a changed number and later on calls themselves “Olivia.” Children who receive the message have no clue who that is, and when asked, criminals offer to send the picture of themselves. Suddenly, a link is dropped to pornographic content.

WhatsApp virus is a malware that targets children with pornographic messages.

This incident came to light when Cheshire police in the UK asked people to check the phones of their children if they are using WhatsApp. This number from overseas concerned Halton Brook Police too and people replied to their Twitter post with various screenshots containing the same pattern of Olivia messages.

There are a variety of different ways to get infected with malware:

You may click on an infectious add or link while browsing the web Download malicious applications from sources outside official app stores Receive a malicious link inside WhatsApp application itself Receive a spam email containing a malicious link

To stay safe, you have to learn to be more skeptical about things. Security experts from Norway suggests no to hurry to click on suspicious links, stay away from shady ads, be careful when opening email attachments and remember that WhatsApp will never contact you outside the app. If they do, it’s probably a scam.

Depending on a type of virus, you might need to employ different techniques to remove WhatsApp virus from your device.In some cases, it might be enough to eliminate the parasite using antivirus software such as , while for the elimination of other malware, you should be prepared to work a bit harder. You might need to restore the phone’s default settings or reinstall the application to complete full WhatsApp virus removal. Additionally, take a look at our useful tips on how to remove the virus from Android device on our site.

Stage 1: Delete Browser Extension

First of all, we would recommend that you check your browser extensions and remove any that are linked to WhatsApp. A lot of adware and other unwanted programs use browser extensions in order to hijacker internet applications.

Remove WhatsApp Extension from Google Chrome

  1. Launch Google Chrome.
  2. In the address bar, type: chrome://extensions/ and press Enter.
  3. Look for WhatsApp or anything related to it, and once you find it, press ‘Remove’.

Uninstall WhatsApp Extension from Firefox

  1. Launch Mozilla Firefox.
  2. In the address bar, type: about:addons and press Enter.
  3. From the menu on the left, choose Extensions.
  4. Look for WhatsApp or anything related to it, and once you find it, press ‘Remove’.

Delete WhatsApp Extension from Safari

  1. Launch Safari.
  2. Press on the Safari Settings icon, which you can find in the upper-right corner.
  3. Select Preferences from the list.
  4. Choose the Extensions tab.
  5. Look for WhatsApp or anything related to it, and once you find it, press ‘Uninstall’.
  6. Additionally, open Safari Settings again and choose Downloads.
  7. If WhatsApp.safariextz appears on the list, select it and press ‘Clear’.

Remove WhatsApp Add-ons from Internet Explorer

  1. Launch Internet Explorer.
  2. From the menu at the top, select Tools and then press Manage add-ons.
  3. Look for WhatsApp or anything related to it, and once you find it, press ‘Remove’.
  4. Reopen Internet Explorer.In the unlikely scenario that WhatsApp is still on your browser, follow the additional instructions below.
  5. Press Windows Key + R, type appwiz.cpl and press Enter
  6. The Program and Features window will open where you should be able to find the WhatsApp program.
  7. Select WhatsApp or any other recently installed unwanted entry and press ‘Uninstall/Change’.

Alternative method to clear the browser from WhatsApp

There may be cases when adware or PUPs cannot be removed by simply deleting extensions or codes. In those situations, it is necessary to reset the browser to default configuration. In you notice that even after getting rid of weird extensions the infection is still present, follow the below instructions.

Use Chrome Clean Up Tool to Delete WhatsApp

  1. Launch Google Chrome.
  2. In the address box, type: chrome://settings/ and press Enter.
  3. Expand Advanced settings, which you can find by scrolling down.
  4. Scroll down until you see Reset and Cleanup.
  5. Press on Clean up computer. Then press Find.

This Google Chrome feature is supposed to clear the computer of any harmful software. If it does not detect WhatsApp, go back to the Clean up computer and reset settings.

Reset Mozilla Firefox to Default

If you still find WhatsApp in your Mozilla Firefox browser, you should be able to get rid of it by restoring your Firefox settings to default. While extensions and plug-ins will be deleted, this will not touch your browser history, bookmarks, saved passwords or Internet cookies.

Download Removal Toolto remove WhatsApp
  1. Launch Mozilla Firefox
  2. Into the address box, type: about:support and press Enter.
  3. You will be redirected to a Troubleshooting Information page.
  4. From the menu on the right side, select Refresh Firefox.
  5. Confirm your choice by clicking Refresh Firefox in the new window.
  6. Your browser will close automatically in order to successfully restore the settings.
  7. Press Finish.

Reset Safari Browser to Normal Settings

  1. Launch Safari.
  2. Press on the Safari Settings icon, which you can find in the upper-right corner.
  3. Press Reset Safari.
  4. A new window will appear. Select the boxes of what you want to reset or use the screenshot below to guide you. Once you have selected everything, press ‘Reset’.
  5. Restart Safari.

Restore Internet Explorer to Default Settings

  1. Launch Internet Explorer.
  2. From the top menu, press on Tools and then Internet Options.
  3. In the new window that opens, choose the Advanced tab.
  4. At the bottom of the window, below Reset Internet settings, there will be a ‘Reset’ button. Press that.

While extensions and plug-ins will be deleted, this will not touch your browser history, bookmarks, saved passwords or Internet cookies.

Leave a Reply

Your email address will not be published. Required fields are marked *