iCalc

It is very unfortunate that there are quite a few browser extensions that could prove to be dangerous to your computer’s security. Take iCalc, for example. This Chrome extension might look like nothing serious, but during our research, we have found that this application functions as a proxy and, therefore, it could easily expose inexperienced users to malicious content that could be detrimental to their computer and personal data security. What we are trying to say here is that you have to remove iCalc from your system as soon as possible. If you are not sure of your own skills, do not hesitate to invest in a licensed antispyware tool.

Disregarding the fact what kind of extension you add to your Chrome browser, the point is that they will always ask for particular permissions, to access information and, consequently, provide you with far more customized service. Unfortunately, it is quite often these permissions are exploited for something not exactly legal. iCalc is one of those applications that require more permissions that a simple browser extension should. When this extension is added to your browser, you can find all the permissions given to it by clicking on the Details in the list of extensions. Then you will get a pop-up that will tell you that this extension can “read and change all your data on the websites you visit.” That definitely sounds intrusive.

What’s more, there does not seem to be a clear way to refuse to install this application. At least, there was not while the extension was still available at parkasha.club/extensions and the Chrome web store. Quite a few users managed to download iCalc before it was taken down from the web store. Some users also reported that when they tried closing the download window, they were assaulted by random pop-ups basically dogging every step they made on the Internet. This proves that the application employed aggressive promotion and distribution methods.

Currently, it is not possible to download this extension from its official website or the Chrome web store. If users are still getting assaulted by the add-on, it means iCalc comes bundled with freeware applications that users download from file-sharing pages. Sometimes freeware and adware downloads are initiated when you open websites that support a lot of pop-ups. If you open a page that is full of flashy advertisements, be careful not to click on any of them because it could result in downloading unwanted software on your computer.

The main security concern associated with this extension is the fact that iCalc functions as a proxy. It redirects all of your browsing sessions through the bestex9.xyz proxy server. To put it simply, if you open your browser and open your homepage, you first visit the proxy server before landing on your homepage. This way, iCalc helps its creators and other associated parties collect information on your web browsing habits. This information might be used for customized advertising, online marketing, and so on. The problem is that users cannot see any changes performed by this extension, but the proxy settings are obvious from the extension file:

'ht' + 'tp' + '://' + 'be' + 'stex9.' + 'xyz' + '/' + 'sc',

'ht' + 'tp:' + '//' + 'be' + 'stex9.' + 'xyz' + '/s' + 'c',

 

http://bestex9.xyz/sc - bestex9.xyz (proxy server), /sc - parameters

http://bestex9.xyz/c

Judging from the application’s icon, iCalc should function like an ordinary calculator (as one would expect from its name), but this function does not seem to work. Thus, what is the use of keeping an extension that does not function and tracks your online activity instead? Luckily, this tool is not popular, and just a little bit less than seven hundred users have been reported to be infected so far. Nevertheless, all the data retrieved from these users is could be used by cyber criminals for their own malicious purposes.

From our research, we have found that iCalc is hosted the 82.146.54.33 IP address, and the location of this address is indicated as Irkutsk, the Russian Federation. Its registrar is indicated as WhoisGuard Protected, and the registrant city is Panama. This information, however, does not provide you with a hint how to remove iCalc from your computer.

It is more than obvious that you have to get rid of this extension to protect your system from potential exploitation. This is where our removal instructions will be useful. Please follow them to delete this extension, and then do consider investing in a powerful antispyware tool that would safeguard your PC against similar intruders.

Remove iCalc via Control Panel

1. Open the Chrome browser.
2. Press Alt+F and go to More tools.
3. Click Extensions.
4. Remove iCalc from the list.

Delete iCalc from the OS

1. Press Win+R and enter %AppData%.
2. Press Enter and go to Local.
3. Open Google and select the Chrome folder.
4. Open User Data and go to Default.
5. Double-click Extensions and delete the bjmpdighkgbbgdppjegcgpocckfclebf folder.