Virus and Spyware Removal Guides, uninstall instructions

What is My Email Checker?

The My Email Checker app is supposedly designed to provide quick access to email service providers. In fact, its main purpose is to promote the hp.hmyemailchecker.co (or search.hmyemailchecker.co) address (a fake search engine) by changing certain browser settings.

It might also be capable of collecting various information. In most cases, users download and install browser hijackers inadvertently and, therefore, apps of this type are categorized as potentially unwanted applications (PUAs). Note that My Email Checker is distributed with Hide My History, another PUA.

What is XpertRAT?

XpertRAT is a Remote Administration Trojan, a malicious program that allows cyber criminals to remotely access and control infected computers. Typically, users download and install this software inadvertently because they are tricked. By having computers infected with malware such as XpertRAT, users can experience serious problems.

What kind of malware is VenomRAT?

VenomRAT is a malicious program and a common malware infection presented as an innocuous Remote Access Tool (RAT). In fact, VenomRAT has multiple dangerous capabilities clearly designed with malicious purposes in mind - it is therefore also classified as a Remote Access Trojan.

At the time of research, VenomRAT was offered at these costs: one month at US$150, three at $350, and six at $550. Malware within the RAT category operates by granting remote access and control over an infected device. These Trojans can have a wide variety of functionalities that enable likewise varied misuse.

VenomRAT is classified as a highly dangerous piece of software and it can cause serious issues.

What is "A virus has been detected on your computer"?

This is a typical tech support scam in which criminals claim to offer a legitimate technical support service.

Typically, the scammers responsible attempt to trick unsuspecting users into paying for supposedly legitimate software or services, or even installing a Remote Administration Tool (RAT), which would allow them to remotely access and control computers. In any case, you are strongly advised to ignore such scams and never trust the messages.

What is Credo?

Discovered by dnwls0719, Credo belongs to the Dharma ransomware family. Credo is typical ransomware: it encrypts files, renames them and generates a ransom message. It renames encrypted files by adding the victim's ID, Recovery@qbmail.biz email address and appending the ".credo" extension to filenames.

For example, it would change a file named "1.jpg" to "1.jpg.id-1E857D00.[Recovery@qbmail.biz].credo", "2.jpg" to "2.jpg.id-1E857D00.[Recovery@qbmail.biz].credo", and so on. Credo generates two ransom messages: it displays one in a pop-up window and creates another in a text file named "FILES ENCRYPTED.txt".

What is OdysseusLookup?

OdysseusLookup is a rogue application classified as adware and possessing browser hijacker traits. Following successful installation, OdysseusLookup delivers intrusive ad campaigns, makes alterations to browser settings and promotes fake search engines.

Most adware type apps and browser hijackers collect browsing-relating information, and this is likely to include OdysseusLookup. Due to the dubious techniques used to proliferate this app, it is classified as a Potentially Unwanted Application (PUA).

One of the methods used to distribute OdysseusLookup is via fake Adobe Flash Player updates. Note that bogus software updaters/installers are also used to spread Trojans, ransomware and other malware.

What is SearchRange?

The SearchRange app is often installed unintentionally through a deceptive Adobe Flash Player installer. Therefore, this app is categorized as a potentially unwanted application (PUA). After installation, it hijacks browsers, changes certain browser settings, and starts to display various ads.

I.e., SearchRange is both an adware-type app and a browser hijacker. Apps of this type are often designed to gather browsing-related and other information.

What is BasicDesktop?

BasicDesktop is a rogue application categorized as adware. Additionally, this app also has browser hijacker traits. BasicDesktop operates by delivering intrusive advertisement campaigns, modifying browser settings and promoting fake search engines (Safe Finder via akamaihd.net).

Due to the dubious methods used to proliferate BasicDesktop, it is also classified as a Potentially Unwanted Application (PUA). Most PUAs have data tracking capabilities, which are employed to monitor users' browsing activity, and it is highly likely that this is the case with BasicDesktop.

What is HideMeFast?

HideMeFast is rogue software, which operates as a browser hijacker. Typically, software within this classification operates by making certain modifications to browsers to promote fake search engines, however, HideMeFast behaves in a different manner. It promotes a legitimate search engine called Bing (bing.com), without first redirecting to a bogus search engine.

Additionally, HideMeFast uses the "Managed by your organization" feature in the Google Chrome browser to ensure persistence (removing becomes rather complicated).

Due to the dubious methods used to spread this software, HideMeFast is also classified as a Potentially Unwanted Application (PUA). Most PUAs monitor users' browsing activity, and this is the case with HideMeFast.

What is the Incredible Tab browser hijacker?

Inprobable Tab is rogue software categorized as a browser hijacker. Following successful infiltration, it modifies browser settings to promote inprobabletab.com (a fake search engine). Additionally, most browser hijackers monitor users' browsing activity and it is likely that Inprobable Tab does so as well.

Due to the dubious techniques used to promote Inprobable Tab, it is classified as a Potentially Unwanted Application (PUA).