Virus and Spyware Removal Guides, uninstall instructions

What is TechBoardSearch?

TechBoardSearch is an adware-type application that possess characteristics typical of browser hijackers. It operates by running intrusive ad campaigns and modifying browser settings to promote a fake search engine. Furthermore, most adware programs and browser hijackers track browsing-related data, and it is highly likely that TechBoardSearch also performs this function.

This app has been observed being distributed via fake Adobe Flash Player updates and is therefore classified as a Potentially Unwanted Application (PUA). Bogus software updaters/installers proliferate PUAs and also ransomware, Trojans and other malware.

What is the C4H ransomware?

Discovered by Petrovic, C4H is malicious software belonging to the GlobeImposter ransomware family. This ransomware encrypts data and demands payment for decryption keys/software. During the encryption process, all files are appended with the ".C4H" extension.

For example, a file originally named something like "1.jpg" would appear as "1.jpg.C4H" following encryption. Other variants of this ransomware append the ".C1H", ".C2H" and ".C3H" extensions. After this process is complete, a ransom message ("Decryption INFO.html") is created in every compromised folder.

What is pushtoday[.]icu?

There are many rogue websites similar to pushtoday[.]icu including, for example, superinterestinginfo[.]info, rpket[.]pro and redbearmobilecuisine[.]com. Most of these web pages open other untrusted sites or load dubious content.

Commonly, people do not visit addresses such as pushtoday[.]icu intentionally - in most cases, they are opened through dubious ads, rogue websites, or potentially unwanted applications (PUAs) installed on the system. PUAs not only open sites such as pushtoday[.]icu, but also display ads and gather information relating to users' browsing activities.

What is DoctoPDF?

DoctoPDF is a browser hijacker, advertised as a tool capable of converting doc file format to PDF documents. Following successful installation, this piece of software modifies browsers in order to promote pdfsrch.com - a fake search engine. Additionally, DoctoPDF spies on users' browsing activity.

Due to this browser hijackers dubious proliferation methods, it is considered to be a PUA (Potentially Unwanted Application).

What is Image Sherpa?

Image Sherpa is a potentially unwanted application (PUA), a browser hijacker. Typically, apps of this type promote the addresses of fake search engines and gather browsing data. Image Sherpa promotes image-sherpa.com in this way. As with most browser hijackers, this app promotes the fake search engine by modifying certain browser settings to include the rogue URL.

Image Sherpa is identical to Search Sherpa, another app of this type. These apps are categorized as PUAs, since users often download and install them unintentionally.

What is Quick Forms?

Quick Forms is a rogue application categorized as a browser hijacker and endorsed as a tool for easy access to various forms websites. Quick Forms operates by altering browser settings to promote hquick-forms.com (a fake search engine). Additionally, this app has data tracking capabilities, which are employed to monitor users' browsing habits.

Due to the dubious proliferation methods used to promote Quick Forms, it is also classified as a Potentially Unwanted Application (PUA). Quick Forms is often distributed together another PUA called Hide My History.

What is mycoolsearch.com?

mycoolsearch.com is a fake search engine that does not generate unique results. Typically, these web addresses are promoted by browser hijackers, potentially unwanted applications (PUAs) that change certain browser settings. These apps are categorized as PUAs, since many users download and install them unintentionally.

Note that browser hijackers modify browser settings to promote fake search engines and also collect information relating to users' browsing habits.

What is ProstoStealer?

ProstoStealer is an information stealer, which is used to steal sensitive data and also to infect computers with additional malware. This malware could potentially inflict serious damage to the system. Therefore, if your computer is infected with ProstoStealer, eliminate this malicious software immediately.

What is Mzlq?

Mzlq is a malicious program belonging to the Djvu ransomware family. It renames all encrypted files by appending the ".mzlq" extension.

For example, it changes a file named "1.jpg" to "1.jpg.mzlq", "2.jpg" to "2.jpg.mzlq", and so on. Instructions about how to contact Mzlq's developers, cost of decryption, and other details are provided within the "_readme.txt" file. Mzlq drops this text file (containing the ransom message) in every folder that contains encrypted files.

What is Quick To Email?

Quick To Email is a browser hijacker, endorsed as a tool for easy access to email accounts. This software modifies browsers to promote quicktoemail.com (a bogus search engine). Furthermore, this browser hijacker monitors users' browsing activity. Due to its dubious proliferation methods, Quick To Email is classified as a Potentially Unwanted Application (PUA).