Virus and Spyware Removal Guides, uninstall instructions

What is Fantasic Movies?

Fantasic Movies hijacks browsers and promotes a fake search engine (fantasicmovies.com) by modifying the settings. Commonly, apps of this type change browser settings and gather data. People often download and install browser hijackers inadvertently and, for this reason, they are categorized as potentially unwanted applications (PUAs).

What is "ProtonMail email scam"?

"ProtonMail email scam" refers to a spam campaign designed to hijack users' ProtonMail mail accounts. These messages claim that the recipient's email account has been suspended due to unspecified and unresolved errors, hence they risk losing access and suffering data deletion.

The scam urges people to address the issues immediately, however, the link presented in the email leads to a phishing website. Attempting to log-in through this site will reveal usernames and passwords to the scammers, thereby allowing them to gain access to the exposed ProtonMail accounts.

What is "ZoneAlarm Global Virus Alert"?

Like most technical support scams, this one claims that the user's personal, sensitive information is stolen and the computer is infected with malware. Its main purpose is to trick unsuspecting people into calling scammers via the provided telephone number.

Typically, scammers behind these deceptive websites seek to extort money from users by deceiving them into paying for remote "support services" software. They might also ask people to grant remote access to their computers. In any case, such scams should never be trusted.

Note that this scam mentions legitimate antivirus software called ZoneAlarm, however, neither this software, nor the internet security software company that developed it, has anything to do with this scam.

What is Geminis?

Discovered by dnwls0719, Geminis is a malicious program categorized as ransomware. Systems infected with this malware suffer data encryption and users receive ransom demands for decryption keys/software. When Geminis ransomware encrypts data, files are appended with the ".geminis3" extension.

Therefore, a file originally named something like "1.jpg" would appear as "1.jpg.geminis3 following encryption, and so on for all affected files. After this process is complete, a ransom message ("README.txt") is dropped into every compromised folder.

What is hesterinoc[.]info?

hesterinoc[.]info is one of many sites that redirect visitors to other untrusted websites or load dubious content. More examples of pages that function in this way are promodayz[.]com, overiesarticu[.]info and pushpush[.]net. Typically, these web pages are opened through dubious ads, rogue web pages or potentially unwanted applications (PUAs) installed on the browser.

Most users do not visit websites such as hesterinoc[.]info intentionally.

What is magnetdl[.]com?

magnetdl[.]com is a torrent website which uses rogue advertising networks and might contain copyrighted content. Note that buttons within magnetdl[.]com can lead to other untrusted and potentially malicious websites, including illegal streaming web pages. Note that 'torrenting' (using torrent clients) is not illegal, however, downloading copyrighted content is.

What is GoCryptoLocker?

Discovered by Amigo-A, GoCryptoLocker is malicious software classified as ransomware. Ransomware is designed to encrypt data and demand payments for decryption. When GoCryptoLocker encrypts, all affected files are appended with the ".GEnc" extension.

For example, a file originally named something like "1.jpg" would appear as "1.jpg.GEnc" following encryption. After this process is complete, GoCryptoLocker displays a pop-up window.

What is History Hide?

History Hide is advertised as a privacy-focused app that keeps users' searches private. In fact, it changes browser settings to promote its associated search engine (historyhide.com) and might also gather browsing-related and other data. Apps of this type are classified as browser hijackers.

People often download and install browser hijackers accidentally and, therefore, they are also categorized as potentially unwanted applications (PUAs).

What is zooqle[.]com?

zooqle[.]com is an untrusted P2P (Peer-to-Peer) sharing website, which allows users to share content through torrent files. In fact, this site infringes copyright laws and uses rogue advertising networks. Therefore, visitors to this website are redirected to other dubious, deceptive and malicious sites.

This is a common monetization tactic employed by torrents and other dubious sites. Additionally, web pages such as zooqle[.]com are known to offer Trojans, ransomware and other malware for download, disguised as, or bundled with, normal software and/or media files. You are strongly advised against using zooqle[.]com or other untrusted download sources.

What is WisePCDoctor?

WisePCDoctor is advertised as program which allows users to scan, repair and improve the performance of their computers, however, due to its distribution method, WisePCDoctor is categorized as a potentially unwanted application (PUA). Generally, users do not download or install PUAs intentionally. Therefore, apps of this type should never be trusted.