Virus and Spyware Removal Guides, uninstall instructions

What is Free Maps World Promos?

Free Maps World Promos is software categorized as adware and endorsed as a tool for easy access to maps and routes. In fact, it runs intrusive advertisement campaigns. This enables placement of various ads on any visited web page. Additionally, it has data tracking capabilities, which are used to monitor users' browsing activity.

Since most users install Free Maps World Promos unintentionally, it is also classified as a Potentially Unwanted Application (PUA).

What is CoordinatorMedia?

In most cases, people download and install adware such as CoordinatorMedia inadvertently. Therefore, apps of this type are categorized as potentially unwanted applications (PUAs). This particular app feeds users with advertisements and promotes Safe Finder by opening its associated address via akamaihd.net.

Additionally, it is designed to collect browsing-related and private, sensitive information.

What is overiesarticu[.]info?

When visited, overiesarticu[.]info leads visitors to other rogue websites or loads dubious content. There are many similar rogue websites on the internet. Some examples are alisalis[.]com, speakwithjohns[.]com and exq-timepieces[.]com.

These pages are usually opened via other sites of this kind, clicked dubious advertisements and/or by installed potentially unwanted applications (PUAs). I.e., people rarely visit pages such as overiesarticu[.]info intentionally.

What is Locate Your Package?

Locate Your Package is advertised as an app which allows users to track their packages in real time. In fact, this app is a browser hijacker designed to promote a fake search engine by assigning certain browser settings to locateyourpackagetab.com (another variant of this browser hijacker promotes searchlocateyp.com).

Commonly, apps of this type collect browsing data as well. People usually download and install browser hijackers accidentally and, therefore, these apps are classified as potentially unwanted applications (PUAs).

What is Local Weather Alerts?

Local Weather Alerts is advertised as an app that allows people to check weather forecasts. In fact, it promotes hlocalweatheralerts.co (the address of a fake search engine) by changing browser settings and gathers browsing-related data. Local Weather Alerts is a browser hijacker, a potentially unwanted application (PUA).

What kind of application is SearchVirtualInfo?

SearchVirtualInfo is an adware-type application that enables placement of intrusive ads on any visited website. Additionally, this app modifies browsers to promote fake search engines - behavior common to software classified as browser hijackers. Most adware programs and browser hijackers have data tracking capabilities, and this is likely to include SearchVirtualInfo.

Since most users download/install this adware unintentionally, it is also classified as an unwanted application. A dubious proliferation method use to spread SearchVirtualInfo is via fake Adobe Flash Player updates. As well as rogue apps, bogus software updaters/installers are commonly used to distribute Trojans, ransomware and other malware.

What is greacore[.]com?

greacore[.]com is a scam website, which makes deceptive claims to promote dubious applications. It states that users' iPhones have been damaged by two viruses and, to remove them, they must download and install a recommended app.

These schemes are commonly used to distribute fake anti-virus tools, adware, browser hijackers and other Potentially Unwanted Applications (PUAs). In some cases, they even promote Trojans, ransomware and other malware. Typically, deceptive/scam sites are accessed through redirects caused by intrusive advertisements or PUAs.

What is the "(3) Viruses has been detected" scam?

"(3) Viruses has been detected" is a scam run on various deceptive web pages. It claims that threats have been detected on the device and recommends an untrusted piece of software to remove the fake viruses. This scheme targets iPhone users; however, it might also be accessed through other Apple devices.

Scams of this kind typically promote fake anti-viruses, adware, browser hijackers and other Potentially Unwanted Applications (PUAs). In some cases, these deceptive tactics are used to proliferate ransomware, Trojans and other malware. Few users access scam sites unintentionally - most are redirected to them by intrusive ads or PUAs.

What is PoetRAT?

PoetRAT is the name of a Remote Access Trojan (RAT). This type of malware allows cyber criminals to monitor and control the victim's computer. In most cases, RATs such as PoetRAT are distributed to infect computers with other malware and/or steal sensitive information.

This particular malware can be used to log keystrokes, steal passwords, access victims' webcams, manage files, upload files from a Command & Control server and perform other similar actions.

What is Thana?

Thana is malicious software categorized as ransomware. This malware operates by encrypting data in order to demand ransoms for decryption.

During the encryption process, files are appended with the ".thana" extension. For example, a file originally named something like "1.jpg" would appear as "1.jpg.thana" and so on for all affected files. Once this process is finished, a ransom message ("HELP_ME_RECOVER_MY_FILES.txt") is dropped into every compromised folder.