Virus and Spyware Removal Guides, uninstall instructions

What is My Inbox App?

My Inbox App is a browser hijacker, advertised as a quick access to favorite email services with a web searching tool. It modifies browsers in order to promote its fake search engine (search.myinboxapptab.com). It also has data tracking abilities, which it employs to spy on users' browsing activity and to gather their personal information.

My Inbox App is additionally categorized as a PUA, as most users install it onto their devices inadvertently.

What is "WannaCry hacker group Email Scam"?

As its name suggests, "WannaCry hacker group Email Scam" is an email scam. It uses a form of blackmail known as "sextortion" in which it extorts money from people by threatening to reveal evidence of sexual activity. In this particular case, it claims that the evidence was obtained through the user's webcam.

It states that this footage will be distributed unless funds are transferred to an account provided within a specific time frame. It should be stressed that these claims are false and cyber criminals behind this scam do not have any compromising material. Ignore all emails of this type.

What is "Sextortion Email (Monero)" scam?

"Sextortion Email (Monero)" is the name of a scam sent to trick people into paying criminals. Scammers seek to trick recipients into believing that they have recorded a humiliating video, which they will proliferate on the internet unless a specific sum of Monero cryptocurrency is paid.

There are many similar scams online, none of which should be trusted. If you receive these fraudulent emails, simply ignore and delete them.

What is Hermes837?

Discovered by GrujaRS, Hermes837 is malicious software classified as ransomware. Ransomware-type programs are designed to encrypt data, thereby rendering files inaccessible. Cyber criminals spread programs of this type to extort money from people by forcing them to purchase decryption tools and/or keys.

Hermes837 adds the ".hermes837" extension to the filenames of all encrypted files. For example, "1.jpg" becomes "1.jpg.hermes837". Instructions about what to do next are provided in the "!!!READ_ME!!!.txt" file.

What is "Mac System currently outdated and corrupted"?

"Mac System currently outdated and corrupted" is a notification on a deceptive scam site, which is used to trick people into installing a dubious app called My Mac Speedup. Visitors supposedly use this app to fix an 'issue' that was detected by this scam site.

We strongly advise that you do NOT trust websites of this type or apps that they promote. If the browser opens these web pages regularly, it is likely that a potentially unwanted application (PUA) is installed on the system and is responsible.

What is Pirrit?

Pirrit is the name of an adware family comprising a number of adware-type apps. Typically, apps of this type display intrusive, annoying (and often deceptive) advertisements. In some cases, adware can also be used to gather data. You are advised against having any adware installed on your computer or browser.

What is "apple.com-scan-mac[.]xyz"?

Apple.com-scan-mac[.]xyz is a scam website, created for the promotion of the Cleanup My Mac application. This site functions by alerting users of fake threats it has detected. However, it should be emphasized that any viruses it finds are imaginary. It is strongly advised to never trust such sites, and refrain from download/installing suggested software.

It is also noteworthy, that any apps such webpages offer are likely to be fraudulent and therefore nonoperational. Most visitors to apple.com-scan-mac[.]xyz, happen upon it accidentally. It is mostly accessed through rogue redirects caused by PUAs (potentially unwanted applications) already present on users' Mac operating systems.

What is Package Tracking App?

Package Tracking App is a rogue application, advertised as a package tracker and a web searching tool. It is supposedly capable of providing details on ordered packages (tracking their route and similar). In all actuality, Package Tracking App is both a browser hijacker and a PUA (potentially unwanted application).

As the former, it changes browser settings, promotes its fake search engine (search.packagetrackingapptab.com) and monitors users' browsing activity. Its classification as the latter depends on the fact that most users download/install it unwillingly.

What is myhelpfuldownloads[.]com?

myhelpfuldownloads[.]com is a dubious website used to promote software called Scanguard and other dubious applications. Users do not generally visit pages such as myhelpfuldownloads[.]com intentionally. If a browser opens myhelpfuldownloads[.]com, this is due to an adware-type application present on the system.

Adware is software that displays various unwanted, often deceptive, ads. Adware-type apps are categorized as potentially unwanted applications (PUAs), since most people download and install them unintentionally.

What is Guarded?

Guarded is a ransomware-type program, which is similar to Sguard. Typically, programs of this type encrypt files so that victims cannot access them without specific tools that can be purchased only from the cyber criminals who developed the ransomware. Guarded renames encrypted files by adding a new extension: ".Guarded".

For example, "1.jpg" becomes "1.jpg.Guarded". It also creates a ransom message in the "GUARDED-README.txt" text file, which contains instructions about how to purchase the decryption tool.