Virus and Spyware Removal Guides, uninstall instructions

What is the Call From Apple scam?

The number of cases whereby scammers claim to be Apple Support team members and call people to gain remote access to their computers is growing daily. Many people have received an automated call warning that their Apple ID or iCloud accounts have been breached.

The main goal of these scams is to trick people into giving scammers remote access to their devices through various legitimate software. We strongly advise that you to ignore these scams and bear in mind that official Apple Customer Support would never make such calls.

What is Current Weather App?

Current Weather App is a browser hijacker, marketed as an application for easy access to local weather forecasts, with an additional web searching tool. This rogue app is classified as both a PUA (potentially unwanted application) and a browser hijacker.

Due to most users installing it unwillingly, it is categorized as the former. As for the latter, this classification depends on unauthorized changes that Current Weather App makes to browsers. Which includes modifications, designed to promote its fake search engine (search.currentweathertab.com).

Additionally, this application has data tracking abilities; i.e. it spies on users' browsing activities and gathers their personal information.

What is appleproductpro[.]com?

appleproductpro[.]com is a deceptive web page used to trick people into downloading and installing apps that supposedly remove viruses that were 'detected' by this website. Messages about so-called 'detected viruses' displayed on websites such as appleproductpro[.]com are fake and should not be trusted.

The same applies to apps that are promoted through such sites. Research shows that appleproductpro[.]com targets mostly iPad and iPhone devices, however, browsers also open this site on desktop computers.

People generally do not visit websites such as appleproductpro[.]com intentionally - they are redirected to them by potentially unwanted applications (PUAs) installed on their systems.

What is Mac Clean Pro?

Similar to Advanced Mac Tuneup and Secure Mac Tuneup, Mac Clean Pro is a dubious application that claims to clean and optimize computers.

Judging on appearance alone, Mac Clean Pro may seem legitimate and useful, however, this app is categorized as a potentially unwanted application (PUA), since developers proliferate it using a deceptive marketing method called "bundling".

What is Weather Forecast Now?

Weather Forecast Now is but one of many browser hijackers. It is advertised as a tool for quick access to local weather forecasts, with an additional web searching tool. Weather Forecast Now modifies browsers by changing their settings and forcing users to use its fake search engine (search.weatherforecastnow.net).

It can also track data; spy on browsing activity and gather personal information. Since most users install it inadvertently, it is considered a PUA (potentially unwanted application).

What is safetyvpn[.]net?

safetyvpn[.]net is one of many deceptive websites used to trick visitors into believing that their devices are infected with viruses. It targets mostly mobile devices such as iPads and iPhones, but can also be opened by desktop computer users.

The main purpose of these sites is to advertise various apps that supposedly remove 'detected' viruses, errors, and so on (in fact, they are fake). Do not trust pages such as safetyvpn[.]net or download/install apps promoted through them. In many cases, deceptive web pages are opened by potentially unwanted apps (PUAs) installed on browsers.

What is Local Classifieds Hub?

Local Classifieds Hub is a browser hijacker. Endorsed as a tool for easy and fast access to classified advertisements, it is accompanied by a fake search engine. Most users install this rogue app onto their devices inadvertently/unwillingly, therefore it is considered to be a PUA (potentially unwanted application).

Local Classifieds Hub changes browser settings and promotes its fake search engine (search.localclassifiedshubtab.com), additionally it can spy on users' browsing habits - due to this activity it is categorized as a browser hijacker.

What is MacOS Bundlore?

MacOS Bundlore (also known as Crossrider) or is a family of deceptive software installers that allow criminals to proliferate ("bundle") adware-type applications (such as CinemaPlusPro, FlashMall, MyShopcoupon, etc.) together with regular apps. Adware-type apps typically offer 'useful features' and most may seem legitimate.

After infiltration, however, these programs deliver intrusive advertisements and gather sensitive information.

What is Meds?

Meds is malicious software that belongs to the Djvu ransomware family. Typically, ransomware-type programs are used to encrypt files and force victims to purchase decryption tools and/or keys (in effect, pay ransoms). This ransomware adds the ".meds" extension to all encrypted files.

For example, "1.jpg" becomes "1.jpg.meds". Meds also creates a ransom message within the "_readme.txt" file.

What is PyLock?

Discovered by GrujaRS, PyLock is a high-risk ransomware infection that stealthily infiltrates computers and encrypts most stored data, thereby rendering it unusable.

As well as compromising data, PyLock appends each filename with the ".locked" extension (e.g., "sample.jpg" is renamed to "sample.jpg.locked"). Once data is encrypted, users are presented with a pop-up window containing a ransom-demand message.