Virus and Spyware Removal Guides, uninstall instructions

What is Forms Hub App?

Forms Hub App is a browser hijacker, advertised as an application that allows users to access free forms, accompanied by a supplementary web searching tool. It shares the name with a completely legitimate service (FormsHub), yet they are in no way related.

This rogue app promotes a fake search engine (search.formshubtab.com), changes browser settings and may also possess data tracking abilities. Due to most users installing Forms Hub App inadvertently, it falls into the category of PUAs (potentially unwanted applications).

What kind of scam is "I know you are a pedophile"?

"I know you are a pedophile" is a scam, an email that scammers use to extort money from unsuspecting people. To achieve this, they claim that they have infected the computer with a remote access tool (RAT), which allowed them to record 'humiliating videos'.

They threaten to proliferate these videos unless recipients send them a specific cryptocurrency sum (ransom). Do not trust this scam, since all claims are false.

What is BleachBit?

BleachBit is legitimate software that cleans operating systems and frees up disk space, however, cyber criminals have designed a website that is disguised as an official BleachBit download web page - this is used to promote a trojan-type program.

Therefore, people who download software from the unofficial BleachBit website (bleachbitcleaner[.]com) download a malicious program and not the correct BleachBit program (which should be downloaded from bleachbit[.]org). The malicious web page was discovered by Benkow.

What is Maps And Directions App?

Maps And Directions App is browser hijacker. Promoted as a free application for accessing maps, getting directions and local traffic news, also offering a supplementary fake search engine. It is classified as a PUA (potentially unwanted application), as most users install it inadvertently.

Maps And Directions App changes browser settings (leaving users no choice but to use its fake search engine - search.mapsanddirectionstab.com) and it may also possess intel gathering abilities.

What is Seto?

Discovered by GrujaRS, Seto ransomware is one of many malicious programs that belong to the Djvu family. These programs are designed to encrypt files and block access to them. To regain access, victims are encouraged to purchase a decryption tool from cyber criminals.

Seto renames all encrypted files by adding the ".seto" extension to the filenames. For example, "sample.jpg" becomes "sample.jpg.seto". Like most programs of this type, it also creates a ransom message within a text file. In this case, it creates a file named "_readme.txt" and stores it in folders that contain encrypted data.

What is apple.com-mac-optimizer[.]icu?

apple.com-mac-optimizer[.]icu is one of many scam websites, in this case, used to trick people into downloading and installing Cleanup My Mac, an application designed to remove viruses that this deceptive web page has supposedly detected. Do not install apps that are advertised on scam websites - messages about so-called 'detected viruses' are fake.

Browsers usually open websites such as apple.com-mac-optimizer[.]icu due to potentially unwanted applications (PUAs) installed on them or the MacOS system. I.e., people do no generally visit these sites intentionally.

What is Vudu Search?

Vudu Search is a browser hijacker, advertised as a browser extension, used to enhance web search. It is marketed as a legitimate tool capable of simplifying the search for topics, images, videos and news through the browser's search bar. Yet it is classified as a PUA (potentially unwanted applications) as many users install it inadvertently.

As a browser hijacker, it changes browser settings, forces users to use its fake search engine and gathers data relating to browsing activity.

What is hp.myway.com?

The MyQuickLotto application was created by Mindspark Interactive Network and supposedly provides free lottery tips and strategies. In fact, this app is distributed using a dubious marketing method called "bundling". In summary, MyQuickLotto is often added as an extra offer within the set-ups of other software.

Typically, people download and install apps such as MyQuickLotto unintentionally. Therefore, this app is categorized as a potentially unwanted application (PUA). It is also a browser hijacker, which changes browser settings and promotes a fake search engine.

What is telecomer[.]live?

Sharing many common traits with watchonline.click, getmedia.me, exclusivenotifications.com and thousands of others, telecomer[.]live is a rogue site. It is designed to generate redirects to untrustworthy/malicious websites and to present questionable content to users.

Most visitors to this dubious site accesses it inadvertently; either by being redirected from clicking on an intrusive advertisement or by having it force-opened by PUAs (potentially unwanted applications).

It is noteworthy, that these apps do not need express user permission to invade their devices. Once successfully infiltrated, they cause rampant redirects, deliver invasive advert campaigns and some can even gather intel on users' browsing activity.

What is HILDACRYPT?

Discovered by GrujaRS, HILDACRYPT is ransomware-type malicious software designed to encrypt files and prevent victims from accessing them unless they pay ransoms. HILDACRYPT changes the extensions of encrypted files to ".HILDA!". For example, it renames "1.jpg" to "1.jpg.HILDA!".

It also creates a ransom message within a text file called "READ_IT.TXT", which can be found in folders that contain encrypted files.