Virus and Spyware Removal Guides, uninstall instructions

What is "ilo134ulih[.]com"?

The Ilo134ulih[.]com URL address is used in rogue ad campaigns. In some cases, seemingly legitimate search results provided by official search engines open a pop-up window with this URL and redirect users to dubious websites.

The ilo134ulih[.]com site opens sites that show online surveys, promote unwanted apps, or ask visitors to show notifications. Do not trust any web pages that are opened via ilo134ulih[.]com.

What is Putlocker?

Putlocker is the name of a service that allows users to watch movies online free of charge. In fact, this streaming service is illegal and Putlocker's website uses rogue advertising networks. Therefore, it generates pop-up ads that might cause installation of adware-type or other unwanted apps.

Furthermore, Putlocker's web page asks visitors to show notifications - allowing these can also lead to unwanted downloads and installations.

What is "Your Apple iPhone is severely damaged"?

"Your Apple iPhone is severely damaged" (also known as "Your Apple iPhone is severely compromised") is a scam that deceptively encourages people to download a potentially unwanted application (PUA) that should be used to remove viruses that this scam website has supposedly detected.

There are many similar scams, which typically show fake virus alerts and encourage visitors to take immediate action (download a PUA). These sites are often opened by other unwanted apps already installed on the system. Therefore, people do not generally visit websites of this type intentionally.

Research shows that the error messages are delivered by numberonevpn[.]com, safetyvpn[.]net, mobillevpn[.]info, thevpnsafety[.]com, seriusvpn[.]com, backupvpn[.]com, seriousvpnp[.]com, and other rogue websites.

What is PathBrand?

PathBrand is yet another rogue adware-type application identical to SimpleProExtension, Resourcetools, and a number of others. Once installed, this application redirects users to a dubious website (which in turn redirects users to the Google search engine) when they enter a search query into the URL bar.

Therefore, users are redirected using the following pattern: search query -> dubious website -> Google search engine. Applications of this type also display intrusive advertisements and gather user-system information. Note that adware-type apps usually infiltrate computers without users' permission.

What is TechNetSearch?

TechNetSearch supposedly improves the browsing experience, however, this app causes unwanted redirects - it forces users to visit suspicious addresses (URLs) and then simply provides search results generated by Google. Apps of this type often promote other (legitimate) search engines such as Yahoo or Bing by causing redirects to them.

Since TechNetSearch is an adware-type app, it is likely to serve users with unwanted ads and record information relating to browsing activity.

What is GlobalTechSearch?

Identical to Resourcetools and SimpleProExtension, GlobalTechSearch is a rogue application that claims to enhance the browsing experience, however, this app causes a redirect to a third party website when users enter a search query (search query -> third party URL -> Google search engine).

Additionally, adware-type applications such as GlobalTechSearch often gather information relating to browsing activity and deliver intrusive advertisements. Note that adware-type applications usually infiltrate computers without users' consent.

What is SimpleProExtension?

SimpleProExtension is supposedly a useful tool that helps users to browse the web more efficiently, however, it is a PUA (potentially unwanted application) classified as adware. It redirects all online searches through its own URL address before forwarding to Google search.

In doing so, SimpleProExtension can gather users' search queries. Apps such as SimpleProExtension are known to track browsing information, display unwanted advertisements, and cause redirects to other search engines such as Yahoo, Bing, and so on.

What is Cratful?

Discovered by Michael Gillespie, Cratful is high-risk ransomware that stealthily infiltrates computers and encrypts most stored data using the RSA-1024 encryption algorithm.

During encryption, Cratful appends the name of each encrypted file with the ".cratful" extension (hence its name). For example, "sample.jpg" is renamed to "sample.jpg.cratful". In addition, Cratful generates a text file named "FilesInfo.txt" and stores a copy in each existing folder.

What is Banload?

Banload (also known as TrojanDownloader:Win32/Banload) is a family of malware-distribution trojans. If installed, trojans from this family inject systems with other computer infections, most of which are categorized as banking trojans that collect user-system information (anti-virus suites typically detect these injected infections as "Win32/Banker").

The presence of Banload (and its payload) on your system can lead to serious privacy issues and significant financial loss.

What is Resourcetools?

Resourcetools is presented as an app that allows users to easily browse the web, however, its real purpose is to redirect them through a dubious URL before showing results generated by Google. Therefore, this app can force people to use other search engines (such as Bing and Yahoo).

Additionally, apps such as Resourcetools are categorized as a potentially unwanted applications (PUAs) - adware that feeds users with unwanted, intrusive advertisements. Typically, these PUAs also record data. We recommend that you uninstall Resourcetools and avoid PUAs in future.