Virus and Spyware Removal Guides, uninstall instructions

What kind of malware is DDT?

Discovered by Michael Gillespie, DDT is part of GlobeImposter, a family of ransomware-type programs. Like most programs of this type, DDT encrypts files stored on computers and keeps them locked unless a ransom is paid (victims purchase a decryption tool that can decode files encrypted by DDT).

Information about how to contact cyber criminals and purchase the tool is provided in the "how_to_back_files.html" file. Additionally, this ransomware renames all encrypted files by appointing the ".{dresdent@protonmail.com}DDT" extension. For example, "1.jpg" becomes "1.jpg.{dresdent@protonmail.com}DDT".

What is Heroset?

The Heroset program belongs to the Djvu ransomware family and was discovered by Michael Gillespie. The main purpose of Heroset is to encrypt files (rendering them unusable) and force victims to pay a ransom (in effect, purchase a decryption tool). 

Heroset places the "_readme.txt" file (containing a ransom message) in every folder that contains encrypted files. It also renames all encrypted files by adding the ".heroset" extension. For example, "1.jpg" becomes "1.jpg.heroset".

What is Euclid?

Discovered by Michael Gillespie, Euclid is high-risk ransomware designed to encrypt most stored files, thereby rendering them unusable.

During encryption, Euclid appends filenames with the ".euclid" extension. For instance, "sample.jpg" is renamed to "sample.jpg.euclid". Euclid also delivers a ransom-demand message via the "recovery.txt" text file, which is stored in every existing folder.

What is Advanced Driver Booster?

Advanced Driver Booster is advertised as a useful device driver updater. Since it is important to keep installed drivers up-to-date, Advanced Driver Booster may seem to be a useful tool, however, developers distribute it by bundling it into set-ups of other software.

People often download and install Advanced Driver Booster unintentionally and, therefore, this tool is categorized as a potentially unwanted application (PUA).

What is QBIT Clean Pro?

According to QBIT (Clean Pro's developers), this program cleans, optimizes and improves computer performance. It can supposedly remove malware, unwanted programs, invalid registry items, and so on. In fact, the developers promote QBIT Clean Pro by bundling it into other software setups.

This increases the possibility that most users will download and install it unintentionally. Therefore, this program is categorized as a potentially unwanted application (PUA).

What is Poret?

Belonging to the Djvu ransomware family, Poret is a high-risk file-encryption virus discovered by Michael Gillespie. Poret infiltrates the system and encrypts most stored data, thereby rendering it unusable.

Additionally, Poret appends filenames with the ".poret" extension (e.g., "sample.jpg" is renamed to "sample.jpg.poret"). As well as encrypting data, Poret stores the "_readme.txt" file in every folder containing encrypted files.

What is Pidom?

The Pidom program belongs to the Djvu ransomware family and was discovered by Michael Gillespie. Malicious programs of this type encrypt files (rendering them unusable) and keep them locked unless a decryption tool is purchased.

Pidom creates a ransom message in the "_readme.txt" file and renames all encrypted files by changing their extensions to ".pidom". For example, "1.jpg" becomes "1.jpg.pidom". Other variants of this ransomware use the ".pidon" extension.

What is moviestreamhd[.]org?

The moviestreamhd[.]org website allows users to stream online movies free of charge and without having to register. Note that this site streams movies illegally, since developers use rogue ad networks. Therefore, people who use this website risk being redirected to dubious websites that might be designed to promote adware-type apps and other unwanted apps.

What is Movies123?

Movies123 allows people to watch various movies online free of charge, however, it provides this service through illegal streaming websites. Additionally, people who develop these websites employ rogue advertising networks. Therefore, using services provided by Movies123 risks computer infection by adware-type and other potentially unwanted apps (PUAs).

What is bikereddint[.]info?

bikereddint[.]info is a rogue website designed to redirect visitors to other untrustworthy, potentially malicious web pages. Typically, people visit this site inadvertently - they are redirected to it by installed potentially unwanted apps (PUAs). Users generally download and install PUAs unintentionally.

In addition to unwanted redirects, PUAs deliver intrusive ads and collect data relating to users' browsing activities. Note that bikereddint[.]info is very similar to suaningrebtersed[.]info, newschanel[.]biz, feedmedia[.]me, and many other sites.