Virus and Spyware Removal Guides, uninstall instructions

What is newschanel[.]biz?

When opened, the newschanel[.]biz website redirects visitors to other untrustworthy sites or displays deceptive, dubious content. Its operation is similar to many other websites of this type including, for example, allneed[.]pro, feedmedia[.]me, and tontorcaltedron[.]info.

Most people do not open these websites intentionally - they are redirected to them by potentially unwanted apps (PUAs) installed on their browsers or operating systems. PUAs also record information relating to users' browsing habits and display intrusive advertisements.

What is Incognito Private Shield?

Developers promote Incognito Private Shield as a program that provides online protection. It allows users to browse the web anonymously without leaving any trace (removing all browsing history, chat conversations, downloaded files, and so on), however, developers distribute this program by bundling it into the set-ups of other software.

This increases the possibility that people will install it unintentionally. For this reason, Private Shield is categorized as a potentially unwanted application (PUA).

What is allneed[.]pro?

allneed[.]pro is one of many rogue websites that, once visited, opens other untrustworthy sites or displays dubious content. Examples of other websites of this type include feedmedia[.]me, tontorcaltedron[.]info, and torlock[.]com.

Most people arrive at allneed[.]pro unintentionally - they are redirected to the site by a potentially unwanted application (PUA) that is installed on the browser as an extension, plug-in, or add-on. Additionally, these PUAs usually serve users with ads and gather information relating to browsing habits.

What is Homework virus?

Discovered by Malwrhunterteam, Homework is ransomware that emulates another program of this type called WannaCry. Ransomware-type programs are commonly designed to encrypt files and force victims to purchase a decryption tool/key.

Homework modifies encrypted files by changing their names - it adds the ".PLEASE_CONTACT_1398456099@qq_com" extension. For example, "1.jpg" becomes "1.jpg.PLEASE_CONTACT_1398456099@qq_com". It also displays a pop-up window that contains a ransom message.

What is peegh1o[.]com?

peegh1o[.]com is a rogue website designed to redirect visitors to other rogue sites. It shares many similarities with tontorcaltedron[.]info, feenotifyfriends[.]info, fortorsarrabse[.]info, and dozens of others.

Users often visit peegh1o[.]com inadvertently - they are redirected by potentially unwanted adware-type applications (PUAs), which infiltrate systems without permission. As well as causing redirects, adware often delivers intrusive advertisements and gathers information.

What is TrojanDownloader.VBS.Agent?

TrojanDownloader.VBS.Agent (also known as TrojanDownloader:VBS/Agent.EH) is the name of a threat, a malicious VBScript script that is detected by virus detection engines (for example, Windows Defender). The script is embedded into HTML websites and designed to exploit a vulnerability described in CVE-2006-0003.

Its purpose is to download and execute random, possibly malicious files. Therefore, this script might cause download and installation of malicious software.

What is Bebloh?

Bebloh is a malicious program categorized as a trojan. Typically, trojans are disguised as legitimate programs and there are various types. This particular one is designed to steal information without showing any signs of its presence. Bebloh runs in the system background, steals data, and sends it to cyber criminals (via remote servers controlled by them).

What is "Proxy Virus"?

Proxy Virus (also known as MITM Proxy Virus) is a type of browser-hijacking program that has recently become popular. In order to spread this infection, cyber criminals often use various adware-type applications. In most cases, these infiltrate computers without users' permission.

Adware is also likely to deliver intrusive advertisements and record information relating to browsing activity.

What is Your Easy Forms?

Your Easy Forms is a browser app that supposedly allows quick access to various popular forms (for example, IRS and tax-related forms).

This feature can be used directly from the browser's new tab (window). Note, however, that Your Easy Forms is a browser hijacker, a potentially unwanted app (PUA) that promotes a fake search engine (search.hyoureasyforms.com) by changing browser settings. Additionally, most PUAs collect information relating to users' browsing habits.

What is feedmedia[.]me?

feedmedia[.]me is a deceptive website that redirects visitors to other rogue sites and feeds them with dubious content. It shares many similarities with tontorcaltedron.info, torlock.com, fortorsarrabse.info, and many other sites.

Most visitors arrive at feedmedia[.]me inadvertently - they are redirected by potentially unwanted applications (PUAs) and intrusive advertisements displayed on other rogue sites. PUAs often infiltrate computers without users' direct permission. In addition to causing redirects, PUAs deliver intrusive advertisements and gather information relating to browsing habits.