Virus and Spyware Removal Guides, uninstall instructions

What is IDP.Generic?

For people who use various anti-virus software, IDP.Generic is a common threat name. IDP is 'Identity Protection', so when a security application detects a threat called IDP.Generic, it indicates that it was detected by this component (Identity Protection), which generalized a detected file. This detection is often a 'false positive'.

What is youtubemp4[.]to?

The youtubemp4[.]to website can be used to download videos from YouTube by pasting a video link. The website itself is not malicious or harmful, however, it often causes redirects to other untrustworthy sites (it is used to promote dubious web pages). Another reason to avoid youtubemp4[.]to is that downloading videos from YouTube is illegal.

What is MixBuilder?

MixBuilder is a potentially unwanted app (PUA) classified as adware. If this app is installed, it indicates that there are more adware-type apps already installed on the system. MixBuilder app is installed through other ad-supportive software without users' consent.

Users with apps of this type installed on their systems are continually served with unwanted ads. Furthermore, PUAs often gather information relating to users' browsing habits.

What is y2mate[.]com?

Like many other websites of this type, y2mate[.]com offers a video and audio downloading service. It downloads video and audio files from the YouTube website. This is not a dangerous/malicious website, however, it contains various advertisements and it causes redirects to other dubious sites. Note that it is illegal to download videos from YouTube.

What is Verasto?

Verasto is high-risk ransomware discovered by Michael Gillespie. This malware belongs to yet another variant of a ransomware virus called Djvu.

As with its predecessor, Verasto encrypts stored data and renames each compromised file by adding the ".verasto" extension (e.g., "sample.jpg" is renamed to "sample.jpg.verasto"). Encrypted data instantly becomes unusable. Additionally, Verasto stores a text file called "READ_ME.txt" in every existing folder.

What is qdownloader[.]net?

qdownloader[.]net is an 'Online Video Downloader' for downloading videos from YouTube, Instagram, Twitter, Facebook, and other websites. Videos can be downloaded in several different formats. It is illegal to download videos from YouTube. Furthermore, qdownloader[.]net uses various advertising networks.

This does not indicate that the web page itself is harmful, however, using it can lead to unwanted redirects, download and installation of potentially unwanted apps (PUAs), and so on.

What is gwx.exe?

The gwx.exe file is a part of the Microsoft Windows operating system. Its purpose is to upgrade Windows operating systems from earlier versions to Windows 10. The gwx.exe file is placed in the "C:\Windows\System32\GWX" folder, however, like many legitimate processes, its name could be used to disguise a malicious file/process.

What is search.terraarcade.com?

search.terraarcade.com is one of many search engines that is promoted through a potentially unwanted application (PUA) - in this case, a browser hijacker called Terra Arcade. Like most search engines of this type, search.terraarcade.com is promoted as 'useful' and capable of providing faster searches, more accurate results, and so on.

This is the case with most browser hijackers, however, Terra Arcade changes browser settings and records data relating to users' browsing habits. Do not have these apps installed on your system or use search engines that are promoted by them.

What is Csrss.exe?

Csrss.exe (also known as Client Service Runtime Process) is a legitimate and important process that runs in Windows Operating Systems. The genuine csrss.exe file is located in "C:\Windows\System32\" and it is normal to see it running in Task Manager, since it is an important part of the operating system.

What is Can't close Google Chrome?

If the Google Chrome window (browser) keeps reopening after closing, it might be caused by an adware-type application present on your computer.

One adware-type app known to cause this issue is MacSecurityPlus. Like most potentially unwanted apps (PUAs) of this type, it delivers intrusive advertisements and gathers information relating to users' browsing habits. Note that most people download and install adware-type apps unintentionally.