Virus and Spyware Removal Guides, uninstall instructions

What is Total System Care?

The Total System Care program is presented as a "performance suite" that provides various tools to optimize Windows Operating Systems and improve performance.

The "bundling" method is used to promote and distribute this program, and it is thus categorized as a potentially unwanted application (PUA). Many users install these apps unintentionally together with other regular software.

What is blogsfeed.info?

blogsfeed.info one of many rogue websites (virtually identical to push-checking.com, hajoopteg.com, lythenheckwo.info, and many more) designed to cause redirects to untrustworthy and potentially malicious websites or display dubious content. Most users arrive at blogsfeed.info inadvertently - they are redirected by potentially unwanted applications (PUAs).

These programs are usually installed unintentionally without users' consent. In addition to redirects, PUAs deliver intrusive ads and collect data.

What is "Upgrade your edition of Microsoft Word Email Virus"?

"Upgrade your edition of Microsoft Word Email Virus" is a spam campaign that cyber criminals use to spread the Emotet infection. This is a trojan-type program, a high-risk computer infection. To trick people into installing this software, cyber criminals send emails that contain a malicious attachment, a Microsoft Word document.

The main purpose of this spam campaign is to trick recipients into opening the attachment. To keep your computer safe, we recommend that you ignore this email.

What is moocauby.com?

moocauby.com is a deceptive website designed to redirect users to other dubious sites and deliver content. It is virtually identical to a number of other websites of this type including lythenheckwo.info, time2notification.com, and appenzaeart.club.

Most visitors arrive at moocauby.com inadvertently - they are redirected by potentially unwanted applications (PUAs) or intrusive advertisements. Potentially unwanted applications (PUAs) usually infiltrate computers without permission, cause redirects, deliver intrusive advertisements, and record data relating to users' browsing habits.

What kind of page is 0123movies.com?

The 0123movies.com website allows visitors to watch movies online free of charge. This may seem to be a legitimate and useful website, however, developers use it to promote other dubious sites, software, various services, and so on. Note that the site causes redirects to other untrustworthy websites.

Furthermore, these redirects occur on virtually every mouse click. To avoid the resultant installation of unwanted apps and computer infections, we recommend that you avoid 0123movies.com and any associated services.

What is ms13?

Discovered by Jakub Kroustek, ms13 is yet another ransomware infection belonging to the Dharma malware family. As with other viruses of this kind, ms13 compromises stored data by encryption. In addition, it appends filenames with the ".ms13" extension plus the victim's unique ID and developer's email address.

For example, "sample.jpg" might be renamed to a filename such as "sample.jpg.id-1E857D00.[ms_13@aol.com].ms13". After successful encryption, ms13 displays a pop-up window and places a text file ("FILES ENCRYPTED.txt") on the desktop.

What is ChangeToPDF?

The ChangeToPDF app is promoted as a PDF converter that allows users to convert their PDF files to various other formats such as Word, PowerPoint, Excel, PNG, JPG, etc.

In fact, this software originates from the Bundlore adware family and is used to distribute adware-type applications to Mac computers via the "bundling" method. If installed, adware displays intrusive advertisements and gathers information.

What is Marozka ransomware?

Discovered by GrujaRS, Marozka is a ransomware-type program that is based on an open-source ransomware project called Hidden Tear. It encrypts data using AES cryptography and creates a ransom message within a text file called "HOW TO DECRYPT FILES.txt", which can be found in each folder that contains encrypted files.

It also adds the ".Marozka" extension to encrypted files. For example, "1.jpg" is reamed to "1.jpg.Marozka". Additionally, Marozka changes the desktop wallpaper.

What is dongtaiwang.com?

The dongtaiwang.com website is created for Chinese-speaking users and promotes a VPN (Virtual Private Network) called Freegate. This app accesses websites that are otherwise blocked in the user's country.

Note, however, that it is categorized as a browser hijacker, a potentially unwanted application (PUA), since it changes browser settings, promotes the dongtaiwang.com website and articles, and collects information relating to users' browsing habits.

What is redrentalservice.com?

redrentalservice.com (a successor of setforconfigplease.com) is one of many websites that cause redirects to other untrustworthy sites. Some examples of other websites that operate in this way are setforconfigplease.com, somelandingpage.com, and setforspecialdomain.com.

People are usually redirected to these websites when cyber criminals exploit bugs of Content Management Systems (CMS) such as WordPress, Joomla, etc., and various extensions installed on these systems.

Cyber criminals inject malicious scripts into legitimate websites, which results in redirects to other dubious sites (such as redrentalservice.com) when users visit the hijacked, legitimate site.