Virus and Spyware Removal Guides, uninstall instructions

What is PC Health Aid?

According to its developers, the PC Health Aid application achieves 'maximum PC health' by accelerating system performance, stabilizing computer performance, and protecting and securing data.

This app may seem legitimate and useful, but it is classified as potentially unwanted application (PUA), since it is distributed, not only via its official website, but also using the "bundling" marketing method. Therefore, users often install it unintentionally.

What is AbsoluteConverter?

According to the developers, AbsoluteConverter allows conversion of all videos, images, and documents in a single click. This may seem a useful tool, especially for users who work with various files and need regular conversions.

In fact, AbsoluteConverter is a potentially unwanted application (PUA), a 'bundler' to be more precise. Users often install it unintentionally via the "bundling" method, and it also installs other PUAs.

What is monetizer.kraverr.com?

monetizer.kraverr.com is one of hundreds of rogue websites that include ionanewsupdate.info, zippnewsupdate.info, and wolve.pro.

They cause redirects to other untrustworthy websites and users do not often visit them intentionally. Potentially unwanted applications (PUAs) are installed inadvertently and cause these redirects. Furthermore, PUAs deliver intrusive ads and collect data.

What is spaces.slimspots.com?

spaces.slimspots.com is a rogue website similar or identical to Ionanewsupdate.info, zippnewsupdate.info, and wolve.pro. As with other rogue sites, spaces.slimspots.com causes unwanted redirects to other untrustworthy sites.

Most users end up visiting spaces.slimspots.com inadvertently - potentially unwanted applications (PUAs) cause redirects to this site. Typically, PUAs are installed without users' consent, deliver redirects, deploy ads, and collect data.

What is Secure Browser?

Secure Browser is presented as the world's first browser with integrated management console, an app designed to assist and simplify privacy and security management. This web browser is based on Chromium project, a legitimate open-source project, however, it is often misused as a platform for various potentially unwanted applications (PUAs) - in this case, the Secure Browser adware-type app.

What is search.linkeymac.com?

Developers present search.linkeymac.com as a high-end Internet search engine that supposedly generates improved search results and, therefore, enhances the browsing experience. Initially, search.linkeymac.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, many users believe that search.linkeymac.com is also legitimate. In fact, this site records various user-system information that might contain personal details. Furthermore, developers promote search.linkeymac.com via browser-hijacking download/installation set-ups that modify browser options without users' consent.

What is hp.myway.com?

CryptoPriceSearch is a dubious application developed by Mindspark Interactive Network. This app claims to allow users to check the current value of various cryptocurrencies.

Judging on appearance alone, CryptoPriceSearch may seem legitimate and useful, however, it is categorized as a potentially unwanted application (PUA) and a browser hijacker, since it often infiltrates systems without permission and promotes a dubious search engine.

What is Katyusha?

Katyusha is ransomware discovered by Michael Gillespie. After successful infiltration, this virus encrypts most stored files (thereby making them unusable) and adds the ".katyusha" appendix to each filename. For instance, "sample.jpg" is renamed to "sample.jpg.katyusha".

As well as encrypting data, Katyusha generates a text file called "_how_to_decrypt_you_files.txt" and places it on the desktop.

What is District?

District is a ransomware-type virus discovered by malware security researcher Michael Gillespie (the virus sample was supplied by Martin Stopka). After successfully infiltrating the system, District encrypts most stored data using AES-256 cryptography and appends filenames with the ".ctrlalt@cock.li.district" extension.

For example, "sample.jpg" is renamed to "sample.jpg.ctrlalt@cock.li.district". Once encrypted, data immediately becomes unusable. Encryption is not the only feature of District - this application also changes the desktop wallpaper and generates a text file ("READ_IT.txt"), placing it on the desktop.

At time of research, District added the ".district" extension to the text file, thereby making it unreadable unless the extension is reverted to ".txt". This is probably a bug that will be fixed at some point.

What is secure.calcch.com?

Similar to ionanewsupdate.info, zippnewsupdate.info, wolve.pro, and many others, secure.calcch.com is a rogue site designed to cause redirects to various other dubious websites. Research shows that many users visit secure.calcch.com inadvertently - they are redirected by potentially unwanted applications (PUAs) or intrusive advertisements.

Unwanted applications typically infiltrate computers without permission and, as well as causing redirects, deliver intrusive ads and record information.