Virus and Spyware Removal Guides, uninstall instructions

What is feed.moviegoat.com?

According to its developers, the Movie Goat application enables access to the latest movie-related content (trailers, news, upcoming movies, awards, and so on) directly from the browser.

These features may seem useful, and Movie Goat may seem legitimate, but this app is categorized as a potentially unwanted application (PUA) - a browser hijacker to be more precise. It is installed without users' knowledge, promotes a fake search engine, and collects data.

What is pog0da.com?

pog0da.com is a rogue website designed to redirect users to other untrustworthy sites and trick them into allowing website notifications.

Users generally visit this site inadvertently - potentially unwanted applications (PUAs) force redirects to it. In most cases, users install these applications unintentionally. In addition to redirects, most PUAs deliver ads and collect data. Some other examples of very similar (or even identical) rogue websites are adx1.com, adventurefeeds.com, and adsplex.com.

What is EMAN?

First discovered by malware security researcher, Rony, EMAN is a new variant of a ransomware-type virus called Matrix. After successfully infiltrating the system, EMAN encrypts most stored data using the AES-128 and RSA-2048 encryption algorithms. During encryption, EMAN renames files using the "[EncodeMan@qq.com].[gibberish].EMAN" filename pattern.

For example, "sample.jpg" might be renamed to a filename such as "[EncodeMan@qq.com].jr9nSe87-BCe8leOY.EMAN". Once encrypted, data immediately becomes unusable and indistinguishable.

In addition, EMAN changes the desktop wallpaper and creates an .rtf file ("#README_EMAN#.rtf"), placing a copy on the desktop. An updated variant of this ransomware uses the ".EMAN50" extension for encrypted files.

What is WinZip Driver Updater?

WinZip Driver Updater is a deceptive app that claims to renew outdated drivers. This functionality may seem legitimate and useful, however, developers proliferate this app using a deceptive marketing method called "bundling". Therefore, WinZip Driver Updater often infiltrates systems without consent and is categorized as a potentially unwanted application (PUA).

What is TV Chrome?

TV Chrome that supposedly allows users to watch thousands of TV channels. According to its developers, this app is powered by the largest and most up-to-date database. Even if it seems legitimate and useful, TV Chrome is categorized as potentially unwanted, adware-type application (PUA). 

TV Chrome is installed without users' knowledge, delivers advertisements, collects data, and promotes so-called "premium services" (such as FilmOn).

What is NetMeterX?

NetMeterX is a rogue application that supposedly allows users to monitor Internet use and performance. Its appearance suggests that NetMeterX is a legitimate and useful application, however, it is categorized as adware and a potentially unwanted application (PUA).

There are three main reasons for these negative associations: 1) tracking of browsing activity; 2) display of intrusive advertisements, and; 3) infiltration without users' consent.

What is go.adicococo.com?

Identical to go.searchgenieo.com, go.correcticko.com, go.bonanzoro.com, and a number of others, go.go.adicococo.com is a fake search engine. According to developers, it offers an enhanced browsing experience with improved results.

This may seem to be a legitimate site and similar to other well-known search engines, however, developers proliferate go.go.adicococo.com using browser-hijacking download/installation files that, once executed, make changes to browser settings without users' consent. Furthermore, these apps collect data relating to online browsing habits.

What is ZanyBrainyGames?

According to the developers, ZanyBrainyGames provides easy access to thousands of free online games. It is promoted as a legitimate and useful application, but is categorized as an adware-type application - specifically, a potentially unwanted application (PUA). ZanyBrainyGames infiltrates systems without users' knowledge, delivers ads, and collects data.

What is Dharma-Btc?

Discovered by malware security researcher, Jakub Kroustek, Dharma-Btc is a new variant of a high-risk ransomware called Dharma. Once infiltrated, Dharma-Btc immediately encrypts most stored data and appends the ".id-[victim's_ID].[btc@fros.cc].btc" extension to each encrypted file.

For instance, "sample.jpg" is renamed to a filename such as "sample.jpg.id-1E857D00.[btc@fros.cc].btc", ".[raphaeldupon@aol.com].btc" or ".[writehere@qq.com].btc".

Encrypted data immediately becomes unusable. As well as encryption, Dharma-Btc also opens a pop-up window and generate a text file ("FILES ENCRYPTED.txt"), placing a copy in every existing folder.

What is go.genieonewsapp.com?

go.genieonewsapp.com is a fake search engine identical to go.searchgenieo.com, go.deepteep.com, and many others. By offering improved results, this site attempts to give the impression of legitimacy, however, it is promoted using rogue download/installation setups designed to modify browser options without permission.

Furthermore, go.genieonewsapp.com records various user-system information relating to browsing activity.