Virus and Spyware Removal Guides, uninstall instructions

What is search.searchpcst.com?

search.searchpcst.com is another fake search engine promoted by the PC Speed Test (also known as My Speed Test) browser hijacker app that is installed on web browsers as an extension, add-on, or a separate program on the operating system. The site offers improved search results and an internet performance test tool called OpenSpeedTest.

What is search25.co?

search25.co is a search engine developed by a company that claims to be helping owners of websites and web networks to generate revenue.

The site is similar to other popular and well-known search engines such as Google, Yahoo, Bing, etc. It claims to be a legitimate search engine, however, most browser hijacker developers claim to be legitimate and offer search engines that supposedly provide more relevant and improved results.

What is search.searchm3p.com?

The search.searchm3p.com search engine is promoted by the Package Tracking Pro browser hijacker app. The app offers an enhanced search engine and direct access to package tracking on company websites that provide delivery services (such as usps.com, ups.com, fedex.com, and dhl.com) direct from the new tab page/search.searchm3p.com search engine.

What is yowwinnerprize.com?

yowwinnerprize.com is a deceptive website claiming that the user is "today's lucky visitor" and has a chance to win a prize ($1000 gift card, iPhone X, and other "amazing deals").

Research shows that many visitors come to yowwinnerprize.com inadvertently - they are redirected by potentially unwanted programs (PUPs) or intrusive advertisements delivered by other rogue sites. Most PUPs infiltrate systems without users' permission, deliver intrusive advertisements, and gather various sensitive information.

What is AV64N.EXE?

"AV64N.EXE" is a process name that some users notice in Windows Task Manger. This process may seem suspicious, and indeed "AV64N.EXE" indicates that your system is infected with a cryptocurrency-mining trojan. It is a name of an executable (application) that misuses system resources to mine cryptocurrencies.

What is Hermes 2.1?

Hermes 2.1 is an updated version of a ransomware-type virus called Hermes. Developers proliferate this malware by using spam email campaigns. Once infiltrated, Hermes 2.1 encrypts most stored data, thereby making it unusable. To achieve this, Hermes 2.1 employs a RSA-2048 encryption algorithm. 

Note, however, that unlike other ransomware, Hermes 2.1 does not append any extension or rename compromised files in any way. After successfully encrypting data, this virus generates an HTML file ("DECRYPT_INFORMATION.HTML") and places a copy in each existing folder.

What is blueseek.com?

As with greatdexchange.com, cobalten.com, dentially.info, and many others, blueseek.com is a rogue website that redirects users to various other untrustworthy and potentially malicious sites. In most cases, users visit these websites inadvertently - they are redirected by potentially unwanted programs (PUPs) or through intrusive advertisements.

As a rule, these PUPs are also installed inadvertently or without users' permission. Once installed, they start to cause redirects (in the same way as the blueseek.com website). They also collect sensitive information and deliver intrusive ads.

What is Armage?

Discovered by malware security researcher, Leo, Armage is a ransomware-type virus that stealthily infiltrates the system and encrypts most stored files using AES-256 cryptography.

During encryption, this malware appends filenames with the ".armage" extension. For instance, "sample.jpg" is renamed to "sample.jpg.armage". Once files are encrypted, using them becomes impossible. Immediately after encryption, Armage generates a text file ("Notice.txt ") and places a copy in every existing folder.

What is search.htheweathercenter.co?

search.htheweathercenter.co is a fake search engine installed on web browsers through The Weather Center, a browser hijacker app developed by Polarity Technologies. This is a search engine that offers an enhanced browsing experience and quick access to weather forecast websites such as Weather Alerts, National Weather, and Pollen Reports directly from a new browser tab.

What is search.hlivetvnow.co?

search.hlivetvnow.co is a fake search engine installed using the Live TV Now browser hijacker app. The app offers a search engine and quick access to various television content via tv-related websites such as ESPN GO, Hulu, and Netflix.