Virus and Spyware Removal Guides, uninstall instructions

What is Google Chrome Critical ERROR?

"Google Chrome Critical ERROR" is a fake error message similar to System Support Alert, Your Connection To This Site Is Not Private, This Build Of Windows 10 Is Corrupted, and many others. 

The error is displayed by various malicious sites that users often visit inadvertently - they are redirected by potentially unwanted programs (PUPs) or intrusive ads delivered by other malicious sites.

Research shows that potentially unwanted programs typically infiltrate systems without permission and, as well as causing redirects, generate intrusive ads, record sensitive information and, sometimes, run unwanted background processes.

What is Satyr?

Recently discovered by Michael Gillespie, Satyr is a ransomware-type virus similar to Spartacus. Once infiltrated, Satyr encrypts most stored files using AES and RSA cryptographies.

In addition, this malware appends filenames with the ".Satyr" extension (e.g., "sample.jpg" is renamed to "sample.jpg.Satyr"). Encrypted files become unusable. Satyr then opens a pop-up window and creates a text file ("READ ME.txt"), placing it on the desktop.

What is "NATIONAL SECURITY BUREAU"?

NATIONAL SECURITY BUREAU is malware designed to lock the computer screen and display a message stating that the system, together with a number of files, has been blocked, since 'pirated software' was found on the computer. Users are encouraged to pay a fine.

This malware infection is very similar to FBI Cybercrime Division Virus, FBI Virus - Your Computer Has Been Locked, and many others.

What is XTBL?

Recently discovered by MalwareHunterTeam, XTBL is ransomware-type virus designed to stealthily infiltrate the system and encrypt most stored files. In doing so, this malware adds the ".xtbl" appendix to the name of each encrypted file. Once files are encrypted, using them becomes impossible.

Immediately after encryption, XTBL generates a text file ("IF YOU WANT TO GET ALL YOUR FILES BACK, PLEASE READ THIS.TXT") and places a copy in each existing directory. This file contains a ransom-demand message.

What is Your Battery Is Damaged By Viruses?

"Your Battery Is Damaged By Viruses" is another fake error displayed by various deceptive websites. Research shows that many users visit these sites inadvertently - they are redirected by intrusive advertisements (displayed by other malicious sites) or potentially unwanted programs (PUPs) that infiltrate systems without permission.

As well as causing redirects, PUPs deliver intrusive advertisements, gather sensitive information, and even run unwanted processes in the background.

What is Spartacus?

Spartacus is a ransomware-type virus recently discovered by malware security researcher, Bart. This malware is designed to encrypt most stored files and append filenames with the ".[MastersRecovery@protonmail.com].Spartacus" extension (e.g., "sample.jpg" is renamed to "sample.jpg.[MastersRecovery@protonmail.com].Spartacus").

Once files are encrypted, using them becomes impossible. Spartacus is also designed to delete Shadow Volume Copies. After these actions, Spartacus opens a pop-up window and creates a text file ("READ ME.txt"), placing a copy in every existing folder. Updated variants of this ransomware use ".SF" extension for encrypted files.

What is search.smartmediatabsearch.com?

Identical to newtab-tvsearch.com, funsocialtabsearch.com, mediatvtabsearch.com, and many others, search.smartmediatabsearch.com is a fake web search engine that claims to enhance the browsing experience by generating improved results and providing quick access to various popular websites (e.g., Facebook, YouTube, Instagram, Netflix, etc.).

Judging on appearance alone, search.smartmediatabsearch.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines. Therefore, many users believe that search.smartmediatabsearch.com is also legitimate and useful. In fact, developers promote this site using a browser-hijacking application called SmartMediaTab.

Note that search.smartmediatabsearch.com and SmartMediaTab record information relating to web browsing activity.

What is SkyFile?

SkyFile is a ransomware/trojan virus recently discovered by MalwareHunterTeam. Immediately after infiltration, SkyFile encrypts most stored files and renames them using the "[random_letters].IKS.sky" pattern. Once files are encrypted, using and distinguishing them becomes impossible.

After successful encryption, SkyFile opens a pop-up window (or 'decryption tool') and creates a text file ("HOW TO DECRYPT.txt"), placing it on the desktop.

What is System Support Alert?

"System Support Alert" is a fake error message displayed by a number of malicious sites. It is very similar to Dangerous Try To Get Access To Your Personal Logins, This Build Of Windows 10 Is Corrupted, YOUR COMPUTER HAS BEEN BLOCKED, and many others.

Users often visit these websites inadvertently - they are redirected by potentially unwanted programs (PUPs) or intrusive advertisements displayed by other malicious sites.

Research results show that PUPs typically infiltrate the system without a permission and, as well as causing redirects, deliver intrusive advertisements, gather sensitive information, and (sometimes) run unwanted background processes.

What is chumsearch.com?

chumsearch.com is a fake Internet search engine that supposedly enhances the Internet browsing experience by generating improved search results.

These claims often trick users into believing that chumsearch.com is a legitimate website, however, developers promote this website using deceptive software downloaders/installers that modify web browser settings without users' consent. Furthermore, chumsearch.com collects various information relating to Internet browsing activity.