Virus and Spyware Removal Guides, uninstall instructions

What is Tron?

Tron is a ransomware-type virus discovered by MalwareHunterTeam. Immediately after infiltration, Tron encrypts most stored data and appends filenames with the ".tron" extension (e.g., "sample.jpg" is renamed to "sample.jpg.tron").

Once files are encrypted, using them becomes impossible. Immediately after data encryption data, Tron opens a pop-up window with a ransom-demand message.

What is Ladon?

Discovered by MalwareHunterTeam, Ladon is a ransomware-type virus designed to infiltrate systems and encrypt most stored data.

During encryption, this malware adds the ".Ladon" extension to the name of each compromised file. For example, "sample.jpg" is renamed to "sample.jpg.Ladon". Encrypted files become unusable. Once encryption is complete, Ladon creates two files ("READ_ME.txt" and "READ_ME.html"), placing them on the computer desktop.

Why some pages ask for permission to show notifications?

"Allow Website Notifications" is a spam promotion method that has recently become popular amongst cyber criminals. It is a simple method used to promote various malicious sites. Research shows that users typically encounter "Allow Website Notifications" when they have potentially unwanted adware-type apps (PUAs) installed on their computers.

What is search.newtab-tvsearch.com?

search.newtab-tvsearch.com is another fake web search engine that supposedly enhances the browsing experience by generating improved results and providing quick access to various popular websites.

Judging on appearance alone, search.newtab-tvsearch.com may seem legitimate and useful, since it is very similar to Google, Yahoo, Bing, and other legitimate search engines. In fact, developers promote this website using a browser-hijacking app called FunkyTVTab, which typically infiltrates systems without permission.

In addition, be aware that search.newtab-tvsearch.com and FunkyTVTab record various user-system information relating to web browsing habits.

What is hp.myway.com?

BabyNameReady is a deceptive application developed by Mindspark Interactive Network (also known as IAC Applications). This application claims to provide the most popular names for newborns. Judging on appearance alone, BabyNameReady may seem legitimate and useful, however, this app is categorized as a potentially unwanted program (PUP) and a browser hijacker.

What is CYBERRESEARCHER?

First discovered by MalwareHunterTeam, CYBERRESEARCHER is high-risk ransomware based on an open-source ransomware project called Hidden Tear. Following successful infiltration, CYBERRESEARCHER encrypts most stored files using AES cryptography.

In addition, this malware appends filenames with the ".CYBERRESEARCHER" extension (e.g., "sample.jpg" is renamed to "sample.jpg.CYBERRESEARCHER"). Once files are encrypted, using them becomes impossible. Immediately after encryption, CYBERRESEARCHER creates an HTML file ("READ_IT.html") and places a copy in every existing folder.

What is search.funsocialtabsearch.com?

Identical to greatsocialsearch.com, mysafetabssearch.com, and many others, search.funsocialtabsearch.com is a fake web search engine that supposedly enhances the browsing experience by generating improved results and providing quick access to various popular websites.

Judging on appearance alone, search.funsocialtabsearch.com may seem legitimate and useful, however, developers promote this site using a browser-hijacking application called FunSocialTab. In addition, search.funsocialtabsearch.com and FunSocialTab are designed to gather sensitive data.

What kind of malware is Trojan Win32/Tiggre!rfn?

Trojan Win32/Tiggre!rfn is high-risk malware designed to perform a number of malicious tasks on victims' computers. It is also known as "Trojan.GenericKD.12694003" (by BitDefender) and "W32/Autoit.CGO!tr" (by Fortinet).

Trojan Win32/Tiggre!rfn is distributed in various ways, including spam emails (malicious attachments), fake Adobe Flash Player updaters, malicious websites, chain infections, and even Facebook messages.

What is Your Connection To This Site Is Not Private?

"Your Connection To This Site Is Not Private" is a fake error message displayed by various malicious websites. Research shows that in most cases users visit these sites inadvertently. They are redirected by potentially unwanted programs (PUPs) or intrusive ads delivered by other rogue sites.

Potentially unwanted programs are likely to infiltrate systems without users' consent and in addition to causing redirects, deliver intrusive advertisements, gather sensitive data, and even run unwanted background processes.

What is search.mediatvtabsearch.com?

search.mediatvtabsearch.com is a fake web search engine identical to funmediatabsearch.com, futuremediatabsearch.com, medianewpagesearch.com, and many others.

By offering improved results and quick access to popular websites, search.mediatvtabsearch.com attempts to give the impression of legitimacy, however, it is promoted using a browser-hijacking app called MediaTVTab, which typically infiltrates systems without permission.

Furthermore, search.mediatvtabsearch.com and MediaTVTab record information relating to web browsing activity.