Virus and Spyware Removal Guides, uninstall instructions

What is a fake "Adobe Flash Player Update"?

"Adobe Flash Player Update" (macOS users should read this article) is a deceptive pop-up displayed by malicious websites, which are usually visited inadvertently. Users can be redirected to such webpages by potentially unwanted adware-type applications (PUAs).

Scans like "Adobe Flash Player Update" are often used to promote fake anti-virus tools, adware, browser hijackers, and other PUAs. Furthermore, unwanted applications are known to deliver intrusive advertisements and collect sensitive user/system information.

What is search.searchfstn3.com?

According to the developers, Fast Speed Test Now is a legitimate application that supposedly allows users to test their Internet performance.

This functionality may appear legitimate and useful, however, Fast Speed Test Now is categorized as a potentially unwanted program (PUP) and a browser hijacker. There are three main reasons for these negative associations: 1) stealth installation without users' consent; 2) promotion of a fake web search engine [search.searchfstn3.com], and; 3) information tracking.

What is surfnav.com?

Identical to okaytab.com, surfnav.com is a fake web search engine that supposedly enhances the browsing experience by generating improved results and providing quick access to dozens of popular websites.

Judging on appearance alone, surfnav.com may seem legitimate and useful, however, developers promote this site using browser-hijacking download/installation set-ups. Furthermore, surfnav.com gathers information relating to web browsing activity.

What is okaytab.com?

According to the developers, okaytab.com is a legitimate web search engine that generates improved results and provides quick access to dozens of popular websites.

Initially, this site may seem legitimate, however, developers promote it via browser-hijacking set-ups designed to modify browser options without users’ permission. Furthermore, okaytab.com continually records various information relating to web browsing habits.

What is GoGameGo?

GoGameGo (a.k.a. Go Game Go) is a deceptive browser toolbar claiming to provide access to various games - "Install GoGameGo and access all your favorite Games in one click!" This plug-in may seem legitimate, however, GoGameGo often installs without users' permission.

Furthermore, this dubious browser add-on is designed to modify browser settings and continually monitors browsing activity.

What is ScorpionLocker?

First discovered by malware security researcher, Jack, ScorpionLocker is a ransomware-type virus based on Hidden Tear. Immediately after infiltration, ScorpionLocker encrypts most stored files using AES cryptography and appends filenames with the ".ScorpionLocker" extension (e.g. "sample.jpg" is renamed to "sample.jpg.ScorpionLocker").

Once files are encrypted, using them becomes impossible. After encrypting files, ScorpionLocker opens a pop-up window containing a ransom-demand message.

What is go.paradiskus.com?

go.paradiskus.com is a deceptive site that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, go.paradiskus.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, many users believe that go.paradiskus.com is also legitimate. In fact, this site is promoted using a browser-hijacking application called PDF Pro 100. Furthermore, go.paradiskus.com and PDF Pro 100 continually record various data relating to users' Internet browsing activity.

What kind of malware is My Decryptor?

My Decryptor (also known as Magniber) is a ransomware-type virus discovered by malware security researcher, Michael Gillespie. This malware deletes shadow volum compies and encrypts stored files. Ir also appends an extension comprising seven random characters to filenames. For instance, "1.jpg" might be renamed to a filename such as "1.jpg.gkelhoh".

Afterwards, this malicious program creates a text file ("_HOW_TO_DECRYPT_MY_FILES_[random_characters]_.txt", "READ_ME_FOR_DECRYPT_[victim’s id].txt", or "READ_ME.txt"), which contains the ransom note.

My Decryptor is decryptable. In 2018 AhnLab security researchers released a free decryption tool for this ransomware. The decrypter can be downloaded from here.

What is home.searchpulse.net?

Home.searchpulse.net or (search.searchpulse.net) is another fake search engine that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, home.searchpulse.net may seem similar to Google, Yahoo, Bing, and other legitimate search engines.

Therefore, many users believe that home.searchpulse.net is also legitimate, however, developers promote this site using a browser-hijacking app called Search Pulse. In addition, home.searchpulse.net and Search Pulse continually record user-system information relating to web browsing activity.

What is mystartpage.net?

Identical to newtab.pro, mystartpage.net is a fake Internet search engine that supposedly enhances the web browsing experience by generating improved results and providing quick access to various popular sites.

Judging on appearance alone, mystartpage.net may seem legitimate and useful, however, developers promote this site via a browser-hijacking app called My Startpage, which is designed to modify browser options without permission. In addition, mystartpage.net and My Startpage record various sensitive information.