Virus and Spyware Removal Guides, uninstall instructions

What is jCandy?

Discovered by malware security researcher, JAMESWT, jCandy is a ransomware-type virus designed to stealthily infiltrate the system and encrypt most stored data. During encryption, jCandy appends filenames with the ".Locked-jCandy" extension (e.g., "sample.jpg" is renamed to "sample.jpg.Locked-jCandy").

From this point, files become unusable. Immediately after encryption, jCandy opens a pop-up windows and places a text file ("JCANDY_INSTRUCTIONS.txt") on the desktop.

What is search.cuttinsledge.com?

search.cuttinsledge.com is a fake Internet search engine identical to search.ishimotto.com, search.romandos.com, search.yofitofix.com, and many others. According to the developers, search.cuttinsledge.com significantly enhances users' Internet browsing experience by generating the most relevant search results.

Furthermore, its appearance barely differs from Google, Bing, Yahoo, and other legitimate search engines.

For these reasons, many users believe that search.cuttinsledge.com is also legitimate and useful. In fact, developers promote this site via browser-hijacking download/installation set-ups that modify browser settings without permission. In addition, search.cuttinsledge.com continually records various information.

What is Cyber Police?

First discovered by malware security researcher, Lawrence Abrams, and Based on an open-source ransomware project called Hidden Tear, Cyber Police is a virus that stealthily infiltrates systems and encrypts files using AES cryptography. During encryption, Cyber Police adds the ".locked" extension to the name of each encrypted file.

For example "sample.jpg" is renamed to "sample.jpg.locked". Following successful encryption, Cyber Police changes the desktop wallpaper and places the "READ_IT.txt" file on the desktop.

What is Gordon Deals?

According to the developers, Gordon Deals saves time and money (when shopping online) by providing various coupons and notifying users about special deals/discounts available at online shops.

Judging on appearance alone, Gordon Deals may seem legitimate and useful, however, this app is categorized as a potentially unwanted program (PUP) and adware. There are three main reasons for these negative associations: 1) stealth installation without users' consent; 2) display of 'malvertising' ads, and; 3) tracking of information.

What is newtab.today?

According to the developers, newtab.today is a "high-quality" Internet search engine that supposedly enhances the web browsing experience by generating improved results and providing quick access to various popular websites (Facebook, YouTube, eBay, Twitter, etc.).

On initial inspection, newtab.today may seem legitimate and useful, however, this site is promoted using rogue download/installation set-ups that modify browser settings without consent (browser hijackers). Furthermore, newtab.today continually records various information (mostly, relating to users' Internet browsing activity).

What is OfferssDirect?

OfferssDirect is a deceptive application that supposedly provides various shopping coupons and notifies users of special deals/discounts available in various online shops. In doing so, OfferssDirect supposedly saves time and money. Many users believe that this app is legitimate and useful, however, it is classed as a potentially unwanted program (PUP) and adware.

There are three main reasons for these negative associations: 1) stealth installation without users' consent; 2) display of malicious advertisements, and; 3) tracking of various information (mostly relating to web browsing habits).

What kind of malware is Jhash?

Discovered by MalwareHunterTeam, Jhash is a virus based on an open-source ransomware project called Hidden Tear.

Once infiltrated, Jhash encrypts most stored data using AES cryptography and adds the ".locky" extension to the name of each compromised file. Following successful encryption, Jhash creates a text file ("Leeme_Nota_de_Rescate.txt"), placing it on the desktop, and changes the desktop wallpaper.

What is search.movies-tab.com?

Movies Tab is a deceptive application that falsely claims to allow users to watch various movies online free of charge. Initially, search.movies-tab.com may appear legitimate and useful, however, this potentially unwanted program (PUP) often infiltrates systems without permission and collects various user-system information.

Movies Tab is also categorized as a browser hijacker - a form of unwanted software that modifies web browser options without permission.

What is "Windows Defender Prevented An Unrecognized Software"?

"Windows Defender Prevented An Unrecognized Software" is a fake error discovered by MalwareHunterTeam. This error message claims that Windows Defender has detected suspicious activity/software on the system. Furthermore, "Windows Defender Prevented An Unrecognized Software" locks the computer screen, after which users are unable to take any further action.

What is search.flagbeg.com?

search.flagbeg.com is a fake Internet search engine identical to search.ishimotto.com, search.pensirot.com, search.yofitofix.com, and many others. 

By offering improved search results, search.flagbeg.com attempts to give the impression of legitimacy, however, this website is promoted using rogue downloaders/installers that modify browser options without permission. Furthermore, search.flagbeg.com continually records various information relating to users' Internet browsing experience.