Virus and Spyware Removal Guides, uninstall instructions

What is ScorpionLocker?

First discovered by malware security researcher, Jack, ScorpionLocker is a ransomware-type virus based on Hidden Tear. Immediately after infiltration, ScorpionLocker encrypts most stored files using AES cryptography and appends filenames with the ".ScorpionLocker" extension (e.g. "sample.jpg" is renamed to "sample.jpg.ScorpionLocker").

Once files are encrypted, using them becomes impossible. After encrypting files, ScorpionLocker opens a pop-up window containing a ransom-demand message.

What is go.paradiskus.com?

go.paradiskus.com is a deceptive site that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, go.paradiskus.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, many users believe that go.paradiskus.com is also legitimate. In fact, this site is promoted using a browser-hijacking application called PDF Pro 100. Furthermore, go.paradiskus.com and PDF Pro 100 continually record various data relating to users' Internet browsing activity.

What kind of malware is My Decryptor?

My Decryptor (also known as Magniber) is a ransomware-type virus discovered by malware security researcher, Michael Gillespie. This malware deletes shadow volum compies and encrypts stored files. Ir also appends an extension comprising seven random characters to filenames. For instance, "1.jpg" might be renamed to a filename such as "1.jpg.gkelhoh".

Afterwards, this malicious program creates a text file ("_HOW_TO_DECRYPT_MY_FILES_[random_characters]_.txt", "READ_ME_FOR_DECRYPT_[victim’s id].txt", or "READ_ME.txt"), which contains the ransom note.

My Decryptor is decryptable. In 2018 AhnLab security researchers released a free decryption tool for this ransomware. The decrypter can be downloaded from here.

What is home.searchpulse.net?

Home.searchpulse.net or (search.searchpulse.net) is another fake search engine that supposedly enhances the browsing experience by generating improved results. Judging on appearance alone, home.searchpulse.net may seem similar to Google, Yahoo, Bing, and other legitimate search engines.

Therefore, many users believe that home.searchpulse.net is also legitimate, however, developers promote this site using a browser-hijacking app called Search Pulse. In addition, home.searchpulse.net and Search Pulse continually record user-system information relating to web browsing activity.

What is mystartpage.net?

Identical to newtab.pro, mystartpage.net is a fake Internet search engine that supposedly enhances the web browsing experience by generating improved results and providing quick access to various popular sites.

Judging on appearance alone, mystartpage.net may seem legitimate and useful, however, developers promote this site via a browser-hijacking app called My Startpage, which is designed to modify browser options without permission. In addition, mystartpage.net and My Startpage record various sensitive information.

What is leadtrack.pro?

leadtrack.pro is a rogue site identical to allbest.mobi, securecloud-dl.com, newsquench.com, and many others, which redirects to various other rogue websites. Research shows that users often visit leadtrack.pro inadvertently - they are redirected by potentially unwanted programs (PUPs) or intrusive advertisements delivered by other malicious websites.

Furthermore, PUPs often infiltrate systems without permission and, as well as causing redirects, deliver intrusive advertisements, record sensitive information, and sometimes even run unwanted background processes.

What is Win Tonic?

Win Tonic is presented as an application that helps to remove various infections and optimize the system.

Initially, Win Tonic may appear completely appropriate, however, developers promote this potentially unwanted program (PUP) using fake error messages such as Your Windows Computer Is Infected With (4) Viruses! and scam pop-ups. For these reasons, Win Tonic is classed as a potentially unwanted program (PUP).

What is newtab.pro?

Developers present newtab.pro as a "top quality" web search engine that enhances the browsing experience by generating improved results and providing quick access to various popular websites.

Initially, newtab.pro may seem legitimate and useful, however, this site is promoted using browser-hijacking apps called New Tab PRO (also known as StartPage). Furthermore, this website continually records various data relating to users' Internet browsing habits.

What is GANDCRAB 2?

GANDCRAB 2 is an updated version of the high-risk ransomware-type virus called GANDCRAB. GANDCRAB 2 was first discovered by MalwareHunterTeam.

Once infiltrated, this malware encrypts most stored files and adds the ".CRAB" extension to the name of each compromised file. From this point, files become unusable. After successfully encrypting files, GANDCRAB 2 creates a text file ("CRAB-DECRYPT.txt") and places a copy in each existing folder.

What is We Have Detected A Trojan Virus?

"We Have Detected A Trojan Virus" is a fake error message displayed by a deceptive website. Research shows that users are redirected to the site by various potentially unwanted programs (PUPs) that infiltrate systems without permission.

As well as causing redirects, these rogue applications display intrusive online advertisements and continually record various user-system information.