Virus and Spyware Removal Guides, uninstall instructions

What kind of extension is save tabs?

save tabs is the name of a browser extension that has the properties of adware - it generates annoying advertisements. Our team discovered save tabs while inspecting deceptive websites. In addition to showing ads, save tabs can read and change data on visited websites. Its creators described it as an app that saves tabs in a window for later use.

What is Wyvern?

First discovered by malware security researcher, Michael Gillespie, Wyvern is a variant of a high-risk ransomware-type virus called BTCWare. Following successful infiltration, Wyvern encrypts stored data and appends the ".[email]-id-id.wyvern" extension to the name of each compromised file.

For example, "sample.jpg" might be renamed to a filename such as "sample.jpg.[decryptorx@cock.li]-id-2DDD9F68.wyvern" (you can see the full list of emails here). Following successful infiltration, Wyvern opens a pop-up window with a ransom-demand message.

What is hp.myway.com?

Developed by Mindspark Interactive Network (now known as IAC Applications), GetFreeGifs is a deceptive application that claims to provide access to various GIF images. Judging on appearance alone, GetFreeGifs may seem legitimate and useful, however, this app can infiltrate systems without consent.

Furthermore, it stealthily modifies web browser options without permission. For these reasons, GetFreeGifs is categorized as a potentially unwanted program (PUP) and a browser hijacker.

What is Opurie?

A new "family" of rogue adware-type extensions has recently been discovered. Developers promote a rogue extension via a malicious website (after opening the website, victims are presented with a pop-up window asking them to install a browser extension).

At time of research, the adware was called Opurie. Research shows, however, that cyber criminals change this name daily. Once infiltrated, Opurie causes unwanted browser redirects and displays intrusive advertisements. There's also a high probability that this extension will track users' web browsing activity.

What is Unusual activity?

Displayed by a malicious website, "The problem is caused by an unusual activity performed on this machine" is a fake pop-up error message claiming that the system is infected. Research shows that users often visit this site inadvertently - they are redirected by potentially unwanted programs (PUPs).

These rogue applications infiltrate systems without permission or trick users to install by falsely claiming to provide various "useful features". As well as causing redirects, PUPs track browsing activity and generate intrusive online advertisements.

What is hp.myway.com?

FileSendSuite is a deceptive application developed by Mindspark Interactive Network (now known as IAC Applications). FileSendSuite claims to enhance Internet browsing by easing the file sharing process. Therefore, many users believe that this app is legitimate and useful.

In fact, FileSendSuite often infiltrates systems without permission. Furthermore, it stealthily modifies web browser options. For these reasons, FileSendSuite is categorized as a potentially unwanted program (PUP) and a browser hijacker.

What is aptitudemedia.co?

Identical to eatyellowmango.com, securetrka.com, codeadnetwork.com, and many others, aptitudemedia.co is a rogue site that redirects to other suspicious websites.

Research shows that users often visit aptitudemedia.co inadvertently - they are redirected by various potentially unwanted programs (PUPs) that infiltrate systems without consent, or are tricked to install by false claims of providing various "useful features". As well as causing redirects, PUPs deliver intrusive advertisements and continually record various user-system data.

What is SharkMix?

First discovered by malware security researcher, Lawrence Abrams, SharkMix is a new variant of high-risk ransomware called CryptoMix. Once infiltrated, SharkMix encrypts stored files and renames them using the "[32_random_letters_and_digits].SHARK" pattern.

For instance, "sample.jpg" might be renamed to a filename such as "64A3EFC04500FECA289FEEF4033F5CF56.SHARK". Following successful encryption, SharkMix creates a text file ("_HELP_INSTRUCTION.TXT") and places it in each existing folder.

What is Webunstop?

Identical to VidSqaure, Unstopaccess, Un-stop, and a number of others, Webunstop is a deceptive application that supposedly allows users to access websites blocked in their own countries. Initially, this functionality may appear legitimate and useful, however, Webunstop is classed as a potentially unwanted program (PUP) and adware.

There are three main reasons for these negative associations: 1) stealth installation without consent; 2) display of intrusive online advertisements, and; 3) tracking of users' Internet browsing activity.

What is Bud?

Bud is a ransomware-type virus discovered by malware security researcher, S!Ri. Judging on appearance, Bud may seem similar to another high-risk ransomware virus called Jigsaw. Therefore, there is a high probability that Bud is a new variant of this malware.

Once infiltrated, Bud encrypts stored data. This malware appends filenames with the ".bud" extension (for example, "sample.jpg" is renamed to "sample.jpg.bud"). Once files are encrypted, the ransomware virus opens a pop-up window containing a ransom-demand message.