Virus and Spyware Removal Guides, uninstall instructions

What is mysearch24.com?

According to the developers, mysearch24.com significantly enhances the Internet browsing experience by generating improved search results.

Judging on appearance alone, mysearch24.com may appear legitimate and useful, however, this website is promoted via rogue download/installation set-ups that hijack web browsers and stealthily modify various options. Furthermore, it continually records various information relating to users' Internet browsing activity.

What is hp.myway.com?

Gifables is a deceptive application that falsely claims to provide access to hundreds of various GIF images. On initial inspection, Gifables may appear legitimate and useful, however, this app often infiltrates systems without consent.

In addition, it stealthily modifies web browser settings and continually records information relating to users' Internet browsing activity. For these reasons, Gifables is categorized as a potentially unwanted program (PUP) and a browser hijacker.

What is vCrypt?

Discovered by MalwareHunterTeam, vCrypt is a ransomware-type virus that stealthily infiltrates systems and encrypts various data using RSA-2048 cryptography. During encryption, vCrypt appends filenames with the ".xcrypt", ".bCrypt", ".vCrypt1", or ".aCrypt" extension.

For example, "sample.jpg" is renamed to "sample.jpg.vCrypt1" or "sample.jpg.aCrypt". Following successful encryption, vCrypt creates a text file ("КАК_РАСШИФРОВАТЬ_ФАЙЛЫ.txt"), placing it in each folder containing encrypted files.

What is yokeline.com?

Developers present yokeline.com as an Internet search engine that generates improved results and, therefore, enhances the browsing experience. Judging on appearance alone, yokeline.com may seem similar to Google, Bing, Yahoo, and other legitimate search engines.

Therefore, many users believe that yokeline.com is also legitimate and useful, however, this website continually records various information relating to browsing activity. In addition, developers promote yokeline.com via rogue download and installation set-ups that hijack browser settings without permission.

What is search.eshield.com?

eShield is a rogue browser add-on that claims to offer protection when searching the Internet.

By using a deceptive software marketing method called 'bundling' (stealth installation of additional programs together with the chosen software), this browser hijacking application installs on Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' consent.

Following successful infiltration, the browser homepage, new tab URL, and default search engine settings are assigned to search.eshield.com. In addition, search.eshield.com installs together with several other applications called 'helper objects'.

These applications prevent users from reverting these changes. search.eshield.com is also distributed using deceptive 'installers' that trick unsuspecting users into installing this rogue application together with the chosen software.

What is hp.myway.com?

Developed by Mindspark Interactive Network, MyDIYGenie is a deceptive application that supposedly provides access to hundreds of tutorials on a wide variety of subjects. Judging on appearance alone, MyDIYGenie may appear legitimate and useful, however, this app is categorized as a potentially unwanted program (PUP) and a browser hijacker.

There are three main reasons for these negative associations: 1) installation without consent; 2) stealth modification of web browser settings, and; 3) tracking of users' Internet browsing activity.

What is hp.myway.com?

OnlineWorkSuite is a deceptive application that supposedly allows users to edit various documents, e.g. spreadsheets, word documents, presentations, etc. Judging on appearance alone, OnlineWorkSuite may seem legitimate and useful, however, this rogue software often infiltrates systems without permission.

In addition, it stealthily modifies web browser settings and continually records information relating to users' Internet browsing activity. For these reasons, OnlineWorkSuite is categorized as a potentially unwanted application (PUA) and a browser hijacker.

What is go.mail.ru?

go.mail.ru (or inline.go.mail.ru) is a deceptive website claiming to be a legitimate Internet search engine that generates improved search results. Some users believe that go.mail.ru is legitimate and useful, however, this site continually monitors web browsing activity.

Furthermore, developers promote it by employing deceptive software download/installation set-ups designed to modify browser options without permission.

What is Cry9?

Cry9 is an updated version of a ransomware-type virus called CryptON. Criminals proliferate this malware via RDP (remote desktop services) brute force attacks, which allow them to hijack computers and execute the malicious ransomware installer. Following infiltration, Cry9 encrypts various files using RSA and AES cryptographies.

During encryption, it appends filenames with one of the extensions listed below. Following successful encryption, this rogue software changes the desktop wallpaper and creates an HTML file ("### DECRYPT MY FILES ###.html"), placing it in each folder containing encrypted files.

What is onclkds.com?

Identical to Wizzcaster, onclkds.com is an advertising network used by a variety of deceptive apps that often claim to provide a variety of 'useful features'. By delivering these promises, rogue apps attempt to give the impression of legitimacy, however, they often infiltrate systems without users' consent.

Furthermore, they deliver intrusive online advertisements and collect personal data. Ads that employ the onclkds.com network are categorized as potentially unwanted programs (PUPs) and adware.