Virus and Spyware Removal Guides, uninstall instructions

What is Oh My Tabs?

Oh My Tabs is a dubious application that supposedly provides various coupons, enables comparison shopping function, notifies of deals/discounts available on various online stores, and provides other similar features that supposedly save time and money while shopping online.

This might seem legitimate and useful functionality, however, Oh My Tabs is classed as a potentially unwanted program (PUP) and adware.

One of the main reasons for these negative associations is stealth installation without users' consent. After successful system infiltration, this app generates intrusive online advertisements and continually records various information relating to users' web browsing activity.

What is CryptoRoger?

CryptoRoger is a ransomware-type virus designed to stealthily infiltrate systems and stored files. To encrypt files, CryptoRoger uses an asymmetric AES-256 encryption algorithm. Therefore, public (encryption) and private (decryption) keys are generated during the process.

Furthermore, CryptoRoger appends the name of each encrypted file with .crptrgr (for example, sample.jpg is renamed to sample.jpg.crptrgr. This makes it straightforward to determine which files are encrypted.

What is CryptoShocker?

CryptoShocker is a ransomware that infiltrates computers and encrypts stored files. This virus appends the name of each encrypted file with a .locked extension. Types of targeted files include .jpeg, .doc, .mp3, and many others. After successfully encrypting data, CyptoShocker creates a shortcut (called ATTENTION.url) to its Tor website, placing it on victims' desktops.

What is BartCrypt?

BartCrypt (or 'Bart') is a ransomware-type virus distributed using malicious email attachments that appear as .zip files. The name of these files often varies (for example, pictures.zip, photos.zip, images.zip, and other words describe a graphical image).

Each zip file contains a .js (JavaScript) file that downloads and installs RockLoader malware, which, in turn, downloads BartCrypt ransomware.

Once infiltrated, BartCrypt immediately encrypts various file types (for example, .doc, .jpeg, .mp3, .mp4, etc.) stored on the victim's computer. This ransomware also changes the desktop wallpaper to recover.bmp and creates a recover.txt file, placing it in each folder holding encrypted files.

What is KratosCrypt?

KratosCrypt is a ransomware virus that stealthily infiltrates computers, encrypting files using an asymmetric AES encryption algorithm.

This virus appends the name of each encrypted file with a .kratos extension. Following successful encryption, KratosCrypt creates a README_ALL.html file and places it in each folder containing encrypted files. This file contains a ransom-demand message.

What is NegozI?

NegozI is a ransomware-type virus similar to Sanction and RemindMe. Once infiltrated, NegozI encrypts various files and adds .evil as an extension to the name of each encrypted file. The following files are then created: decrypt_your_files.txt and decrypt_your_files.html. These are placed in each folder containing encrypted files.

What is urban-search.com?

urban-search.com is a fake Internet search engine identical to searchonlineusa.com. Judging on appearance alone, urban-search.com may seem legitimate, however, developers promote this bogus website using dubious software 'installers' that modify Internet browser settings without users' permission.

Furthermore, this bogus site continually gathers various user/system information relating to users' web browsing activity.

What is Music Player?

Music Player is a potentially unwanted program (PUP) that supposedly allows users to play various audio formats. Initially, this app may seem legitimate and useful, however, research shows that Music Player often infiltrates systems without users’ permission.

Furthermore, this app continually gathers information regarding users' web browsing activity and delivers various intrusive online advertisements. For these reasons, Music Player is classed as adware.

What is searchonlineusa.com?

Searchonlineusa.com is a deceptive website that claims to improve the web browsing experience by generating the most relevant search results.

On initial inspection, searchonlineusa.com may seem to be a legitimate site, however, developers promote it using bogus software 'installers' that hijack Internet browsers and stealthily modify their settings. In addition, searchonlineusa.com records various user/system information relating to users' web browsing activity.

What is dozensearch.com?

Dozensearch.com is another fake Internet search engine identical to walasearch.com, newsearch123.com, yessearches.com, and a number of other dubious websites.

On initial inspection, dozensearch.com may seem legitimate, however, dozensearch.com is promoted using rogue software 'installers' designed to modify web browser settings without users' consent. In addition, this fake Internet search engine continually tracks Internet browsing activity.