Virus and Spyware Removal Guides, uninstall instructions

What is *.cryptolocker?

*.cryptolocker is ransomware-type malware that claims to be a high-risk virus called CryptoLocker. *.cryptolocker was first discovered by Fabian Wosar.

Following infiltration, *.cryptolocker encrypts files using RSA-2048 cryptography. In addition, this malware appends the ".cryptolocker" extension to the name of each file. For instance, "sample.jpg" is renamed to "sample.jpg.cryptolocker". Following successful encryption, *.cryptolocker locks the computer screen and displays a ransom-demand message.

What kind of malware is DeriaLock?

DeriaLock is a ransomware-type virus discovered by Karsten Hahn. There are two variants of this malware. The first locks the screen and displays a ransom-demand message. The second encrypts files and appends the ".deria" extension to the name of each compromised file (e.g., "sample.jpg" is renamed to "sample.jpg.deria"). A pop-up window with a ransom-demand message is then displayed.

What is searchespro.com?

Developed by ClientConnect Ltd., searchespro.com is a fake search engine that supposedly enhances the web browsing experience by generating improved search results. Judging on appearance alone, searchespro.com barely differs from popular legitimate search engines such as Google, Bing, Yahoo, and many others.

Therefore, many users believe that searchespro.com is also legitimate. In fact, ClientConnect Ltd. promotes this site via deceptive software downloaders and/or installers designed to modify web browser options without permission. In addition, searchespro.com records information relating to Internet browsing activity.

What is search.pingclash.com?

Identical to search.goldraiven.com, search.smokycap.com, and search.beardpond.com, search.pingclash.com is a fake Internet search engine that falsely claims to generate improved search results. Judging on appearance alone, search.pingclash.com may seem very similar to Bing, Yahoo, Google, and other popular search engines.

Therefore, many users believe that this site is also legitimate and useful. In fact, search.pingclash.com gathers information relating to Internet browsing activity. Furthermore, developers promote this rogue site via deceptive download/installation set-ups that hijack web browsers and modify various options without users’ permission.

What is hp.myway.com?

HomeworkSimplified is a deceptive application that supposedly provides significant information relating to various school subjects (history, English, math, science, etc.). On initial inspection, this functionality may seem legitimate and useful, however, HomeworkSimplified is categorized as a potentially unwanted program (PUP) and a browser hijacker.

There are three main reasons for these negative associations: 1) installation without users' consent; 2) modification of browser settings, and; 3) tracking of users' Internet browsing activity.

What is search.plasticumbrella.com?

search.plasticumbrella.com is another fake Internet search engine claiming to enhance the Internet browsing experience by generating improved search results.

These false claims often trick users into believing that search.plasticumbrella.com is legitimate and useful, however, this site continually tracks Internet browsing activity by gathering various user/system information.

In addition, developers promote search.plasticumbrella.com via deceptive download/installation set-ups designed to modify web browser settings without users' consent.

What is Free-Freedom?

Free-Freedom is a ransomware-type virus discovered by Lawrence Abrams. This malware claims to encrypt files, however, this is incorrect. Free-Freedom ransomware corrupts file permissions, thereby preventing access to them. The virus displays a pop-up that contains a ransom-demand message.

Free-Freedom's developer have released an updated version called Roga that encrypts files and appends the ".madebyadam" extension to the name of each encrypted file (e.g., "sample.jpg" is renamed to "sample.jpg.madebyadam"). Once files are encrypted, a pop-up containing a ransom-demand message is displayed.

What is search.cateorg.com?

search.cateorg.com is a fake Internet search engine identical to search.fleecompliment.com, search.arcahol.com, search.bagonrock.com, and many others. 

By offering improved search results, search.cateorg.com attempts to give the impression of legitimacy, however, this site is promoted via rogue app downloaders/installers that hijack Internet browsers and modify various options without direct user permission. In addition, search.cateorg.com tracks Internet browsing activity by gathering various user/system data.

What is Guster?

Guster is a ransomware-type virus that encrypts files and appends associated filenames with the ".locked" extension. For example, "sample.jpg" is renamed to "sample.jpg.locked". This malware was first discovered by Lawrence Abrams. Following successful encryption, Guster locks the computer screen and displays a ransom-demand message.

What is search.fragilepottery.com?

search.fragilepottery.com is a fake Internet search engine that supposedly generates improved search results, thereby enhancing the Internet browsing experience. Judging on appearance alone, this website barely differs from Google, Bing, Yahoo, and other similar legitimate search engines.

Therefore, many users believe that search.fragilepottery.com is also legitimate. In fact, this site records information relating to Internet browsing activity. In addition, search.fragilepottery.com is promoted using deceptive app download/installation set-ups that hijack web browsers and modify various options without consent.