Virus and Spyware Removal Guides, uninstall instructions

What is installCore?

According to the developers, installCore helps users develop a proper installer for their software - "The installCore white label Download Manager supports your entire software catalog. To ensure an optimal user experience, our localization features help make sure their installers "speak" to them in the right language, and download acceleration technology means the process takes about a third less of their time.".

While installCore develops legitimate software download clients and installers, users must be informed that they are commonly used  to market applications that are categorized as adware, as well as a potentially unwanted programs (PUP). InstallCore download clients have an option to opt-out of installing additional software however users commonly skip these steps and end up installing adware or browser hijackers.

What is search.yourtelevisionnow.com?

Identical to My Classifieds XP, My Television XP, My Maps XP, and several other PUPs, Your Television Now is a browser-hijacking application that claims to allow users to check local weather forecasts, watch various TV channels free of charge, and search the Internet. 

On initial inspection, this application may seem useful and legitimate, however, Your Television Now infiltrates systems without users' permission. In addition, this app modifies browser settings, tracks Internet browsing activity, and generates intrusive online advertisements.

What is terra.im?

The Terra.im website claims to provide advanced Internet search-related features. Although this webpage is legitimate and virus-free, be aware that it is developed to generate traffic. There is a high probability that redirects to terra.im will cause potentially unwanted applications and browser plug-ins to be installed on users' systems.

Browser add-ons that redirect users to various websites are distributed using a deceptive software marketing method called 'bundling' - stealth installation of additional programs together with the chosen software. Bundling allows developers to install applications without notifying users and is a popular method used to monetize their products.

Therefore, you are strongly advised to follow each step during download and installation of free software and uncheck all options offering modification of Internet browser settings (such as homepage, default search engine, and new tab URL).

What is QuickyTranslator?

QuickyTranslator is a deceptive adware-type program that (according to the developers) improves the Internet browsing experience by generating search results in various languages - "QuickyTranslator is a simple Software that allows you to get the Exact Results for your Search in one click in visualized & friendly interface. You'll find the words that you are looking from E Language." 

This application may seem useful, however, due to its rogue behavior, QuickyTranslator is categorized as a potentially unwanted program (PUP). After stealthily infiltrating the system, this adware generates intrusive advertisements and tracks users' Internet browsing activity.

What is Lucky Bright?

Developed by SuperWeb LLC, Lucky Bright is a deceptive app claiming to enhance the Internet browser experience by providing various useful features such as comparison shopping, display of coupons, and special deals/discounts available on various online stores - "We're passionate about improving web by providing the best tools to enhance the browsing experience, from searching the web to comparing online deals to find the best prices. We've combined all of our great ideas into the Lucky Bright product suite, a FREE set of tools that work to make your browsing experience... better!"

By giving these fake promises, Lucky Bright often tricks users to install and, therefore, this dubious app is categorized as adware and a potentially unwanted program (PUP). The reason for these negative associations is Lucky Bright's rogue behavior. This PUP infiltrates systems without users’ permission, continually tracks Internet browsing activity, and generates intrusive online advertisements.

What is Outrageous Deal?

Outrageous Deal is a deceptive application created by SuperWeb LLC. According to the developers, this app improves the Internet browsing experience by displaying special deals and discounts on various online stores, providing coupons, and enabling features such as comparison shopping - "We're passionate about improving web by providing the best tools to enhance the browsing experience, from searching the web to comparing online deals to find the best prices. We've combined all of our great ideas into the Outrageous Deal product suite, a FREE set of tools that work to make your browsing experience... better!" 

By offering this functionality, Outrageous Deal attempts to trick users into believing that it is a legitimate app. Outrageous Deal, however, is categorized as adware and a potentially unwanted program (PUP). There are several reasons for these negative associations.

Firstly, Outrageous Deal often infiltrates systems without users’ permission. Furthermore, this bogus app generates intrusive online advertisements and continually monitors users' Internet browsing activity.

What is VIDKit?

Identical to DNS-Keeper and DNS Unlocker, VIDKit is a deceptive application claiming to provide functionality that allows users to download various videos and movies.

These false claims often trick users into believing that VIDKit is a legitimate app, however, due to its rogue behavior, this app is categorized as adware and a potentially unwanted program (PUP). VIDKit infiltrates systems without users’ permission, generates intrusive online advertisements, and collects information relating to Internet browsing activity.

What is Qword Browser?

Qword Browser is a dubious application that claims to be a legitimate web browser. According to the developers, it provides various useful features.

For example: YouTube video download, browsing security, built-in torrent functionality, download accelerator, and so on - "Qword Browser is a Chromium-based browser. It's the fastest Internet Browser in the world, Qword team optimize Chromium kernel for greater fluidity of the browser and a significant reduction in memory and resources." 

Fake promises to provide these features often trick users to install, however, this application generates intrusive online advertisements, causes unwanted browser redirects, and tracks Internet browsing activity. For these reasons, it is classed as adware and a potentially unwanted app.

What is Primary Color?

Primary Color is a potentially unwanted program (PUP) - a browser plug-in claiming to enable features such as coupons and comparison shopping to improve the Internet browsing experience. Primary Color may appear legitimate and useful, however, this browser add-on is categorized as adware.

The main reason for this negative association is a deceptive software marketing method called 'bundling' (stealth installation of third party applications together with the chosen software) employed by Primary Color to install on Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' permission.

Following successful infiltration, this rogue extension generates various intrusive online ads including banner, transitional, interstitial, coupon, pop-up, search, and full-page ads. Some of these ads might redirect to bogus websites, thereby exposing your computer to infection.

What is HELP_YOUR_FILES?

Recently, a new version of CryptoWall ransomware has been released. This is not the first update to this ransomware - cyber criminals have released a fourth version also known as HELP_YOUR_FILES ransomware.

This new file-encrypting malware not only changes the extensions of files stored on the computer, but also changes the names to prevent victims recognizing them (example of an encrypted file name: '8354no9f.7gt8'). After HELP_YOUR_FILE has encrypted victim data, it demands payment of a $700 (1.79 Bitcoins) ransom.

If the user does not pay within a given time frame, the ransom doubles to $1400 or €1400 (3.58 BTC). Information about the payment (time frame, consequences of not paying the ransom, attempts to decrypt using third party software, step-by-step payment instructions, etc.) is stored in HELP_YOUR_FILES.PNG, HELP_YOUR_FILES.TXT, and HELP_YOUR_FILES.HTML files, which are generated in each directory containing encrypted data.