Virus and Spyware Removal Guides, uninstall instructions

What is duba.com?

Developers present duba.com/?un_449343_4125 as a legitimate Internet search engine that generates improved search results and provides quick access to various popular websites. Initially, this site may seem legitimate and useful, however, duba.com monitor users' Internet browsing activity.

In addition, developers promote duba.com using rogue software downloaders and installers that hijack web browsers and stealthily modify various options.

What is ttczmd.com/i/igsearch.html?

ttczmd.com/i/igsearch.html is a fake Internet search engine identical to searchopa.com, mystartpage1.ru, wzscnet.com, and a number of other bogus sites. 

By falsely claiming to generate improved search results, ttczmd.com/i/igsearch.html attempts to give the impression of legitimacy, however, developers promote this site via rogue software download/installation tools that hijack Internet browsers and stealthily modify various options.

In addition, ttczmd.com/i/igsearch.html continually monitors users' Internet browsing activity by gathering various user/system information.

What kind of malware is Fantom?

Fantom is a ransomware-type virus that imitates the Windows update procedure while encrypting files. This is unusual, since most ransomware encrypts files stealthily without showing any activity. During encryption, Fantom appends the names of encrypted files with the ".locked4", ".fantom" or ".locked" extension.

For example, an encrypted image file "sample.jpg" is renamed to "sample.jpg.fantom". Following successful encryption, Fantom changes the desktop wallpaper and creates a "DECRYPT_YOUR_FILES.html" file, which is placed on the desktop and in each folder containing encrypted files.

Note that RemindMe ransomware creates a very similar HTML file and, therefore, it is probable that Fantom is related to this virus.

What is Hacking Alert?

"Hacking Alert" is a fake error message similar to BSOD Error, Hard Disk Failure Error, BSOD Driver Problem, and a number of other fake errors. "Hacking Alert" is displayed by a malicious website, which users visit after encountering unwanted browser redirects caused by various unwanted programs.

These PUPs often infiltrate the system during installation of legitimate apps. As well as causing unwanted redirects, potentially unwanted programs also record various user/system information and display intrusive online advertisements.

What kind of scam is "Cyber Security Warning"?

Similar to Hard Disk Failure Error, BSOD Driver Problem, and many other scams, "Cyber Security Warning" is a fake error message displayed by a rogue website. Users are redirected to this site by a number of potentially unwanted programs (PUPs) that infiltrate the system during installation of regular (usually free) applications.

Following infiltration, PUPs cause unwanted browser redirects, continually track users' Internet browsing activity, and deliver intrusive online advertisements. Note that these apps often claim to provide 'useful functions'.

What is anasayfa.im?

anasayfa.im is another fake Internet search engine that falsely claims to improve users' Internet browsing experience by generating the most relevant search results.

These claims often trick users into believing that anasayfa.im is a legitimate website, however, this site continually monitors Internet browsing activity. In addition, anasayfa.im is promoted using deceptive software downloaders and installers that hijack web browsers and stealthily modify various options.

What is mystartpage1.ru/i/start.html?

Identical to searchboro.com, searchopa.com, wzscnet.com, and many other sites, mystartpage1.ru/i/start.html is a fake Internet search engine that supposedly generates improved search results, thereby improving Internet browsing. 

This functionality may seem legitimate and useful, however, mystartpage1.ru/i/start.html is promoted using a deceptive marketing method called "bundling". In addition, this site continually gathers various information relating to users' Internet browsing activity.

What is seekforsearch.com?

Seekforsearch.com is a fake Internet search engine developed by ClientConnect Ltd. According to the developers, seekforsearch.com significantly enhances the Internet browsing experience by generating the most relevant search results, however, this fake search engine continually gathers various information relating to Internet browsing activity.

Furthermore, developers promote this rogue site using deceptive software download/installation set-ups that hijack Internet browsers and stealthily modify various options.

What is search.yourmediatabsearch.com?

Developers present search.yourmediatabsearch.com as an Internet search engine that generates improved search results and provides quick access to various popular websites (for example, YouTube, IMDb, Facebook, Gmail, etc.).

Many users believe that search.yourmediatabsearch.com is a legitimate website, however, developers promote this website using a deceptive marketing method called "bundling". Furthermore, search.yourmediatabsearch.com records various information relating to users' Internet browsing activity.

What is WildFire Locker?

WildFire Locker is ransomware virus that employs the asymmetric AES-256 encryption algorithm to encrypt various files stored on victims' computers.

During encryption, WildFire Locker changes the name of each encrypted file to the following format: Filename #WildFire_Locker#[original file name]##.[original extension].wflx Following successful encryption, WildFire Locker creates three files (.txt, .html, and .bmp) to inform users of the encryption.