Virus and Spyware Removal Guides, uninstall instructions

What is yessearches.com?

The yessearches.com website claims to be a legitimate Internet search engine and may appear similar to other regular Internet search engines, however, be aware that it is promoted using deceptive software installers that modify Internet browser settings.

Furthermore, yessearches.com continually monitors users' Internet browsing activity and displays search results that might lead to bogus websites.

What is PowerWare?

PowerWare is a ransomware-type malware that encrypts various files. This ransomware is distributed via emails that contains a malicious Word document with an embedded macro. When users opens this document, the aforementioned macro runs automatically.

Malicious files are then downloaded and automatically execute to encrypt stored data. Once the data is encrypted, a ransom is demanded from the victims.

What is mysearchengine.info?

Identical to oursafesearch.com, searchinsocial.com, and a number of other bogus websites, mysearchengine.info is a fake Internet search engine claiming to improve the Internet browsing experience by generating the most relevant search results.

These false claims often trick users into believing that mysearchengine.info is a legitimate site. In fact, it is promoted using browser-hijacking software 'installers'. Furthermore, mysearchengine.info records various information relating to users' Internet browsing activity.

What is Snail Translate?

Snail Translate is a potentially unwanted program (PUP) that claims to provide text translation functionality - "Snail Translate is free translation software that offers language translation between forty languages." Initially, this application may seem legitimate, however, Snail Translate usually infiltrates systems without users’ permission.

In addition, this PUP generates intrusive online advertisements and continually monitors browsing activity. For these reasons, Snail Translate is classed as adware.

What is Salam!?

Salam! is a ransomware-type malware that infiltrates computers and encrypts various file types. During encryption, Salam! creates CRYPTOSO.KEY and WHATHAPPENEDTOYOURFILES.txt files in each folder containing encrypted files. Encrypted files are given .keyz extension.

The text file contains a message stating that users' data has been encrypted and can only be restored with a specific decrypter. To receive this decrypter, users must pay a ransom.

What is nicesearches.com?

Nicesearches.com is a fake Internet search engine identical to pico-search.com, delta-search.com, gold-page.com, and a number of other dubious sites. Initially, nicesearches.com may seem legitimate, since its appearance is almost identical to Google, Bing, Yahoo, and other search websites.

In fact, developers promote nicesearches.com using dubious software 'installers' that hijack Internet browsers. Furthermore, this fake Internet search engine continually gathers various data related to users' Internet browsing activity.

What is Steel Cut?

Steel Cut is a potentially unwanted program (PUP) created by SuperWeb LLC. This application claims to improve the Internet browsing experience by enabling coupons, comparison shopping, and other similar features. This functionality may seem legitimate and useful, however, Steel Cut is considered to be adware.

The developers of Steel Cut employ a deceptive software marketing method called 'bundling' (stealth installation of additional programs with the chosen software) to install this PUP on Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' permission.

Following successful infiltration, Steel Cut generates intrusive online ads such as banner, search, interstitial, transitional, and pop-up ads. These may lead to high-risk adware or malware infections.

What is stadsear.com?

Stadsear.com is a dubious URL that redirects users to various false Internet search engines. The appearance of these sites may seem legitimate, since they are similar to Google, Bing, and other legitimate websites, however, stadsear.com is promoted using deceptive software 'installers' that hijack Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox). In addition, these rogue Internet search engines track users' web browsing activity.

What is Converton?

Converton is ransomware-type malware that stealthily hijacks computers and encrypts various files. This ransomware employs the AES-256 encryption algorithm with an RSA-2048 key.

Thus, two keys (public and private) are generated during encryption. Converton ransomware also adds .converton, .enigma or .czvxce extension to each compromised file. Furthermore, this ransomware creates a !!!-WARNING-!!!.html file on victims' desktops. This file contains all details regarding the encryption.

What is .Cryptohasyou?

.Cryptohasyou is ransomware that encrypts various files stored on the infiltrated system including .exe, .com, .bin, .dat, .sys, any .dmp, .information. .key, .pdb, .bat,. ps1, .vb, .ws, .wsd, .cpl,. reg, .dll,. ini, .msi, .pfx, .sct and .wsc. To achieve this, .Cryptohasyou uses the AES-256 algorithm with an RSA-2048 key.

Thus, private and public keys are generated during encryption. .cryptohasyou also creates a YOUR_FILES_ARE_LOCKED.txt file in each folder containing the compromised files. Note that this ransomware adds a .enc extension to all encrypted files and, therefore, it is straightforward to identify them.