Virus and Spyware Removal Guides, uninstall instructions

What is HoistSearch.com?

The HoistSearch browser application is developed by Hoist Media. This browser app can be downloaded from its homepage, however, it is often 'bundled' with free software downloaded from the Internet. At time of research, this potentially unwanted application was also bundled with fake downloads such as Java, Flash, and browser updates.

Bundling is a commonly-used and deceptive software marketing method. When installed, this toolbar assigns the browser homepage and default Internet search engine settings to hoistsearch.com This website is not related to malware or virus infections, however, the creators of this toolbar have full control over the software, and therefore, are capable of redirecting users to malicious websites at any time.

What is .Better_Call_Saul?

.Better_Call_Saul is ransomware distributed via spam email messages with infected .doc files attached. After successful infiltration, this ransomware encrypts various files stored on the system. To encrypt them, the ransomware employs the RSA-256 algorithm and, therefore, public and private keys are created during encryption.

Note that this ransomware adds an extension of the same name (.better_call_saul) to the end of each encrypted file. In addition, it changes the user's desktop wallpaper and creates a README1.txt file in each folder containing the encrypted files.

Both text file and desktop wallpaper contain a message stating that the files are encrypted, and to restore them, the victim must pay a ransom.

What is hohosearch.com?

Hohosearch.com is a fake Internet search engine identical to safefinder.com, gold-page.com, zeta-search.com, and a number of other dubious websites. 

On initial inspection, hohosearch.com may seem a legitimate search engine (such as Google, Bing, or Yahoo), however, this site is promoted using deceptive software 'installers'. Furthermore, hohosearch.com continually gathers information relating to Internet browsing activity.

What is Screen Addict?

Screen Addict is a browser toolbar that supposedly allows users to watch movie trailers, quickly access various streaming sites, and access other movie-related functionality.

On initial inspection, search.mysearch.com may seem legitimate and useful, however, due to rogue behavior (stealth installation, modification of browser settings, and tracking of Internet browsing activity) it is classed as a potentially unwanted program (PUP) and adware.

What is search.newtabtvgamasearch.com?

Identical to search.tv-newtabsearch.com, search.newtabtvsearch.com, and a number of other bogus sites, search.newtabtvgamasearch.com is a dubious website claiming to be an Internet search engine. It also contains quick links to other popular sites such as YouTube, Gmail, IMDb, and many others.

On initial inspection, search.newtabtvgamasearch.com may seem legitimate, however, this site is promoted using dubious software 'installers' that hijack web browsers and modify their settings. In addition, search.newtabtvgamasearch.com gathers various information relating to users' web browsing activity.

What is Rokku?

Rokku is a ransomware designed to stealthily infiltrate the system and encrypt various stored files.

It adds a .rokku extension to each compromised file and, thus, it is easy to determine which ones are encrypted. 'README_HOW_TO_UNLOCK.html' and 'README_HOW_TO_UNLOCK.txt' files are then created and placed in each folder containing the encrypted files. README_HOW_TO_UNLOCK contains a message stating that the files have been encrypted.

What is WindowPolicies?

WindowPolicies is a deceptive adware-type application developed by Haho Media. This application usually infiltrates systems without users’ permission. Therefore, it is classed as a potentially unwanted program (PUP). Once infiltrated, WindowPolicies generates intrusive online advertisements, and collects various information relating to users' web browsing activity.

What is DLSecure toolbar?

The DLSecure toolbar is developed by Visicom Media. This browser toolbar can be downloaded from its homepage, however, it is often 'bundled' with free software downloaded from the Internet. At time of research, this potentially unwanted application was also bundled with fake downloads such as Java, Flash, and browser updates.

Bundling in this manner is a commonly-used and deceptive software marketing method.

When installed, this toolbar assigns the browser homepage to mystart.com and default Internet search engine to Yahoo.com This website alone is not related to malware or virus infections, however, the creators of this toolbar have full control over the software, and thus, are capable of redirecting users to malicious websites at any time.

What is .Locked?

.Locked is a ransomware-type malware that infiltrates systems via 'trojans'. Once infiltration is successful, this malware encrypts various files stored on the system. To achieve this, ransomware uses the AES-256 encryption algorithm and, therefore, a public and a private key is generated during encryption.

Note that this ransomware adds a '.locked' extension to each encrypted file. After encrypting the files, this ransomware changes the victim's desktop wallpaper and creates a WindowsUpdated.locked file. Both the file and desktop wallpaper contain a message stating that the files are encrypted and the user must pay a ransom.

What is Free Youtube Download Manager?

Developers present Free Youtube Download Manager as an application that supposedly allows users to download videos from YouTube - "Free YouTube Downloader Manager is a tool that allows you to download videos from YouTube and convert them to other video formats for free." 

These fake promises are merely attempts to trick users to install, however, Free Youtube Download Manager is classed as a potentially unwanted program (PUP) and adware.

This application is likely to infiltrate systems without users’ permission. Furthermore, Free Youtube Download Manager generates intrusive online advertisements and collects information relating to Internet browsing activity.