Virus and Spyware Removal Guides, uninstall instructions

What is Los Pollos Hermanos?

Cable network AMC’s popular TV series, Breaking Bad, which ended after five successful seasons in 2013, is in the spotlight once again thanks to a group of hackers who have modelled a new ransomware variant after the hit show.

The new malware variant confronts users with a message complete with the Los Pollos Hermanos logo – a fictional fried chicken restaurant featured in the television show. The malware encrypts all files on the infected computer and threatens victims with deletion of all encrypted files unless a ransom is paid.

The ransom, at time of writing, is $1,000 AUD (~$791 USD). Researchers from security firm, Symantec, were the first to discover the new malware and according to an official report released by the company, the Breaking Bad ransomware is currently sweeping Australia and could reach the shores of the United States and other English-speaking countries in the near future.

What is BitCryptor?

BitCryptor is a ransomware virus that infiltrates operating systems via infected email messages, exploit kits, and fake downloads (for example, rogue video players and fake Flash updates). This is an updated variant of a ransomware infection previously known as CoinVault (originating from CryptoGraphic locker).

After successful infiltration, this malicious program encrypts (AES 256 - symmetrical encryption algorithm) files stored on computers (including .odt, .doc, .docx, .xls, .xlsx, .ppt, .pptx, psd, .cdr, .mp3, .raw, .jpeg, .gif, .bmp, and .txt files among many others) and demands payment of 1 Bitcoin (at time of writing, approximately $240 USD) within 66 hours.

Cyber criminals responsible for releasing this rogue program ensure that it executes on all Windows versions including Windows XP, Windows Vista, Windows 7, and Windows 8. As well as displaying a window with encryption information, BitCryptor also changes the desktop wallpaper, which reads 'Your files have been encrypted! - BitCryptor'.

What is Savvy Suggestor?

Created by Prospera Software Inc, Savvy Suggestor offers a feature supposedly to improve the Internet search experience by displaying advanced results and search suggestions. Some users may find this functionality legitimate and useful, however, Savvy Suggestor is categorized as adware and a potentially unwanted program (PUP).

This application infiltrates Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) using a deceptive software marketing method called 'bundling' - stealth installation of third party applications together with regular software.

Following infiltration, Savvy Suggestor displays various intrusive online advertisements (mostly coupons), and since most redirect to bogus websites containing infectious content, clicking them exposes the system to risk of infection.

What is PriceFab?

Some users may find the PriceFab extension (developed by a company of the same name) legitimate and useful, since it claims to save time and money when shopping online by displaying special deals/discounts. Despite these claims, PriceFab is in fact categorized as a potentially unwanted program (PUP) and adware.

This bogus application installs on Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) using a deceptive software marketing method called 'bundling' (stealth installation of third party applications together with the chosen software). After system infiltration, PriceFab generates various intrusive online advertisements and gathers Internet browsing-related data.

What is Search Fairy?

According to the developers of Search Fairy (Results Media Ltd), this bogus plug-in improves the Internet search experience by displaying advanced search results. This functionality may seem legitimate and useful, however, be aware that Search Fairy is in fact adware and a potentially unwanted program (PUP).

Search Fairy is mostly distributed using a deceptive software marketing method called 'bundling' - stealth installation of third party software together with regular software. These applications are often bundled with free software downloadable on freeware download websites.

After infiltration, Search Fairy delivers intrusive online advertisements (banner, pop-up, and coupon) and gathers various software and Internet browsing-related hardware information (IP addresses, websites visited, pages viewed, search queries, etc.).

What is LittleApp Suggestor?

LittleApp Suggestor is a browser plug-in that claims to improve the Internet search experience, and although it may seem legitimate and useful, this application is classed as adware and a potentially unwanted program (PUP).

The developers of this bogus application (Little-Apps LLC) employ a deceptive software marketing method called 'bundling' to install LittleApp Suggestor on computers without users' consent.

Bundling is a way to stealthily install additional programs together with regular software, and therefore, most free software downloadable on freeware download websites is delivered together with adware-type apps such as LittleApp Suggestor.

After system infiltration, this bogus browser plug-in generates intrusive online advertisements, and tracks Internet browsing-related information.

What is DealShark?

DealShark is an advertising network employed by a wide variety of adware-type applications. These apps are distributed using a deceptive software marketing method called 'bundling', and therefore, they are categorized as potentially unwanted programs (PUP).

Bundling is stealth installation of third party applications together with the chosen software, thus, users commonly install adware-type apps inadvertently without their consent.

Adware-type applications are likely to cause intrusive online advertisements (for example, coupons) that usually redirect to potentially rogue websites - clicking these ads might cause further high-risk adware or malware infections.

What is BrowserPro App?

The BrowserPro App plug-in supposedly saves time and money while shopping online, however, it is actually categorized as adware and a potentially unwanted program (PUP). This bogus app installs on computers using a deceptive software marketing method called 'bundling' (stealth installation of additional programs together with the chosen software).

Most users unwillingly install this browser extension during download of free software from freeware download websites.

After system infiltration, BrowserPro App generates intrusive online ads that often redirect to potentially rogue websites. Banner, in-text, pop-up, coupon, and interstitial are just examples from a list of advertisement types generated by this app. Note that clicking them exposes your system to risk of infection.

What is WunderWeb?

WunderWeb claims to be a legitimate add-on that will enhance the Internet browsing experience by enabling various features such as coupons and comparison shopping. This browser extension may seem genuine and useful, however, WunderWeb is classed as adware and a potentially unwanted program (PUP).

SuperWeb LLC (the company responsible for the development and release of this rogue app) use a deceptive software marketing method called 'bundling' (stealth installation of third party apps together with the chosen software) to install WunderWeb on Internet browsers (Internet Explorer, Mozilla Firefox, and Google Chrome) without users' permission.

Following infiltration on browsers, WunderWeb generates intrusive online advertisements including banner, interstitial, transitional, full-page, pop-up, and search ads. These advertisements are likely to redirect to bogus websites, and therefore, clicking them exposes your computer to risk of infection.

What is MySoftToday?

The MySoftToday browser add-on claims to allow users to find and download various Android Apps either for free or at a reduced price. This extension may seem legitimate and useful, however, MySoftToday is classified as adware and potentially unwanted program (PUP).

A deceptive software marketing method called 'bundling' is used in MySoftToday adware distribution - this allows developers to stealthily install their applications together with regular software without users' permission.

Once MySoftToday is installed on Internet Explorer, Google Chrome, and Mozilla Firefox, users will observe a wide range of intrusive online ads that are likely to redirect to bogus websites, thereby, causing further computer infections.