Virus and Spyware Removal Guides, uninstall instructions

What is Boxore?

The boxore virus is a potentially unwanted application, which infiltrates Internet browsers (Mozilla Firefox and Google Chrome) through free software downloads and generates intrusive ads. This browser plugin promises to enhance users' Internet browsing by displaying offers and recommendations matched to users' preferences (videos, games, or music).

Whilst such functionality may seem legitimate, Boxore is categorized as adware, since it infiltrates Internet browsers without users' consent and generates various intrusive third party ads. Computer users should be aware that clicking these ads can lead to serious malware infections.

Furthermore, Boxore tracks users' Internet browsing activity by recording IP addresses, websites visited, operating systems, and browser information.

What is Safety Master?

Windows Safety Master is a rogue antivirus program, which generates fake security warning messages and indicates fake security infections in order to scare PC users into purchasing the 'full version'. This program is created by cyber criminals who use infected email messages, malicious websites, and fake online security scanners to distribute this bogus software.

After successful infiltration, Windows Safety Master modifies the registry entries of an infected operating system by setting itself to start automatically on each system startup.

Furthermore, it blocks execution of installed software (including antivirus programs and Internet browsers) and disables the Windows Task Manager. This program holds no virus definition database or virus scan engine and indicates identical security infections on all PCs infiltrated.

What is websearch.searchinweb.info?

The Websearch.searchinweb.info browser hijacker infiltrates users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) through free software downloads. Developers of this browser settings-changing adware use a deceptive software marketing method called 'bundling', thus, most users install the plugin inadvertently without their consent.

After successful infiltration, this browser hijacker assigns the homepage and default search engine settings to websearch.searchinweb.info

What is Lookinglink?

The Lookinglink browser plugin claims to enhance users' Internet browsing experience by enabling coupons and comparison shopping. While such functionality may seem legitimate, Internet users should be aware that this browser extension is categorized as adware or a potentially unwanted application.

It installs on browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' consent and generates intrusive search, banner, text link, transitional, interstitial, and full page ads when surfing the Internet.

Furthermore, Lookinglink tracks users' Internet browsing activity by recording IP addresses, unique identifier numbers, operating systems, browser information, URLs visited, pages viewed, search queries entered, and other software and hardware information.

What is Motitags toolbar?

The Motitags toolbar browser add-on was created by Mindspark Inc. and is compatible with Internet Explorer and Mozilla Firefox. It claims to enhance users' Internet browsing experience by enabling smileys within popular email clients such as Gmail, Yahoo!, AOL, and Outlook Live.

While such added functionality may seem legitimate, Internet users should be aware that this browser plugin is categorized as a potentially unwanted application or adware, since it infiltrates browsers using a deceptive free software marketing method called 'bundling' and causes unwanted browser redirects to home.tb.ask.com

Furthermore, this potentially unwanted application tracks users' Internet browsing activity by recording keyword queries, search query text, time of day, browser type, default language settings, IP address, and other information.

What is Web Save?

Web Save is a potentially unwanted application, which installs on Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) when users download or install free software. Developers of this adware use a deceptive software marketing method called 'bundling', and thus, most Internet users install the Web Save plugin inadvertently without their consent.

After successful infiltration, this add-on generates intrusive coupons ads when users visit online shopping websites. Moreover, this plugin tracks users' Internet browsing habits by recording web pages visited and activity on those pages (impressions, clicks, and search terms).

What is ZenSearch.com?

The ZenSearch.com virus is a browser hijacker, which infiltrates users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) through free software downloads and modifies the homepage and default search engine settings by assigning them to zensearch.com

While this website may seem legitimate (it offers Internet searching using various search engines), computer users should be aware that ZenSearch is categorized as adware or a potentially unwanted application.

Developers of this browser settings-changing adware use a deceptive software marketing method called 'bundling', and thus, Internet users often install this potentially unwanted program (PUP) inadvertently without their consent.

What is Ultimate Booster?

Windows Ultimate Booster is a rogue antivirus program, which indicates various non existent security threats in order to scare PC users into believing that their computers are infected with high-risk malware. The main purpose of this malicious behavior is to sell a license key for this fake antivirus program.

PC users should be aware that paying for the full version of Windows Ultimate Booster is equivalent to sending their money to cyber criminals - they will lose their money and their computers will remain infected with this bogus software.

After successful infiltration, this rogue program modifies the registry entries of an infected operating system, disables execution of installed software (including Internet browsers), blocks the Task Manager, and configures itself to start automatically on each system Startup.

What is Cryptorbit?

The Cryptorbit ransomware virus infiltrates users' computers using infected email messages and P2P networks. After successful infiltration, this malicious program encrypts files (*.doc, *.docx, *.xls, *.ppt, *.psd, *.pdf, *.eps, *.ai, *.cdr, *.jpg, etc.) stored on users' computers and demands payment of a 0,5 BTC (Bitcoins) ransom in order to decrypt the files.

At time of writing, 0,5 BTC was equivalent to approximately $400 USD. This ransomware is identical to a previous variant named Cryptolocker.

PC users should be aware that, whilst the infection itself is not complicated to remove, decryption of files affected by this malicious program is impossible without paying the ransom. At time of research, no tools or solutions capable of decrypting files encrypted by Cryptorbit were available.

What is MySearchDial?

The MySearchDial browser toolbar (compatible with Internet Explorer, Google Chrome, and Mozilla Firefox) claims to enhance users' browsing experience by displaying quick access links to popular social networking websites (Facebook, Twitter, etc.) and improve the overall Internet search and browsing experience.

While such functionality may seem legitimate and useful, many computer users refer to MySearchDial (My Search Dial) as a redirect virus or a browser hijacker.

These associations are made since the MySearchDial toolbar is promoted via free software downloads using a software distribution (marketing) method called 'bundling'. The MySearchDial toolbar is installed on users' browsers during download or installation of legitimate free software using 'download clients' or 'installers'.