Virus and Spyware Removal Guides, uninstall instructions

What is websearch.search-guide.info?

The Websearch.search-guide.info browser hijacker installs on users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) together with free software downloaded from the Internet. After successful infiltration, this adware modifies users' Internet browser settings including the homepage and default search engine domains.

Moreover, this adware installs several browser 'helper object', which block attempts to roll back these changes. At time of research, this adware was 'bundled' with a program called SkypEmoticons.

Developers of this free program promote the websearch.search-guide.info browser hijacker using a deceptive installer, which tricks unsuspecting computer users into installing browser setting-modifying adware together with the free software.

What is Scorpion Saver?

Scorpion Saver is a potentially unwanted application, which installs on users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) together with free software downloaded from the Internet. After successful infiltration, this browser add-on generates intrusive ads when users visit online shopping websites such as Best Buy, Expedia, Walmart, etc.

Note that whilst many Internet users refer to Scorpion Saver as a virus, technically it is not - this browser plugin is categorized as a potentially unwanted application or adware. In most cases, unwilling installation of this browser add-on is caused by 'download clients', which are used by free software download websites.

They manage the download process of the chosen free software, however, also promote various browser plugins. Thus, reckless freeware download can lead to inadvertent installation of Scorpion Saver or other adware.

What is Win32/FakeSysDef family?

The Win32/FakeSysDef family of rogue system optimizers are created by cyber criminals. Fake programs from this family infiltrate users' computers via security vulnerabilities and then perform fake system scans, resulting in the 'detection' of serious hardware (commonly, Hard Disk Drive HDD) issues.

These programs display fake hard disk drive errors with the intention of scaring PC users into purchasing the 'full version' of the program.

After successful infiltration, rogue programs from this family modify the operating system settings and registry entries, and configure themselves to start automatically on each system start-up. To make the fake hardware errors appear authentic, bogus system scanners hide users' desktop icons and Start menu entries.

What is Win32/FakeRean family?

The FakeRean/Braviax family of fake antivirus programs is developed and distributed by cyber criminals. The main purpose of these rogue programs is to infiltrate users' operating systems and display fake security scans to trick users into purchasing a fake license key.

Cyber criminals responsible for creating these bogus programs use 'exploit kits' to infiltrate users' systems. Exploit kits rely on outdated software to infect users' operating systems, and therefore, keeping your installed software up-to-date can drastically reduce the risk of computer virus infection.

The Braviax/FakeRean family of rogues is well known for the name-changing capability of its fake antivirus programs. The bogus programs from this family detect the operating system of the computers targeted for infiltration and modify their names accordingly.

For example, when infecting a computers running the Windows 7 operating system, rogue programs from this family appear as Windows 7 Antivirus, Windows 7 Internet Security, Windows 7 Home Security, or Win 7 Security. Windows XP users observe these bogus programs appearing as Windows XP Antivirus, Windows XP Internet Security, etc.

What is SkyWebber?

The SkyWebber browser extension is created by Super Web LLC. The plugin is compatible with Internet Explorer, Google Chrome, and Mozilla Firefox. It displays website reviews and allows users to search multiple websites simultaneously.

On initial inspection, this add-on appears legitimate and useful, however, further research reveals that SkyWebber installs on users' Internet browsers without their consent, and moreover, causes various unwanted ads. This behavior is typical of adware or potentially unwanted applications, which are distributed using free software.

After successful infiltration, this browser add-on tracks users' Internet browsing habits, recording the IP address, unique identifier number, operating system, browser information, URLs visited, pages viewed, search queries entered, and other software and hardware information.

What is National Security Agency?

The 'National Security Agency virus' is a term used to describe a ransomware infection, which exploits the name of the National Security Agency (NSA). This virus locks computer screens and demands payment of a $300 fine (using GreenDot MoneyPak) for alleged law violations, such as watching and distributing child pornography.

In fact, this message is not related to the NSA, it is a scam created by cyber criminals. This screen-locking message is the result of a security infection and should not be trusted. PC users should understand that paying the fine is equivalent to sending their money to cyber criminals.

Commonly, this fake message is proliferated using 'exploit kits', which infiltrate users' operating systems via security vulnerabilities detected within outdated software such as Java, Flash, etc.

What is Higher Aurum?

Higher Aurum is a potentially unwanted application, which generates various unwanted ads and tracks users' Internet browsing habits. While many Internet users refer to this browser add-on as a virus, it is actually adware distributed via free software downloads.

Users often realise that their Internet browsers are infiltrated with this unwanted browser plugin having noticed "Higher Aurum Ads", "Higher Aurum Deals", and "Powered by Higher Aurum" advertisements appearing whilst surfing the Internet.

The source of these ads is adware, which installs on users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without their consent. Today, the majority of free software download websites use 'download clients' in order to promote various free browser plugins and monetize their free services.

What is BatBrowse?

The BatBrowse browser add-on promises to enhance users' Internet browsing experience by displaying website reviews and various online deals. Developers of this plugin (Super Web LLC) claim that BatBrowse helps to save time and money whilst shopping online.

While such added functionality may seem legitimate, creators of this add-on use a deceptive software marketing method called 'bundling' and most computer users install this browser extension inadvertently without their consent.

Furthermore, after unwilling installation, users experience diminished Internet browser performance (on Internet Explorer, Google Chrome, and Mozilla Firefox) and are forced to view various unwanted ads.

What is Browse Beyond?

The Browse Beyond (or Browsebeyond) browser extension is developed by Super Web LLC and claims to display website ratings and enable multiple website search capabilities whilst surfing the Internet. This software is compatible with Internet Explorer, Mozilla Firefox, and Google Chrome.

Computer users who have installed this browser plugin should be aware that it is categorized as adware and causes unwanted ads within search engines such as Google, Bing, and Yahoo. Furthermore, it generates banner, text link, transitional, interstitial, and full page ads.

Browse Beyond also tracks users' Internet browsing habits (recording the IP address, unique identifier number, operating system, browser information, URLs visited, pages viewed, search queries entered, other software and hardware information), and may cause serious privacy issues.

What is Download Terms?

The Download Terms (or DLTerms) browser add-on is developed by Unlimited Downloads LLC and claims to enhance users' Internet browsing experience by displaying synonyms of any highlighted word. This plugin is compatible with Internet Explorer, Google Chrome, and Mozilla Firefox.

Note that while this added functionality may seem legitimate, this browser plugin is categorized a potentially unwanted application or adware, since it installs on users' browsers without their consent and causes various unwanted ads (including coupon ads displayed when visiting online shopping websites).

Moreover, many Internet users report that Download Terms diminishes Internet browsing performance. Commonly, this add-on installs on users' systems together with free software downloaded from the Internet, as creators of this browser extension use a deceptive software marketing method called 'bundling'.