Virus and Spyware Removal Guides, uninstall instructions

What is Cryptorbit?

The Cryptorbit ransomware virus infiltrates users' computers using infected email messages and P2P networks. After successful infiltration, this malicious program encrypts files (*.doc, *.docx, *.xls, *.ppt, *.psd, *.pdf, *.eps, *.ai, *.cdr, *.jpg, etc.) stored on users' computers and demands payment of a 0,5 BTC (Bitcoins) ransom in order to decrypt the files.

At time of writing, 0,5 BTC was equivalent to approximately $400 USD. This ransomware is identical to a previous variant named Cryptolocker.

PC users should be aware that, whilst the infection itself is not complicated to remove, decryption of files affected by this malicious program is impossible without paying the ransom. At time of research, no tools or solutions capable of decrypting files encrypted by Cryptorbit were available.

What is MySearchDial?

The MySearchDial browser toolbar (compatible with Internet Explorer, Google Chrome, and Mozilla Firefox) claims to enhance users' browsing experience by displaying quick access links to popular social networking websites (Facebook, Twitter, etc.) and improve the overall Internet search and browsing experience.

While such functionality may seem legitimate and useful, many computer users refer to MySearchDial (My Search Dial) as a redirect virus or a browser hijacker.

These associations are made since the MySearchDial toolbar is promoted via free software downloads using a software distribution (marketing) method called 'bundling'. The MySearchDial toolbar is installed on users' browsers during download or installation of legitimate free software using 'download clients' or 'installers'.

What is Efficiency Kit?

Windows Efficiency Kit is a fake antivirus program, which reports non existent security infections in the hope that PC users will purchase the license key. This program is created by cyber criminals who use fake online security scanners and malicious websites to distribute this scam.

Computer users should be aware that this program has no virus scan engine or a virus definition database - it merely mimics the detection of identical security infections on each computer infiltrated.

After successful infiltration, Windows Efficiency Kit modifies the registry entries of an affected operating system, configures itself to start automatically on each system Startup, blocks execution of installed software (including Internet browsers), and disables the Task Manager. Moreover, this rogue antivirus blocks the entire desktop, thus making its removal more complicated.

What is Save Clicker?

The Save Clicker (or SaveClicker) potentially unwanted application generates intrusive coupon ads when visiting online shopping websites. Creators of this browser add-on state that Save Clicker can save time and money whilst shopping online by automatically displaying the lowest prices for chosen products.

Be aware, however, that this browser extension is categorized as adware and users are advised not to use this plugin. This add-on is promoted using a deceptive software marketing method called 'bundling', thus, computer users often install it inadvertently without their consent when downloading or installing free software.

What is Best Offers?

The Best Offers (or BestOffers) browser add-on promises to enhance users' Internet browsing experience by displaying coupon ads when visiting online shopping websites and allowing access to play premium online games.

While such functionality may seem legitimate, Internet users should be aware that the Best Offers add-on is categorized as adware or a potentially unwanted application. This plugin infiltrates browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) through free software downloads using a deceptive software marketing method called 'bundling'.

It also causes diminished browser performance and intrusive ads. At time of research, this potentially unwanted program (PUP) was distributed using the Install Brain free software download client.

What is GetSav-in?

The GetSav-in browser add-on is created by Adpeak, Inc. and promises to enhance users' Internet browsing experience by displaying coupon ads when visiting online shopping websites. While such added functionality may appear legitimate, users should be aware that the GetSav-in plugin is categorized as a potentially unwanted application or adware.

It installs on browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) together with free software using a deceptive software marketing method called 'bundling'. This browser extension generates intrusive ads, including coupon ads, banner ads, and interstitial (full-screen) advertising.

What is Charm Savings?

Created by Social Growth Technologies, Inc., Charm Savings is a potentially unwanted application claiming to save time and money whilst shopping online. This plugin displays various deal and coupon ads when users visit online shopping websites.

At time of research, Charm Savings ads were used by several potentially unwanted programs (PUPs) including, for example, SmileysWeLove. This browser extension installs on browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' consent together with free software downloaded from the Internet, using a deceptive marketing method called 'bundling'.

After successful infiltration, this adware generates intrusive ads (coupons, deals, or special offers) and tracks users' Internet browsing activity.

What is Awesomehp.com

The Awesomehp.com browser hijacker was created by Tomoon, Inc and is categorized as adware or a potentially unwanted application. Developers of this plugin use a deceptive software marketing method called 'bundling', and thus, most Internet users install this browser hijacker inadvertently without their consent when downloading free software.

After successful infiltration, this adware modifies Internet browser (Internet Explorer, Google Chrome, and Mozilla Firefox) settings by assigning the homepage, default search engine, and default tab fields to awesomehp.com

Computer users should be aware that this browser hijacker not only applies browser redirects but also tracks users' browsing activity by recording IP addresses, search terms, and links clicked within the Internet search results page.

What is Prime Accelerator?

Windows Prime Accelerator is a fake antivirus program, which indicates non existent security infections in order to scare PC users into purchasing a useless 'full version'. This program is created by cyber criminals who use malicious websites and fake online security scanners to proliferate this rogue security scanner.

After successful infiltration, Windows, Prime Accelerator restarts the operating system, and on next system startup, blocks the desktop.

The software imitates a legitimate antivirus program and performs an imaginary security scan. After a few seconds following the scan, PC users are presented with a large list of supposedly 'detected' high-risk malware infections. To remove these threats, Windows Prime Accelerator demands activation of 'ultimate protection'.

What is DefaultTab?

DefaultTab virus is a term used to describe a potentially unwanted application created by Search Results, LLC. This browser hijacker infiltrates users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) via free software downloads and modifies the browser settings by assigning the new tab and default search engine fields to mysearchresults.com

Whilst this browser extension claims to make Internet browsing more productive (by enabling searches from each website visited), in fact it is a potentially unwanted program (PUP), which diminishes browser performance, causes redirect issues, and tracks users' Internet browsing activity by recording IP addresses, browser types, operating systems, details regarding computer hardware, installed applications, Internet service providers, and web pages visited.