Virus and Spyware Removal Guides, uninstall instructions

What is finderesults.com?

Finderesults.com is the URL of a fake search engine. Unlike most sites of this kind, it can generate search results. However, they are inaccurate and may include unreliable/deceptive content.

Typically, illegitimate search engines are promoted by browser hijackers, which modify browser settings to cause redirects to these websites. It is pertinent to mention that finderesults.com (and the software promoting it) likely collects sensitive user data.

What kind of page is uddininc[.]com?

Our researchers discovered the uddininc[.]com rogue page while investigating dubious websites. It operates by promoting browser notification spam and redirecting users to other (likely unreliable/hazardous) sites.

Most visitors to uddininc[.]com and similar websites access them through redirects caused by pages using rogue advertising networks.

What is bestresultsfast.com?

Our researchers discovered bestresultsfast.com while investigating rogue software. This website is a fake search engine that can generate search results that are inaccurate and may include deceptive/dangerous content.

In most cases, sites like bestresultsfast.com are promoted (via redirects) by browser hijackers. Both illegitimate search engines and browser-hijacking software often have data-tracking functionalities.

What is searchenginezones.com?

While testing searchenginezones.com, we found that it is a questionable search engine that may display irrelevant results and untrustworthy advertisements. It is worth noting that search engines like searchenginezones.com usually are promoted via browser hijackers. Apps of this type modify web browser settings to promote search engines.

What is Basn ransomware?

Our researchers discovered the Basn malicious program during a routine inspection of new submissions to VirusTotal. Basn is classed as ransomware – a type of malware that encrypts data and demands ransoms for decryption.

Once we launched a sample of this ransomware on our test machine, it began encrypting files and appended their filenames with a ".basn" extension. For example, a file originally named "1.jpg" appeared as "1.jpg.basn", "2.png" as "2.png.basn", and so on.

Afterwards, a ransom note titled "unlock your files.txt" was created and dropped onto the desktop. The message therein indicates that Basn targets companies rather than home users.

What kind of page is checkingsystem[.]site?

After analyzing checkingsystem[.]site, we learned that this site runs the "McAfee - Your PC is infected with 5 viruses!" scam and asks for permission to send deceptive notifications (show untrustworthy advertisements). We discovered checkingsystem[.]site while examining other unreliable sites.

What is searchfme.com?

Searchfme.com is a fake search engine. While most sites of this kind cannot provide search results, this website can – although they are inaccurate and include unreliable/deceptive content.

Typically, websites like searchfme.com are promoted by browser hijackers. Furthermore, these pages and the software endorsing them usually spy on users' browsing activity.

What is suggest4you.com?

Upon testing suggest4you.com, we have determined that it is an untrustworthy search engine that could potentially produce deceptive results (and advertisements). Generally, search engines similar to suggest4you.com are endorsed by browser hijackers, which modify browser configurations to promote these search engines.

What kind of malware is HookSpoofer?

HookSpoofer is an information stealer written in the C# programming language that possesses keylogging and clipper functionalities. Cybercriminals use information stealers as they are a type of malware designed to obtain sensitive or confidential information from victims' devices, such as login credentials, banking details, or personal data.

What kind of malware is Dapo?

During our analysis of malware samples submitted to the VirusTotal page, we came across a ransomware strain dubbed Dapo. Upon further investigation, we determined that Dapo belongs to the Djvu ransomware family. Dapo encrypts data, alters file names, and generates a text file ("_readme.txt") containing ransom demands.

Dapo appends the ".dapo" extension to filenames. For instance, it renames "1.jpg" to "1.jpg.dapo", "2.png" to "2.png.dapo", and so forth. It is important to mention that ransomware belonging to the Djvu family is often distributed alongside information stealers like RedLine and Vidar.