Virus and Spyware Removal Guides, uninstall instructions

What is SharkBot?

SharkBot is a piece of malicious software targeting Android Operating Systems (OSes). It is designed to obtain and misuse financial data by redirecting and stealthily initiating money transfers. SharkBot is particularly active in Europe (United Kingdom, Italy, etc.), but its activity has also been detected in the United States.

What kind of malware is Steriok?

Steriok is ransomware that encrypts files (blocks access to them) and appends the ".steriok" extension to their filenames. For example, it renames "sample.jpg" file to "sample.jpg.steriok", "1.jpg" file to "1.jpg.steriok". Steriok also creates the "RESTORE_FILES_INFO.txt" file, a ransom note.

What kind of page is content-hub[.]biz?

The purpose of content-hub[.]biz is to get permission to show notification and redirect visitors to various (most likely untrustworthy) websites. Content-hub[.]biz and other pages of this type get opened through shady ads or websites or installed potentially unwanted applications (PUAs).

What is Lockfile (MedusaLocker) ransomware?

Belonging to the MedusaLocker ransomware family, Lockfile is a malicious program that encrypts data (renders files inaccessible) and demands payment for the decryption.

Affected files are appended with a ".lockfile" extension. For example, a file titled "1.jpg" would appear as "1.jpg.lockfile", "2.jpg" as "2.jpg.lockfile", and so forth. After this process is completed, a ransom note - "HOW_TO_RECOVER_DATA.html" - is created.

What is MacClean360?

MacClean360 is advertised as a Mac cleaner and manager that optimizes and improves computer performance. In fact, you should not trust this app, since it is very likely that developers use dubious methods for its distribution and, therefore, some users might install MacClean360 inadvertently.

For these reasons, this app is categorized as a potentially unwanted application (PUA).

What kind of software is LinkSet?

LinkSet is an advertising-supported application designed to show annoying advertisements. It also changes the settings of a web browser to promote a fake search engine. The majority of apps like LinkSet get installed inadvertently. Apps that users are likely to install unknowingly are categorized as potentially unwanted apps (PUAs).

What is Y1iiu ransomware?

Y1iiu is a ransomware-type program. It operates by encrypting data (locking files) and demanding ransoms for the decryption.

Files are appended with a random character string and the ".y1iiu" extension. For example, a file originally named "1.jpg" would appear similar to "1.jpg.rm8zsFc6jNzId_HsLHAugcz2NBV5Z5l6AG66AEWRklH_H_HhYzKt-o80.y1iiu". Once this process is finished, a ransom-demanding message - "XGTb_HOW_TO_DECRYPT.txt" - is created.

What is SocialCouponSearch?

SocialCouponSearch is a piece of browser hijacking software that promotes the socialcouponsearch.com fraudulent search engine. Additionally, browser hijackers are categorized as PUAs (Potentially Unwanted Applications).

What is sabishare[.]com?

Sabishare[.]com is a file storage and sharing website. While such services are legitimate, this site uses rogue advertising networks that promote various untrustworthy and harmful webpages.

The Internet is full of sites that use these networks for monetization purposes; fdrama.net, mp3fy.com, fastfrom.com, dramacool.ac, bigyshare.com, and gospeljingle.com are just some examples.

What kind of application is WebAdblockSearch?

WebAdblockSearch is a browser that changes hijacked browser's settings to webadblocksearch.com - a fake search engine. Most browser-hijacking applications are promoted and distributed using questionable methods. Thus, users download and install them inadvertently. Apps of this kind are called potentially unwanted applications (PUAs).