Virus and Spyware Removal Guides, uninstall instructions

What is Track Your Package Now?

Track Your Package Now promotes trackyourpackagetab1.com (the address of a fake search engine) by modifying certain browser settings. This app also tracks and records information relating to users' browsing habits.

Generally, users download and install browser hijackers inadvertently and, for this reason, Track Your Package Now and other browser hijackers are categorized as potentially unwanted applications (PUAs).

What is Dharma (.abc)?

Dharma (.abc) belongs to the family of ransomware called Dharma. It encrypts files, changes their filenames, creates the "FILES ENCRYPTED.txt" text file and displays a pop-up window with instructions about how to contact cyber criminals behind it.

Dharma (.abc) renames files by adding the victim's ID, abc@countermail.com email address, and appending the ".abc" extension to their filenames. For example, it would rename "1.jpg" to "1.jpg.id-C279F237.[abc@countermail.com].abc", "2.jpg" to "2.jpg.id-C279F237.[abc@countermail.com].abc", and so on.

What is the Protect My Search App?

As its name implies, Protect My Search App is endorsed as software capable of securing browsing and searching. It is supposedly able to identify safe websites and potential threats. Instead, Protect My Search App modifies browser settings and promotes protectmysearchapp.com (a fake search engine).

Therefore, this app is classified as a browser hijacker. Additionally, it can record browsing-related information. Since most people install protectmysearchapp.com unintentionally, it is classified as a Potentially Unwanted Application (PUA).

What is the customsearch.info website?

customsearch.info (and find.customsearch.info) is the address of a fake search engine. Rogue web searching tools are usually promoted by software categorized as browser hijackers. One browser hijacker observed promoting customsearch.info is simply named Custom Search.

Software within this category promotes fake search engines by making certain modifications to browser settings and restricting/denying access to them. Additionally, Custom Search adds the "Managed by your organization" feature to Google Chrome browsers.

Both browser hijackers and bogus search engines are notorious for their data tracking capabilities. Due to the dubious methods used to proliferate browser hijackers, they are also classified as Potentially Unwanted Applications (PUAs). Custom Search has been observed being proliferated via licensed software "cracking" tools.

As well as being illegal, these activation tools can distribute not just PUAs but also Trojans, ransomware and other malware.

What is The Global Weather Tab?

The Global Weather Tab is a browser hijacker which changes certain browser settings to the-global-weather.com, the address of a fake search engine.

Apps of this type often gather browsing-related information. Note that users often download and install browser hijackers such as The Global Weather Tab inadvertently and, for this reason, they are categorized as potentially unwanted applications (PUAs).

What are the fake "Swedish Energy Agency" emails?

"Swedish Energy Agency Email Virus" refers to a spam campaign, which spreads the Agent Tesla RAT (Remote Access Trojan). The term "spam campaign" is used to define a mass-scale operation, during which thousands of deceptive emails are sent. The emails distributed through this spam campaign are disguised as messages from the Swedish Energy Agency.

This agency is a legitimate governmental entity, dealing in sustainable energy systems. Note that these fake emails are in no way connected to the genuine Swedish Energy Agency.

What is FastWind?

FastWind belongs to the GlobeImposter ransomware family. Typically, this type of malware is designed to encrypt files, modify their filenames and generate a ransom message. FastWind appends the ".FastWind" extension to the filename of every encrypted file.

For example, it would rename a file called "1.jpg" to "1.jpg.FastWind", "2.jpg" to "2.jpg.FastWind", and so on. It also creates the "HOW TO BACK YOUR FILES.exe" executable file, which is designed to open a ransom message with instructions about how to contact the developers, plus various other details.

What is hp.myway.com?

Developed by the Mindspark Interactive Network, Test iNet Speed is a dubious app promoted as a tool for quick access to free internet speed testing services. This application is classified as a browser hijacker, since it operates by making modifications to browsers to promote hp.myway.com, a fake search engine.

Furthermore, Test iNet Speed has data tracking capabilities, which are employed to monitor and record information relating to browsing activity. Due to the dubious methods used to proliferate Test iNet Speed, it is classified as a Potentially Unwanted Application (PUA).

What is hp.myway.com?

Developed by Mindspark Interactive Network, DailyBibleGuide is a rogue application advertised as a tool for quick access to biblical passages and verses, and other scripture-related content. DailyBibleGuide is classified as a browser hijacker, due to the modifications it makes to browser settings to promote hp.myway.com, a fake search engine.

Additionally, it monitors users' browsing activity, which is a serious privacy concern. Since most users download/install DailyBibleGuide unintentionally, it is also classified as a Potentially Unwanted Application (PUA).

What is The Recipe Tab?

After installation, The Recipe Tab browser hijacker changes certain browser settings to htherecipetab.com, the address of a fake search engine. Commonly, apps of this type are designed to promote fake search engines and collect browsing data (and other information).

Users often download and install browser hijackers inadvertently and, for this reason, Recipe Tab and other apps of this type are categorized as potentially unwanted applications (PUAs).