Virus and Spyware Removal Guides, uninstall instructions

What is AtlantaLookup?

AtlantaLookup is an adware-type application that possesses browser hijacker capabilities. It runs intrusive advertisement campaigns. I.e., delivers various unwanted and harmful ads. Additionally, AtlantaLookup modifies browser settings to promote a bogus search engine.

Adware and browser hijackers usually monitor users' browsing activity. Most users install this app unintentionally and so it is classified as a Potentially Unwanted Application (PUA).

AtlantaLookup has been observed being spread via fake Adobe Flash Player updaters and installers, which are commonly used to distribute adware, browser hijackers and even malware (e.g. ransomware, Trojans, etc.).

What is DeluxeFocus?

DeluxeFocus is one of many applications that supposedly improves the browsing experience and delivers various other features. In fact, it is classified as a potentially unwanted application (PUA) that feeds users with advertisements and gathers information. These applications are classified as adware.

Typically, people do not download or install adware intentionally. Note that this app is designed to promote the Safe Finder website by opening it through akamaihd.net.

What is Tuneup Pro?

Tuneup Pro is advertised as a program which includes features and tools to enhance computer performance. In fact, it is categorized as a potentially unwanted application (PUA) due to its distribution methods.

Like many other PUAs, Tuneup Pro is distributed by including it into various download or installation set-ups as "additional offers". Commonly, people download and install PUAs unintentionally.

What is LiveStreamNewsToday Promos?

The LiveStreamNewsToday Promos program feeds users with advertisements. Programs of this type belong to a category of adware-type software.

Commonly, adware is designed to display ads and gather information. People often download and install adware inadvertently and, for this reason, LiveStreamNewsToday Promos and other programs of this type are classified as potentially unwanted applications (PUA).

What are the Roanbours websites?

Roanbours is a group of deceptive websites promoting various scams. Websites belonging to the group have been observed promoting the "Dear Safari User, You Are Today's Lucky Visitor" scheme, however, they can promote others as well. Trusting these scams can lead to serious issues, and endanger device and user safety.

Typically, access to deceptive/scam web pages is caused via redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system. Note that these apps do not need express permission to be installed onto devices.

What is basenews7[.]com?

basenews7[.]com is one of many untrusted websites that loads dubious content or redirects visitors to other bogus web pages. Some examples of other sites that operate in this way include topflownews[.]com, allow-space[.]com and belazyelephant[.]com.

Note that most users arrive at basenews7[.]com and others through similar websites and deceptive advertisements, or they are opened by installed potentially unwanted applications (PUAs). Apps of this type often gather browsing data and display ads. They are classified as PUAs, since people tend to download and install them unintentionally.

What is "International Official Lottery"?

"International Official Lottery" is a phishing scam promoted on various deceptive websites. It is presented as an online lottery, which users supposedly take part simply by entering the scam web page.

Once users attempt to collect their winnings, however, they are redirected to different websites, which steal the information entered into them (e.g. credit card and digital wallet details, email addresses and telephone numbers).

Most visits to these deceptive/scam pages occur via redirects caused by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system.

What is Kwampirs?

Kwampirs is a Remote Access Trojan (RAT), a type of malware that allows cyber criminals to control infected devices remotely. Once a RAT is connected to a computer, cyber criminals can access stored files, download malware, acquire login credentials and other personal information, and so on.

Research shows that cyber criminals behind Kwampirs target companies and organizations in various industries and attempt to access data that can be used to generate revenue.

What is the Rubly screenlocker?

Discovered by malware analyst Karsten Hahn, Rubly is screenlocker malware. It operates by locking the screen, displaying a full-screen window, and damaging the Master Boot Record (MBR) so that ransom demands can be made.

Rubly also claims to have encrypted the data stored on the infected system, which is a common characteristic of ransomware-type malicious programs.

What is KENS@TUTA.IO?

KENS@TUTA.IO was discovered by GrujaRS and belongs to the GlobeImposter ransomware family. These programs are designed to prevent victims from accessing or using their files by encryption. They also change the filenames of all encrypted files and create and/or display ransom messages.

KENS@TUTA.IO creates the "how_to_back_files.html" file and renames affected files by appending the ".KENS@TUTA.IO" extension to filenames. For example, it renames a file named "1.jpg" to "1.jpg.KENS@TUTA.IO", "2.jpg" to "2.jpg.KENS@TUTA.IO", and so on.