Step-by-Step Malware Removal Instructions

Online Searcher Browser Hijacker
Browser Hijacker

Online Searcher Browser Hijacker

Online Searcher is classified as a browser hijacker because it promotes a fake search engine (tailsearch.com) by modifying certain browser settings. Furthermore, this app collects browsing data. Online Searcher and similar apps are categorized as potentially unwanted applications (PUAs), since man

PayPal Desktop App Scam
Trojan

PayPal Desktop App Scam

PayPal is an American company operating a worldwide online payments system. Cyber criminals commonly exploit names of well-known companies, products and services for malicious purposes. In this particular case, they use a fake download website for the PayPal desktop application to trick users into

GlobalMovieSearch Browser Hijacker
Browser Hijacker

GlobalMovieSearch Browser Hijacker

GlobalMovieSearch is rogue software categorized as a browser hijacker. Following successful infiltration, it makes alterations to browser settings to promote globalmoviesearch.com (a fake search engine). Additionally, browser hijackers can track and collect browsing-related information. Furthermo

WebSearchConverter Browser Hijacker
Browser Hijacker

WebSearchConverter Browser Hijacker

WebSearchConverter is one of many browser hijackers that promote fake search engines by modifying certain browser settings. This particular app promotes the websearchconverter.com address. Additionally, WebSearchConverter can read data relating to users' browsing activities. In most cases, users

iPhone 12 Email Virus
Phishing/Scam

iPhone 12 Email Virus

"iPhone 12 email virus" refers to a malware-spreading spam email campaign. The term "spam campaign" is used to define a mass-scale operation, during which thousands of scam emails are sent. The deceptive messages distributed through this spam campaign concern a fake order of an iPhone 12, which ha

XinFrams Screenlocker
Ransomware

XinFrams Screenlocker

XinFrams prevents victims from accessing the operating system (restricts login and file access) by locking the screen. It displays a ransom message that contains instructions about how to pay a ransom to the developers plus various other details. Note that XinFrams is non-encrypting malware - it r

ClickMovieSearch Browser Hijacker
Browser Hijacker

ClickMovieSearch Browser Hijacker

Apps such as ClickMovieSearch promote fake search engines by modifying certain browser settings. This particular apps assigns the settings to clickmoviesearch.com. ClickMovieSearch also promotes a fake search engine and gathers details relating to users' browsing habits. Typically, users download

Nsemad Ransomware
Ransomware

Nsemad Ransomware

Nsemad is a malicious program, which is part of the Snatch ransomware family. It is designed to encrypt data and demand payment for decryption. During the encryption process, all compromised files are appended with the ".nsemad" extension. For example, a file originally titled something like "1.jp

HOTEL Ransomware
Ransomware

HOTEL Ransomware

HOTEL is part of the Phobos ransomware family. This malware encrypts files, modifies their filenames, and generates two ransom messages ("info.hta" and "info.txt"). HOTEL renames files by adding the victim's ID, ICQ_username of its developers, and appending the ".HOTEL" extension to filenames. Fo

SUKA Ransomware
Ransomware

SUKA Ransomware

Discovered by Jakub Kroustek, SUKA is malicious software belonging to the Dharma ransomware family. Systems infected with this malware experience data encryption and users receive ransom demands for decryption. During the encryption process, all affected files are renamed following this pattern: