Virus and Spyware Removal Guides, uninstall instructions

What is PC Boost Pro?

PC Boost Pro is promoted as a registry cleaner, memory booster, and junk cleaner. Developers claim that it is designed to make computers faster and cleaner. What they do not mention is that PC Boost Pro is a malicious program known as Trojan.Clicker. This is a tool that cyber criminals use to perform 'click fraud'.

What is "CVE-2019-1663"?

"CVE-2019-1663" is the name of a 'sextortion' scam that is used to blackmail people by threatening to leak humiliating/compromising photos. To prevent this, recipients are encouraged to pay a specific amount in a cryptocurrency. There are many emails of this type online, none of which should be trusted. If received, they should be ignored and deleted.

What is "Microsoft detected malicious virus and blocked your computer"?

"Microsoft detected malicious virus and blocked your computer" is one of many technical support scams designed to trick people into believing that their systems are infected. Scammers use them to extort money from unsuspecting people by encouraging them to call the telephone number provided. These scams appear on various dubious, untrustworthy websites.

People do not generally open them intentionally - often, potentially unwanted apps (PUAs) installed on their systems open these web pages. In addition to unwanted redirects, PUAs usually gather information and serve users with intrusive ads.

What is "Cameras and a mic start recording"?

Scammers use the "Cameras and a mic start recording" spam campaign/scam to trick people into transferring cryptocurrency funds to them. They claim that they have recorded a compromising video of the recipient and threaten to share it with other people unless their demands are met. This spam campaign is a typical sextortion scam that should not be trusted.

What is Bitrep?

Bitrep (also known as Trojan: Win32/Bitrep.A) is a trojan-type infection that infiltrates the system and performs various malicious tasks. Note that trojans of this type infiltrate computers stealthily, without users' consent. Cyber criminals often proliferate them using other trojans (chain infections) and malicious websites.

The presence of Bitrep might cause a number of issues. However, it is very important to note that anti-virus suites may detect this threat even though its a false positive. For instance, Windows Defender has been detecting legitimate Chromium browser builds as Bitrep trojan.

False positive detections typically occur due to inaccurate entries in malware databases, which lead to detection of legitimate files/data as viruses.

What is Registry Mechanic?

The Registry Mechanic program supposedly allows computers to run faster and also cleans them. According to the developers, it can improve computer performance by removing junk files, fixing and cleaning the registry, and optimizing browsers. In fact, this is a malicious program known as Trojan.Clicker, a tool used for 'click fraud'. Registry Mechanic is simply a name used to disguise the real purpose of this program.

What is Microsoft Cleaner?

Microsoft Cleaner is promoted as a program that cleans junk files, boosts memory, cleans and fixes the registry, optimizes browsers, and so on. Developers present it as a legitimate system optimization tool, however, it also operates as a Trojan.Clicker, a malicious program used to perform 'click fraud'. This application has nothing to do with the Microsoft company.

What is DDOS?

Discovered by Jakub Kroustek, DDOS is yet another ransomware infection from the Dharma family. DDOS is designed to stealthily infiltrate the system and encrypt most stored files. During encryption, DDOS renames each file by appending the ".DDOS" extension plus the victim's unique ID and developer's email address.

For example, "1.jpg" might be renamed to a filename such as "1.jpg.id-1E857D00.[decripted@cock.li].DDOS". As with other ransomware from the Dharma family, DDOS opens a pop-up window and stores a text file ("RETURN FILES.txt") on the desktop.

What is search.hbible-verses.app?

Bible Verses is promoted as a useful app that provides verses from the Bible, however, it is actually a potentially unwanted application (PUA) that operates as a browser hijacker. It promotes search.hbible-verses.app, a dubious (fake) search engine by making changes to browser settings.

It also collects information relating to users' browsing activity. Do not trust or use this search engine or any apps of this type.

What is PLUT?

The PLUT program was discovered by Jakub Kroustek and belongs to the Dharma ransomware family. This software is used to encrypt data and block access to it until a ransom is paid. Ransomware victims are forced to purchase a decryption tool/key. Furthermore, PLUT adds the ".PLUT" extension to every encrypted file.

For example, "1.jpg" might be renamed to a filename such as "1.jpg.id-1E857D00.[adolfhackler@tutanota.com].PLUT" (it adds the developer's email address and victim's ID). A ransom message can be found within a file called "RETURN FILES.txt". PLUT also displays a message in a pop-up window.