Virus and Spyware Removal Guides, uninstall instructions

What is Creeper?

Creeper is a ransomware-type virus first discovered by malware security researcher, Michael Gillespie. Once infiltrated, Creeper encrypts stored files and adds the ".creeper" extension to the name of each affected file. For example, "sample.jpg" is renamed to "sample.jpg.creeper".

Following successful infiltration, Creeper places a text file ("DECRIPT_MY_FILES.txt") on the desktop. This file contains a ransom-demand message.

What is search.hfreeformsnow.com?

Developers present Free Forms Now as a legitimate application that supposedly provides various printable document forms. Initially, these functions may appear legitimate and useful, however, Free Forms Now is categorized as a potentially unwanted program (PUP) and a browser hijacker.

There are three main reasons for these negative associations: 1) installation without users' consent; 2) promotion of a fake search engine (search.hfreeformsnow.com), and; 3) monitoring of web browsing activity.

What is HrHr?

HrHr is a newly-discovered ransomware-type virus that, once infiltrated, encrypts stored files. During encryption, HrHr adds the ".leenapidx@snakebite.com.hrhr" extension to the name of each encrypted file.

For example, "sample.jpg" is renamed to "sample.jpg.leenapidx@snakebite.com.hrhr". Following successful encryption, HrHr creates a text file ("help.txt"), placing it on the desktop.

What is inspiratiooo.com?

According to the developers, inspiratiooo.com is a legitimate Internet search engine that generates improved results and, therefore, enhances the web browsing experience.

Judging on appearance alone, inspiratiooo.com may seem legitimate and useful, however, developers promote this site using a browser-hijacking app called Inspiratiooo. Together, inspiratiooo.com and Inspiratiooo gather various data relating to browsing activity.

What is GANDCRAB?

GANDCRAB is another ransomware-type virus distributed using RigEK toolkit. Once infiltrated, encrypts most stored data and adds the ".GDCB" extension to the name of each compromised file. From this point, files become unusable. Immediately after encryption, GANDCRAB generates a "GDCB-DECRYPT.txt" file and places a copy in every existing folder.

GANDCRAB's developers have released a number of different GANDCRAB's versions. The list includes: GANDCRAB V2.0, GANDCRAB 3, GANDCRAB V5.0, GANDCRAB 5.0.2, GANDCRAB V5.0.3, GANDCRAB 5.0.4, GANDCRAB 5.0.5, GANDCRAB 5.0.7, GANDCRAB 5.0.8, GANDCRAB 5.0.9, GANDCRAB 5.1.0, GANDCRAB 5.1.4, GANDCRAB 5.1.5, GANDCRAB V5.1.6.

All of these viruses behave exactly the same - encrypt data and make ransom demands. The main differences are: added file extension, ransom text, website's design, price and cryptocurrency wallet.

What is search.hmylocaltransit.co?

My Local Transit is a browser-hijacking application that supposedly provides information about train schedules. Initially, this functionality may appear legitimate and useful, however, this PUP (potentially unwanted program) infiltrates systems without permission and tracks web browsing activity.

Furthermore, search.hmylocaltransit.co is categorized as a browser hijacker - a form of rogue software that modifies web browser settings without permission.

What is Windows Detected Potential Threats On Your Computer?

"Windows Detected Potential Threats On Your Computer" is a false error message displayed by various rogue sites. Research shows that users often visit these sites inadvertently - they are redirected by potentially unwanted programs (PUPs) that infiltrate systems without permission.

In addition to causing redirects, PUPs deliver intrusive advertisements, gather personal data, and run unwanted background processes.

What is Win an IphoneX?

"Win an IphoneX" is a scam message displayed by various deceptive websites. Research shows that, in most cases, users are redirected to these sites by potentially unwanted programs (PUPs).

Therefore, they visit them inadvertently. PUPs often infiltrate systems without permission, deliver intrusive advertisements, gather sensitive information, and even misuse system resources to run unwanted background processes.

What is Wise System Mechanic?

Developers present Wise System Mechanic as a great tool to optimize system performance. These claims often trick users into believing that Wise System Mechanic is legitimate and useful, however, it is categorized as a potentially unwanted program (PUP). This app often infiltrates systems without permission and provides no real value for regular users.

What is search.findwide.com?

WeatherTab is a deceptive application that, according to the developers, provides the latest weather forecasts. Initially, this app may seem legitimate and useful, however, this potentially unwanted program (PUP) often infiltrates systems without permission and continually records various information.

Furthermore, WeatherTab is categorized as a browser hijacker - a form of unwanted software that modifies browser options without users’ permission.