Virus and Spyware Removal Guides, uninstall instructions

What is ICP?

ICP is a newly-discovered ransomware-type infection designed to stealthily infiltrate computers and compromise data by encryption.

In doing so, ICP renames each encrypted file by appending the ".icp" extension. For instance, "sample.jpg" is renamed to "sample.jpg.icp". As well as compromising data (and rendering it unusable), ICP generates a text file called "Restore_ICPICP_Files.txt" and places a copy in every existing folder.

What is search.hloginhelper.co?

search.hloginhelper.co is a fake search engine identical to search.searchnewvfr.com, search.hgetnewsfast.com, search.hhighdefinitionradioplayer.com, and many others. Developers claim that search.hloginhelper.co significantly enhances the browsing experience by generating improved results and providing quick access to various popular websites.

These claims often trick users into believing that search.hloginhelper.co is legitimate and useful, however, developers promote this website using a browser-hijacking app called Login Helper.

In most cases, this potentially unwanted application (PUA) infiltrates computers without users’ permission and modifies browser settings. Note also that search.hloginhelper.co (and Login Helper) monitor browsing activity by recording user-system information.

What is search.searchnewvfr.com?

Identical to search.hpackage-manager.net, search.hfindyourrecipe.com, search.hroutefinder.net, and many others, search.searchnewvfr.com is a fake search engine that supposedly generates improved results and provides quick access to various popular websites.

Judging on appearance alone, search.searchnewvfr.com may seem legitimate and useful, however, developers promote the site by employing a browser hijacker called Find Free Recipes. This potentially unwanted application (PUA) usually infiltrates computers without permission.

Be aware that search.searchnewvfr.com and Find Free Recipes record user-system information relating to browsing activity.

What is "myntre.org"?

myntre.org is a deceptive website used by scammers who attempt to trick people into believing that they can win a Samsung Galaxy S9 or Apple iPhone XS smartphone.

Most people visit websites of this type unintentionally, since they are redirected by potentially unwanted applications (PUAs) - in this case, by adware-type apps. These apps usually deploy advertisements, gather information, and cause redirects to untrustworthy websites.

What is Promorad?

Promorad is another variant of high-risk ransomware called Djvu. After successful infiltration, Promorad encrypts most stored files. In doing so, this ransomware appends filenames with the ".promorad" extension. For instance, "sample.jpg" is renamed to "sample.jpg.promorad".

As well as encrypting data, Promorad creates a text file (named "_readme.txt") and places a copy in every existing folder. Updated variants of this ransomware use the ".promorad2" extension for encrypted files.

What is search.hgetnewsfast.com?

search.hgetnewsfast.com is a typical fake search engine that, according to its developers, is supposedly useful. In fact, fake search engines of this type should not be trusted. This site is promoted using a browser hijacker called Get News Fast that supposedly provides users with access to various news and live streaming websites.

In fact, this app is categorized as a potentially unwanted application (PUA) that, once installed, modifies browser settings and, together with its associated fake search engine, collects browsing-related information.

What is Auto Mac Booster?

Identical to Auto Mac Speedup, Speedup Mac Pro, Advanced Mac Booster, and many others, Auto Mac Booster is a deceptive application that, according to the developers, allows users to enhance computer performance by removing rogue applications, cleaning the cache, and so on.

Initially, Auto Mac Booster may seem legitimate and useful, however, developers promote this app using the "bundling" method. Therefore, Auto Mac Booster often infiltrates systems without permission and is categorized as a potentially unwanted application (PUA).

What is Boost My Mac?

Boost My Mac is one of many computer (Mac) optimization applications promoted as supposedly making Mac computers run smoothly and without errors. In fact, developers promote this app using the "bundling" method, and thus many people download and install it inadvertently.

Therefore, Boost My Mac is categorized as potentially unwanted application (PUA). Do not trust any PUAs.

What is Korea?

Discovered by Jakub Kroustek, Korea is a ransomware-type program and part of the Dharma ransomware family. Like most computer infections of this type, cyber criminals use Korea to encrypt files stored on the computer and make ransom demands. Therefore, people with computers infected with this ransomware are unable to access their data unless a ransom is paid.

Korea renames each encrypted file by adding the ".korea" extension (that includes the victim's ID and email address of Korea developers). For example, "1.jpg" becomes "1.jpg.id-1E857D00.[omfg@420blaze.it].korea". It also generates the "FILES ENCRYPTED.txt" file and displays a pop-up window, both of which contain information about how to restore encrypted files.

What is search.hhighdefinitionradioplayer.com?

search.hhighdefinitionradioplayer.com is a fake search engine that is presented as useful and legitimate. Developers promote it using a potentially unwanted application (PUA) called High Definition Radio Player, which is categorized as browser hijacker.

According to the developers, this app provides quick access to popular online streaming services, however, most users install these PUAs unintentionally. When installed, High Definition Radio Player modifies browser settings and records information relating to users' browsing activity.