Virus and Spyware Removal Guides, uninstall instructions

What is PremierOpinion?

According to the developers, the PremierOpinion app monitors browsing activity. In exchange for allowing PremierOpinion to perform this function, users are supposedly rewarded with access to certain software, entries to "sweepstakes", and other benefits.

In fact, developers proliferate PremierOpinion using the "bundling" method and thus it often infiltrates systems without permission. PremierOpinion is categorized as a potentially unwanted application (PUA).

What is Your Windows Computer Is Infected With (4) Viruses!?

Identical to Your System Is Heavily Damaged By (4) Virus and Your WINDOWS 10 is infected with (3) Viruses!, "Your Windows Computer Is Infected With (4) Viruses!" is a fake error message displayed by malicious sites.

According to our research, many users are redirected to these sites by intrusive ads (displayed by other dubious sites) or potentially unwanted programs (PUPs) that infiltrate systems without permission. Causing redirects is not the only downside of PUPs.

Most deliver intrusive advertisements, gather sensitive information, and misuse system resources to run unwanted processes.

What is StevenSeagal?

StevenSeagal is a computer infection, a ransomware-type virus that belongs to the Scarab ransomware family. It was discovered by Emmanuel_ADC-Soft and is designed to block users from accessing their files by encrypting data (making it unusable).

It also blocks Task Manager to prevent victims from terminating the StevenSeagal ransomware process and renames each encrypted file using the "[random_string].stevenseagal@airmail.cc" pattern. For example, "sample.jpg" might be renamed to a filename such as "9d5sn++1ZgKVqQ.stevenseagal@airmail.cc".

It also changes the desktop wallpaper using a photo of Steven Seagal (the actor), however, he obviously has nothing do to with this infection. More details are given in the "HOW TO RECOVER ENCRYPTED FILES.TXT" ransom message that is placed in each folder containing encrypted files.

What is CmdRansomware?

Discovered by security researcher Petrovic, CmdRansomware is a ransomware virus that is designed to lock (encrypt) files, rendering them unusable until a decryption tool or key is obtained from cyber criminals. In this way, CmdRansomware is used to make ransom demands.

It renames each encrypted file by adding the ".cmd_ransomware" extension. For example, "sample.jpg" becomes "sample.jpg.cmd_ransomware". CmdRansomware victims will find a ransom-demand message in the "cmdRansomware.txt" text file.

What is PackTrackPlus?

The PackTrackPlus app is promoted as a tool that allows users to track their packages with the ability to choose from various carriers.

These features may seem useful, but this app is categorized as a potentially unwanted app (PUA). PackTrackPlus is an adware-type application that most users install inadvertently. Furthermore, it delivers intrusive advertisements and records browsing-related (and other data).

What is Risk?

Risk was discovered by Michael Gillespie and is a new variant of Dharma, a ransomware category infection. Like all the other viruses of this type, Risk is designed to encrypt files stored on an infected computer and keep them locked until cyber criminals receive a ransom payment for a decryption tool or key.

The infection renames every encrypted file by adding the ".risk" extension. For example, "1.jpg" becomes "1.jpg.id-3A4E114C.[audit@cock.li].risk" (the extension contains an email address and a unique ID). Risk also creates a text file (a ransom message) called "FILES ENCRYPTED.txt" and displays a ransom-demand pop-up window.

What is search.porterice.com?

search.porterice.com is one of many fake search engines, and very similar to search.debrikon.com, search.borderov.com, and search.parazipper.com.

Developers of this site offer a better browsing experience (improved search results, etc.), however, they promote this fake search engine using rogue download/installation set-ups that modify browser settings. Furthermore, search.porterice.com collects data relating to browsing habits/activity.

What is MacPerformance?

MacPerformance is an adware program that causes various intrusive pop-up ads. Developers claim that this app enhances Mac computer performance, however, MacPerformance is part of the OSX Pirrit adware family and categorized as a potentially unwanted, malicious application.

Therefore, many users install MacPerformance unintentionally. As well as distributing intrusive advertisements, MacPerformance records information relating to browsing activity.

What is Bip?

The Bip virus is a part of the GusCrypter ransomware virus family. This ransomware-type infection was discovered by security researcher S!Ri. Bip is designed to serve two purposes: to encrypt users' data and make ransom demands in return for a decryption key/tool.

Bip renames encrypted files by adding the ".bip" extension. For example, "1.jpg" becomes "1.jpg.bip". It also creates a .html file named "Information.html", which contains a ransom-demand message, and places a copy in each folder that contains encrypted files.

What is Lightning?

Discovered by security researcher, S!Ri, Lightning is a ransomware-type virus that belongs to the Everbe family. The main purpose of this computer infection is to encrypt victims' files (rendering them unusable) and to make ransom demands. This virus renames all encrypted files by adding the ".lightning" extension (which includes an email address).

For example, "1.jpg" becomes "1.jpg.[youhaveonechance@cock.li].lightning", and so on. It also places a ransom-demand message called "!=How_to_decrypt_files=!.txt" in each folder that contains encrypted files.