Virus and Spyware Removal Guides, uninstall instructions

What is Internet Security Damaged?

Internet Security Damaged is a fake error message displayed by a malicious website and identical to You Have a ZEUS virus and You Have A ALUREON Virus. 

Users are redirected to the Internet Security Damaged website by rogue adware-type applications that infiltrate the system during installation of various (usually free) software. As well as causing redirects, adware-type apps deliver intrusive online advertisements and track web browsing activity.

What is ApolloLocker?

Discovered by MalwareHunterTeam, ApolloLocker is a ransomware-type virus that stealthily infiltrates systems and encrypts stored data.

In doing so, ApolloLocker appends filenames with the ".locked" extension (for example, "sample.jpg" is renamed to "sample.jpg.locked"). Following successful encryption, ApolloLocker creates two files ("DOSYALARI-KURTAR [number].txt" and "DOSYALARI-KURTAR [number].url", [number] = 0,1,2), placing them on the desktop.

What is DilmaLocker?

DilmaLocker is ransomware-type malware discovered by xXToffeeXx. Following successful infiltration, DilmaLocker encrypts files using AES-256 cryptography. During encryption, this malware appends filenames with the ".__dilmaV1" extension. For example, "sample.jpg" is renamed to "sample.jpg.__dilmaV1".

After successfully encrypting files, DilmaLocker creates three additional files ("RECUPERE_SEUS_ARQUIVOS.html", "background.bmp " and "dilminha.dat"), placing them on the desktop. It then opens a pop-up window and sets the .bmp file as the desktop wallpaper.

What is startme.online?

Identical to launchpage.org, startme.online is a fake Internet search engine that falsely claims to generate improved results, thereby enhancing the browsing experience.

These claims often trick users into believing that startme.online is legitimate and useful, however, this website is promoted using rogue download and installation set-ups that hijack web browsers and stealthily modify various options. In addition, startme.online continually gathers various information relating to users' browsing activity.

What is History Cleaner?

Identical to NoterSave, Search In Tabs, Always Weather, and many others, History Cleaner is a deceptive application that supposedly allows users to delete their Internet browsing history.

Initially, History Cleaner may appear legitimate and useful, however, it is classed as a potentially unwanted program (PUP) and adware. Be aware that this PUP often infiltrates systems without permission. Furthermore, it continually gathers various user-system information and delivers intrusive online advertisements.

What is ShoppyTool?

ShoppyTool is a dubious app identical to SmartShoppy, ShopTool, WebShoppers, and several other programs. All claim to save time and money while shopping online. Promises to provide coupons and notifications of special deals/discounts available on a variety of online stores often trick users into believing that ShoppyTool is a legitimate program.

In fact, this program is classed as adware and a potentially unwanted program (PUP).

One of the main reason for these negative associations is stealth installation - ShoppyTool is distributed using a deceptive marketing method called "bundling" and, thus, it often infiltrates systems without users' consent. Furthermore, ShoppyTool gathers various user/system information and delivers a variety of intrusive advertisements.

What is Hacked?

Hacked is a ransomware-type virus discovered by malware security researcher, Lawrence Abrams. Once infiltrated, Hacked imitates the Windows Update process, however, it actually encrypts stored data using RSA-4096 cryptography.

During encryption, this malware appends the ".hacked" extension to the name of each encrypted file (for instance, "sample.jpg" is renamed to "sample.jpg.hacked").

Following successful encryption, Hacked opens a pop-up window and creates five text files ("@readme_English.txt", "How_to_decrypt_files.txt" [same content as in "@readme_English.txt"], "@Leggimi_decrypt_Italian.txt", "@Readme_Spanish.txt", and "@Readme_turkish.txt") and an image file ("hacked.jpg").

What is search.search-settings.com?

Developers present search.search-settings.com as a "top-notch" Internet search engine that supposedly enhances the browsing experience by generating improved results. On initial inspection, this site may seem similar to Google, Yahoo, Bing, and other legitimate search engines. Therefore, many users believe that search.search-settings.com is also legitimate and useful.

This site is promoted using a deceptive application called Search Settings, which claims to allow users to switch between search engines. In fact, Search Settings is designed to stealthily infiltrate systems, modify web browser options, and record various user-system information. Therefore, it is categorized as a potentially unwanted program (PUP) and a browser hijacker.

What is WalletBee?

Created by DealPly Technologies Ltd, WalletBee is a rogue application that claims to save time and money by enabling coupons, comparison shopping, and displaying special discounts/deals available on shopping websites.

On initial inspection, this may appear to be a useful and legitimate browser add-on, however, be aware that WalletBee is categorized as a potentially unwanted program (PUP) or adware.

The developers of this rogue extension employ a deceptive software marketing method called 'bundling' (stealth installation of additional applications together with the chosen software) to install WalletBee on computers, and therefore, most users inadvertently install this PUP without their knowledge or consent.

Following successful infiltration, Walletbee generates numerous intrusive online advertisements including, for example, banner and text-link ads. It is highly probable that clicking these advertisements will lead to high-risk adware or malware infections.

What is NoterSave?

NoterSave is a rogue application that supposedly allows users to create and organize various notes. Initially, this functionality may seem legitimate and useful, however, this app is categorized as a potentially unwanted program (PUP) and adware.

The main reasons for these negative associations are: 1) stealth installation without consent; 2) tracking of users' Internet browsing activity, and; 3) display of intrusive online advertisements.