Virus and Spyware Removal Guides, uninstall instructions

What is hp.myway.com?

Developed by Mindspark Interactive Network, MyDIYGenie is a deceptive application that supposedly provides access to hundreds of tutorials on a wide variety of subjects. Judging on appearance alone, MyDIYGenie may appear legitimate and useful, however, this app is categorized as a potentially unwanted program (PUP) and a browser hijacker.

There are three main reasons for these negative associations: 1) installation without consent; 2) stealth modification of web browser settings, and; 3) tracking of users' Internet browsing activity.

What is hp.myway.com?

OnlineWorkSuite is a deceptive application that supposedly allows users to edit various documents, e.g. spreadsheets, word documents, presentations, etc. Judging on appearance alone, OnlineWorkSuite may seem legitimate and useful, however, this rogue software often infiltrates systems without permission.

In addition, it stealthily modifies web browser settings and continually records information relating to users' Internet browsing activity. For these reasons, OnlineWorkSuite is categorized as a potentially unwanted application (PUA) and a browser hijacker.

What is go.mail.ru?

go.mail.ru (or inline.go.mail.ru) is a deceptive website claiming to be a legitimate Internet search engine that generates improved search results. Some users believe that go.mail.ru is legitimate and useful, however, this site continually monitors web browsing activity.

Furthermore, developers promote it by employing deceptive software download/installation set-ups designed to modify browser options without permission.

What is Cry9?

Cry9 is an updated version of a ransomware-type virus called CryptON. Criminals proliferate this malware via RDP (remote desktop services) brute force attacks, which allow them to hijack computers and execute the malicious ransomware installer. Following infiltration, Cry9 encrypts various files using RSA and AES cryptographies.

During encryption, it appends filenames with one of the extensions listed below. Following successful encryption, this rogue software changes the desktop wallpaper and creates an HTML file ("### DECRYPT MY FILES ###.html"), placing it in each folder containing encrypted files.

What is onclkds.com?

Identical to Wizzcaster, onclkds.com is an advertising network used by a variety of deceptive apps that often claim to provide a variety of 'useful features'. By delivering these promises, rogue apps attempt to give the impression of legitimacy, however, they often infiltrate systems without users' consent.

Furthermore, they deliver intrusive online advertisements and collect personal data. Ads that employ the onclkds.com network are categorized as potentially unwanted programs (PUPs) and adware.

What is hp.myway.com?

The EasyPDFCombine application is advertised as an application that allows users to combine PDF files, convert file formats, translate text, and access a dictionary. However, it functions as a browser hijacker (changes the browser's settings to promote a fake search engine).

Typically, apps like EasyPDFCombine can hijack  Internet Explorer, Google Chrome, and Mozilla Firefox browsers.

Also, it is common for them to be designed to collect various data. It is important to know that most users download and install browser hijacker unknowingly, for this reason EasyPDFCombine and other apps of this type are called potentially unwanted applications (PUAs).

What is BitKangoroo?

Discovered by Lawrence Abrams, BitKangoroo is a ransomware-type virus that stealthily infiltrates systems and encrypts various data using AES-256 cryptography.

During encryption, this malware appends filenames with the ".bitkangoroo" extension (for example, "sample.jpg" is renamed to "sample.jpg.bitkangoroo"). Following successful encryption, BitKangoroo opens a pop-up window with a ransom-demand message.

What is launchpage.org?

Developers present launchpage.org as an improved Internet search engine that supposedly enhances the Internet browsing experience by generating better search results. Judging on appearance alone, launchpage.org barely differs from Yahoo, Bing, Google, and other legitimate search engines.

Therefore, many users believe that launchpage.org is also legitimate and useful. In fact, this rogue site gathers various information relating to users' Internet browsing activity. Furthermore, developers promote launchpage.org via rogue download/installation set-ups that modify web browser settings without permission.

What kind of malware is ThunderCrypt?

ThunderCrypt is a ransomware-type virus distributed via fake Adobe Flash Player updates. Once infiltrated, ThunderCrypt encrypts various data using RSA-2048 (asymmetric) cryptography.

Unlike other ransomware, this virus does not append names of compromised files with any extension. Following successful encryption, ThunderCrypt opens a pop-up window containing a ransom-demand message.

What is searchy.online?

Developers present searchy.online as an Internet search engine that significantly enhances the browsing experience by generating improved results.

Judging on appearance alone, searchy.online may appear legitimate and useful, however, developers promote it by employing rogue download/installation set-ups that hijack web browsers and modify various options without consent. Furthermore, searchy.online continually records various information relating to users' Internet browsing activity.