Virus and Spyware Removal Guides, uninstall instructions

What is XCrypt?

XCrypt is a ransomware-type virus discovered by Jakub Kroustek. Following successful infiltration, XCrypt encrypts various data. Unlike other ransomware, however, this virus does not rename encrypted files or append alternative extensions. Once files are encrypted, XCrypt creates an image ("Help.jpg") placing it in each folder containing encrypted files.

What is RansomPlus?

RansomPlus is a ransomware-type malware discovered by Jiri Kropac. Following infiltration, RansomPlus encrypts files, compromising them and appending their names with the ".encrypted" extension. For instance, "sample.jpg" is renamed to "sample.jpg.encrypted".

Following successful encryption, RansomPlus creates a text file ("YOUR FILES ARE ENCRYPTED!!!.txt") containing a ransom-demand message, placing it in each folder containing encrypted files .

What is "Ads by Tom"?

Advertisements marked as "Ads by Tom" are displayed via rogue adware-type applications distributed using a deceptive software installation set-up (bundling method). Following successful infiltration, this adware delivers intrusive online ads and continually tracks Internet browsing activity by gathering various user/system information.

What is hp.myway.com?

PasswordLogic is a rogue application that supposedly helps to generate secure passwords. This functionality may seem legitimate and useful, however, PasswordLogic often infiltrates systems without users' consent.

In addition, this app stealthily modifies web browser settings and continually gathers information relating to users' Internet browsing activity. For these reasons, PasswordLogic is categorized as a browser hijacker and a potentially unwanted program (PUP).

What kind of malware is Potato?

Potato is a ransomware-type virus that infiltrates systems and encrypts various files. This malware was first discovered by security researcher Michael Gillespie and is designed to use the AES-256 encryption algorithm.

During encryption, Potato appends filenames with the ".potato" extension (for example, "sample.jpg" is renamed to "sample.jpg.potato"). Following encryption, this ransomware creates two files ("README.png" and "README.html") that contain a ransom-demand message and places them on the desktop.

What is hp.myway.com?

DirectionsAce is a rogue application developed by Mindspark Interactive Network. This app supposedly provide GPS functionality and, therefore, many users believe that it is legitimate and useful. In fact, this app is classed as a potentially unwanted program (PUP) and a browser hijacker.

There are three main reasons for these negative associations: 1) installation without users' consent; 2) stealth modification of browser settings, and; 3) tracking of Internet browsing activity.

What is ntpo.com?

Developers present ntpo.com as an improved Internet search engine that enhances the Internet browsing experience by generating better search results.

Judging on appearance alone, ntpo.com may appear legitimate and useful, however, developers promote this rogue site by employing deceptive download/installation tools designed to modify Internet browser settings without permission. Furthermore, ntpo.com continually records various data relating to users' Internet browsing activity.

What is luckypage123.com?

Identical to luckystarting.com, fullsearching.com, mylucky123.com, and many other sites, luckypage123.com is a fake Internet search engine that falsely claims to enhance the Internet browsing experience by generating improved search results. 

Judging on appearance alone, luckypage123.com may seems legitimate, however, developers promote this rogue site via deceptive download/installation set-ups designed to modify browser settings without permission. Furthermore, luckypage123.com gathers various data relating to users' Internet browsing activity.

What is foodkia.com?

foodkia.com is a fake Internet search engine identical to tavanero.info, climbon.top, mystartpage1.ru, and many other sites. Judging on appearance alone, foodkia.com may seem similar to Google, Yahoo, Bing, and other legitimate search engines.

Therefore, many users believe that foodkia.com is also legitimate and useful. In fact, this website continually records data relating to Internet browsing activity. In addition, developers promote it via rogue download/installation set-ups that hijack web browsers and modify browser options without users' consent.

What is Cryptorium?

Cryptorium is a ransomware-type virus that encrypt files and appends the ".ENC" extension to the name of each compromised file (for example, "sample.jpg" is renamed to "sample.jpg.ENC"). Following successful encryption, Cryptorium opens a pop-up window containing a ransom-demand message.