Virus and Spyware Removal Guides, uninstall instructions

What is gogletab.com?

gogletab.com is a dubious website claiming to be Google (a legitimate Internet search engine). The appearance of this website is virtually identical to the original Google and, therefore, users often believe that gogletab.com is legitimate.

In fact, this site is promoted using rogue software installation set-ups. Furthermore, gogletab.com is designed to gather various information regarding Internet browsing activity.

What is PokemonGo?

Cyber criminals have developed a ransomware-type virus called PokemonGo due to the current popularity of this reality game. The executable (.exe) of this ransomware is named "PokemonGo" and the icon contains Pickachu pokemon.

After system infiltration, PokemonGo ransomware encrypts various files (including, for example, .doc, .pdf, .jpeg, .html, .php, etc.) using AES cryptography. During encryption, PokemonGo appends a ".locked" extension to the name of each encrypted file.

Following successful encryption, PokemonGo displays a ransom-demand message (an image with a Pikachu pokemon and the text below) written in Arabic. It also creates a text file named "هام جدا.txt" (also containing a ransom-demand message), placing it on the victim's desktop.

What is CryptFIle2?

CryptFIle2 (also called Bandarchor) is ransomware that stealthily infiltrates systems and encrypts files using the asymmetric algorithm. This ransomware adds the .id_[VICTIM_ID]_[EMAIL].scl extension to all encrypted files (for example, [original file name]_id_[victims ID]_email_crts@dr.com_.scl or sample.jpg.id_[VICTIM_ID][zeta@dr.com].scl ).

Be aware that this ransomware generates two different keys (public and private) during encryption - 'public' to encrypt and 'private' to decrypt compromised files. The private key is stored on remote servers controlled by cyber criminals. Therefore, users must pay a ransom to receive the decryptor with an embedded private key.

What is Shark?

Shark is 'Ransomware as a Service' (RaaS) that allows regular users to create their versions of ransomware-type viruses with little or no technical knowledge. It is free for anyone to download on its official website. During encryption, Shark ransomware appends names of encrypted files with the ".locked" extension.

The list of encrypted files is stored within the "%UserProfile%\AppData\Roaming\Settings\files.ini" file. After encryption, Shark opens a ransom-demand window (victims are able to choose between 30 different language translations) containing payment instructions.

What is MyPC HealthCheck?

MyPC HealthCheck is a deceptive application that supposedly provides a solution to fix various registry errors and, therefore, improve computer performance. These claims often trick users into believing that MyPC HealthCheck is a legitimate and useful application, however, it is often distributed as a bundle with other apps.

Therefore, this app is likely to infiltrate systems without users' consent. Furthermore, MyPC HealthCheck records various information relating to users' Internet browsing activity and is, thus, classed as a potentially unwanted program (PUP).

What is search.funtabsafesearch.com?

search.funtabsafesearch.com is a fake Internet search engine that claims to generate improved search results and provide quick access to a number of popular websites (for example, Amazon, Facebook, Gmail, etc.).

Many users believe that this website is legitimate and useful, however, developers promote search.funtabsafesearch.com using a deceptive marketing method called "bundling". Furthermore, this website continually gathers information relating to users' Internet browsing activity.

What is search.mysearch.com?

Sports Addict is a rogue browser extension that supposedly provides the latest sport-related news. Initially, this functionality may appear legitimate and useful, however, Sports Addict often infiltrates systems without users’ permission. Furthermore, this app causes unwanted browser redirects and collects various user/system data.

For these reasons, Sports Addict is classed as a potentially unwanted program (PUP) and a browser hijacker.

What is BSOD Driver Problem?

"BSOD Driver Problem" is a false error message displayed by a rogue website. It claims that the operating system has been infected and that there are some issues regarding system drivers.

This error imitates the "Blue Screen of Death [BSOD]". The website that displays this error is promoted using various adware-type applications - users consequently encounter unwanted browser redirects. Furthermore, these apps usually track Internet browsing activity and deliver intrusive online advertisements.

What is asearch.online?

Asearch.online is a rogue site claiming to be a legitimate Internet search engine. Judging on appearance alone alone, asearch.online may seem very similar or even identical to Google, Bing, Yahoo, and other similar legitimate search engines. Therefore, users may believe that asearch.online is also legitimate.

In fact, asearch.online records various information relating to users' Internet browsing activity. Furthermore, this rogue site is promoted using deceptive software download/installation set-ups that hijack web browsers and stealthily modify various options.

What is MaxPerforma?

MaxPerforma is a deceptive application that supposedly improves computer performance by deleting various junk files, optimizing Windows startup settings, and providing other similar features. These claims often trick users into believing that MaxPerforma is a legitimate application, however, this app often infiltrates systems without users' consent.

Furthermore, it tracks users' Internet browsing activity and can also display fake errors. Therefore, MaxPerforma is categorized as a potentially unwanted program (PUP).