Step-by-Step Malware Removal Instructions

Go.mail.ru Redirect
Browser Hijacker

Go.mail.ru Redirect

go.mail.ru (or inline.go.mail.ru) is a deceptive website claiming to be a legitimate Internet search engine that generates improved search results. Some users believe that go.mail.ru is legitimate and useful, however, this site continually monitors web browsing activity. Furthermore, developers

Cry9 Ransomware
Ransomware

Cry9 Ransomware

Cry9 is an updated version of a ransomware-type virus called CryptON. Criminals proliferate this malware via RDP (remote desktop services) brute force attacks, which allow them to hijack computers and execute the malicious ransomware installer. Following infiltration, Cry9 encrypts various files u

Onclkds.com Ads
Adware

Onclkds.com Ads

Identical to Wizzcaster, onclkds.com is an advertising network used by a variety of deceptive apps that often claim to provide a variety of 'useful features'. By delivering these promises, rogue apps attempt to give the impression of legitimacy, however, they often infiltrate systems without users

EasyPDFCombine Toolbar
Browser Hijacker

EasyPDFCombine Toolbar

The EasyPDFCombine application is advertised as an application that allows users to combine PDF files, convert file formats, translate text, and access a dictionary. However, it functions as a browser hijacker (changes the browser's settings to promote a fake search engine). Typically, apps like

BitKangoroo Ransomware
Ransomware

BitKangoroo Ransomware

Discovered by Lawrence Abrams, BitKangoroo is a ransomware-type virus that stealthily infiltrates systems and encrypts various data using AES-256 cryptography. During encryption, this malware appends filenames with the ".bitkangoroo" extension (for example, "sample.jpg" is renamed to "sample.jpg.

Launchpage.org Redirect
Browser Hijacker

Launchpage.org Redirect

Developers present launchpage.org as an improved Internet search engine that supposedly enhances the Internet browsing experience by generating better search results. Judging on appearance alone, launchpage.org barely differs from Yahoo, Bing, Google, and other legitimate search engines. Therefor

ThunderCrypt Ransomware
Ransomware

ThunderCrypt Ransomware

ThunderCrypt is a ransomware-type virus distributed via fake Adobe Flash Player updates. Once infiltrated, ThunderCrypt encrypts various data using RSA-2048 (asymmetric) cryptography. Unlike other ransomware, this virus does not append names of compromised files with any extension. Following succ

Searchy.online Redirect
Browser Hijacker

Searchy.online Redirect

Developers present searchy.online as an Internet search engine that significantly enhances the browsing experience by generating improved results. Judging on appearance alone, searchy.online may appear legitimate and useful, however, developers promote it by employing rogue download/installation

ActionClassicGames Toolbar
Browser Hijacker

ActionClassicGames Toolbar

ActionClassGames is a deceptive application that supposedly allows users to play various addictive Flash games. Judging on appearance alone, this app may appear legitimate and useful, however, ActionClassGames is categorized as a Potentially Unwanted Application (PUA) and a browser hijacker. Ther

Extractor Ransomware
Ransomware

Extractor Ransomware

Discovered by malware security researcher, xXToffeeXx, Extractor is a ransomware-type virus. Once infiltrated, Extractor encrypts various files and appends the names of each compromised file with the ".xxx" extension. For example, "sample.jpg" is renamed to "sample.jpg.xxx". Extractor then create