Month June 2016

How to remove Crypt0l0cker virus and decrypt .encrypted files

Crypt0l0cker (TorrentLocker) is file-encrypting virus and ransomware that targets following countries: Australia, Austria, Canada, Czech Republic, Italy, Ireland, France, Germany, Netherlands, Korea, Thailand, New Zealand, Spain, Turkey, and the United Kingdom. For some reason it is not affecting US-based PCs. The ransom amount is 2.2 Bitcoins, which is currently about $330 GBP. Crypt0l0cker encrypts all files except ones with following extensions: avi, wav, mp3, gif, ico, png, bmp, txt, html, inf, manifest, chm, ini, tmp, log, url, lnk, cmd, bat, scr, msi, sys, dll, exe. Because those files are needed for OS operation.

How to remove NegozI ransomware and decrypt .evil files

NegozI is file-encrypting virus ransomware that uses AES-256 algorithm to encrypt your files. The ransom amount is huge 5 Bitcoins, which is currently about $3300. NegozI encrypts following file types: documents, images, game files, e-mails. Ransomware adds extension .evil to every encrypted file and also creates files "decrypt_your_files.txt" and "decrypt_your_files.html", that contain instructions to pay the ransom and decrypt files.

How to uninstall (remove) Viceice.com

Viceice.com is third-rate search engine that uses Google Custom Search. This page sets up as homepage, default search engine and opens as a newtab in Google Chrome, Mozilla Firefox and Internet Explorer. Search queries of Viceice.com show the results from cse.google.com, which are actually Google results with different look.

How to remove ByteFence Redirect

ByteFence Redirect (search.bytefence.com) is unwanted search engine installed by ByteFence applications. It overrides browser settings in Google Chrome, Mozilla Firefox and Internet Explorer and does not allow user to revert them. After uninstalling ByteFence settings remain unchanged. Although, ByteFence Anti-malware is good program, ByteFence search module is classified as potentially unwanted program and browser hijacker.

How to remove SecureCrypted virus and decrypt .SecureCrypted files

SecureCrypted (Apocalypse) is file-encrypting virus that demands ransom (0.5 and 1.5 Bitcoin) to decrypt infected files. Such type of threats is also called ransomware. After infection virus starts encrypting files of following extensions: .txt, .docx, .xlsx, .jpg, .png, .pdf and other. Those files are usually sensitive documents, photos, reports, books and other file types, that are important to regular people. Ransomware adds extension .SecureCrypted to every encrypted file and also creates files "yourfilename.Contact_Here_To_Recover_Your_Files.txt", that contains instructions to recover those files.