This is emergency, I need help to get rid of this virus, Exploit:Java/Obfuscator.P, it’s very tricky and pesky, I don’t know how my computer end up being infected by it, and the antivirus program can’t handle this problem! I was fail to remove it from different way, I believe someone on the internet could help me with this issue, so, if you see this, please help!? 

Brief Introduction to Exploit:Java/Obfuscator.P

Exploit:Java/Obfuscator.P is a malicious Trojan and also a potentially unwanted program. Most of the time, victims whose computer got infected by this virus from download manager and third-party software, it may disguise as a useful program, then some people might download it without considering if that’s a trick or not, to err is human, we all made rookie mistake before! OK, back to the point, this virus is very tricky, once it can install on the computer without user’s permission, most of the victims would not notice that, after that, the cyber criminals who made this unwanted program will deploy it more rapidly to harm the systems, that’s only the beginning!   Read the rest of this post »

Published by Tony Shepherd on October 12, 2014 5:50 am

I don’t usually pay attention to viruses like most people on the Internet, but but I wouldn’t be surprised. Now I have the Trojan:Win32/Pocfyx.B virus on my desktop computer. It is quarantined under Microsoft Security Essentials while the scan is running. However, I’m not sure if the virus can be killed completely by scan. How can I check it? Any advice?

Trojan:Win32/Pocfyx.B Virus Description:

Trojan:Win32/Pocfyx.B is a dangerous and stubborn Trojan virus that is able to modify crucial system settings, make computer operate improperly and even severely damage the computer. Once this Trojan virus gets on your computer, it will conduct numbers of malicious activities immediately. Your antivirus software will warn you that your computer is under a high risk and show you those infected files location, but it is too late and your computer has been infected with this virus. It has been in your system. Once Trojan:Win32/Pocfyx.B is installed on the targeted computer, it will implant its aggressive executable files or plugins into system and meanwhile copy itself to system loopholes. Thus it can deeply root in the operating system and stand firmly on infected computer. It modifies important system files and registry entries. It corrupts and disables key system file, process, registry and start-up item even replace or delete directly these crucial stuff things. And many infected .exe files like dllhose.exe will run and take up massive CPU and you even cannot close or remove them. Due to the dllhose.exe, your computer will slow down soon. Trojan horse virus occupies lots of computer system resources which will make computer run very slowly and even disrupt the system. When you try to run some programs, you will get a message saying “No response” for a long time or “Fail to continue due to insufficient memory”. It may also disable the mouse and keyboard to completely block you access your computer. To avoid more damage your computer may get, you should remove Trojan:Win32/Pocfyx.B virus as soon as possible if you see warning from antivirus. However, it can root deeply in the system. Even though some antivirus can stop it for a short time, this stubborn Trojan virus still has the ability to regenerate soon. Therefore, to remove it completely, you need to remove it manually.

Read the rest of this post »

Published by Tony Shepherd on October 12, 2014 5:01 am and last modified on May 27, 2015 5:33 am.

Some FBI site pop on my screen saying I was a criminal and I should pay 500.00 dollars in three days. I was browsing and things kept popping up up. I search online just know I got the FBI Prism Virus on my phone and I don’t know how to remove it?

I have a Samsung note 4 and downloaded a video player and it has a FBI prism virus warning page and locked up my phone, and the notice on the screen is about watching illegal porn. I haven’t. How can I fix this? I have read about this virus which can hack into sensitive files. I have a Samsung Galaxy S5 which was blocked by the Prism ransomware yesterday. I was on my cell phone going thru the internet saving some bookmarks and downloading a few videos, all of a sudden I picked up this Prism virus on my Android phone. All I saw on the phone screen is the Prism warning message saying “Your Phone has been blocked”. It claimed that I was accused by cyber security and required to pay a fine of $300 to unlock device. Is it a real police alert or fake one? Am I really involved in a cybercrime? How do I get rid of this Prism warning message from my android phone? I need my cell phone unlocked as i have important pictures on it. I really need help! Any Android phone unlock guide will be highly appreciated.

A Description of Phone Locked by Prism Virus Scam

The Prism Virus, also known as NSA Internet Surveillance Program Scam, is a horrible Ransomware virus scam that is designed by cyber criminals to perform malicious actions on target devices. Apart from targeting computers and mac machines, this Prism virus has been changed into different variants such as FBI Department of Defense virus, AFP Crime Commission virus, Interpol virus and GVU Ukash Virus etc., which are capable to affect Android devices of different brands like Samsung Galaxy, HTC and Motorola and so on. Cyber criminals have well explored the phone market and found out loopholes of mobile devices, which makes this virus scam possible to target phone users all over the world. These cyber hackers obtain tricky tactics to distribute this PRISM virus through network. So phone users may pick up this prism scam on your phones running with Android and Mac OS X accidentally during your Internet searches. For example, you may be hit by this alert when you read e-books, make e-payment and visit doubtful sites on your smartphones. Upon arrival, the malware can be downloaded on your Android phone automatically. It blocks up your Android device and demands you to pay a fine of $300 to unlock device. However, this Prism alert is totally fake and false, only to trick you into its scam. Indeed, the Prism virus should be removed from your Android phones (Samsung, HTC and Motorola) immediately.
Read the rest of this post »

Published by Tony Shepherd on October 11, 2014 9:54 am and last modified on January 24, 2017 8:24 am.

Oh crap, this is my second time my computer was infected by an adware, this time the name is DownPay, I don’t even remember the name of last one, I think they are largely identical but with minor differences, but my antivirus took care the last one, I don’t understand why it could not deal with the similar situation this time? It told me this thing need to be removed manually, I tried, and I failed. I guess it will need some expert skill, that’s why I’m here, on the internet, ask for help, anyone who could give me some advice, I’ll be grateful, thank you!

Brief Introduction to DownPay Adware

DownPay, from this name, if you have some experience with computer virus, you can easily guess that’s adware from preliminary judgment. And yes, like many other adware or hijackers, many other free software will be bundled with it, mostly these resources will hide in vicious websites or third party market. The point of this adware is to show endless coupons, popup ads and all those information about commercial products which could be very annoying to victims, actually, in the first place, from these sites you are visiting and competitive prices when you are viewing product pages at sites, you may think this is a useful service like Amazon or something like that, in fact it will not like you think as it is, you will badly harm you computer is you don’t pay enough attention. Read the rest of this post »

Published by Tony Shepherd on October 10, 2014 11:15 pm

Hey, my son download what he thought was an Adobe flash Player to his MacBook, but actually it was a malware, I guess. Now he keeps receiving pop-up ads from Tikotin.com. I have helped him to download AVG and Avast protection, but neither can catch it and kill it. I am sure there is one infection on his computer to throw those junk ads, but I don’t know how to help my son at all now. My son needs it urgently to finish his homework on this MacBook now, because all his study materials is on it and tomorrow he will bring it back to school. Could you please help us soon to detect the virus and remove it completely?

Description of Tikotin.com Hijacker

Now many PC users also are disturbed by this Tikotin.com while surfing on the Internet. Here, we will let you know that Tikotin.com is actually a kind of browser hijacker which is nasty and annoying. It can escape from security tool detection and sneak into your computer, and take control of the targeted browser like Internet Explorer, Mozilla Firefox, and Google chrome and so on. It adds its extension or plugin to browser setting. Next it changes homepage and default search engine to Tikotin.com. When the browser is taken controlled by this browser hijacker, it will redirect your unknown or malicious webpage if you enter those favorite website URLs. And also this browser hijacker cannot provide you with any correct search results for whatever you want to look up on the Internet. Instead, you just get those unrelated or sponsored links. Don’t visit those malicious websites where it redirects you to or click those links, because there are many infections on malicious websites and inserting into those sponsored links. If you really do it, you may bring many other infections to mess up your computer. In this case, your computer will in a poor condition and infected with viruses. And processes of viruses will take up the rest system capacity. The operating system will load more processes which will cause slower performance. In a word, Tikotin.com hijacker will create more troubles to your computer, and removing it at once is the wise decision to avoid further damages.

Read the rest of this post »

Published by Tony Shepherd on October 10, 2014 9:01 pm

My computer was affected by this Win32/Archost.A virus while I was clicking on a pop-up ads. I got weird symptoms of the computer after picking up this Trojan horse. I ran security scans through the whole system, but I found it unable to pick up the Trojan infection. Shall I try any other type of anti-virus software? If not, how to delete the Trojan virus from my computer? Please follow removal guide below to deal with the Trojan virus manually and safely.

Information about Win32/Archost.A Virus:

Win32/Archost.A is a horrible Trojan horse which may also be detected as Trojan.Win32.Reconyc.cfdf. The Trojan horse is designed by cyber criminals who attempt to violate your privacy and compromise your security. Once the Trojan virus gets into your computer, it just performs malicious actions on the contaminated system. Upon initializing, the Trojan takes over the whole system and triggers annoying troubles to PC users. It can exploit your system vulnerabilities to bring harmful adware, worms and malware to the system. Moreover, the Trojan virus runs in the background of the computer to make chaos. It randomly modifies your system files and entries and creates risky items in your system. With this Trojan virus, your computer appears to suffer from system stuck and constant freezes. PC users can be freaked out at surfing the web, playing games and watching videos on such a slow computer. Aggressive as the Trojan is, it blocks your security protections to make them unable to deal with any type of computer threats entirely. Consequently, the Trojan horse should be removed manually with sufficient computer skills.
Read the rest of this post »

Published by Tony Shepherd on October 10, 2014 1:20 pm

This spidersearch.net replaces my homepage on my Google Chrome, I used to set Google as my homepage but this thing change it. It looks like a legit website that provides the same thing like Google does. But after I used it for several times, I figured out it is not a good stuff at all as what I want to find is the answer for my work, but it gives me tons of advertisements. However, it is impossible for me to set Google to be my homepage again. What should I do?

Brief Introduction to This Website

Spidersearch.net has been reported by many victims that it utilizes a forged name and disguised interface to cheat people. The only purpose of these tricks is to hoax people to convince it is a kind of web page that visitors can use to do online search. From the appearance of it, people users can only find a search box and few quick links to some social websites. From the first sight, no one will disagree that it is an online search engine. However, the fact is totally beyond users’ thoughts, it is classified as a browser hijacker that designed by cyber criminals who want to exploit this infection to achieve their evils goal from innocent computer users. Read the rest of this post »

Published by Tony Shepherd on October 10, 2014 5:42 am and last modified on October 14, 2014 5:53 am.

Today is my unlucky day, I got an emergency situation earlier this morning, my computer was infected by TROJ_CRYPTFILE.SM. To by honesty, I don’t know how I got this virus in my system in the first place, it doesn’t matter, I was told by a technician before, it’s inevitable to get virus sooner or later as long as you surf the internet, since my antivirus cannot solve this one, I guess I should search for help from internet first, if it does work out either, then I will have to fix it in a local shop. So anyone who happens to know about this stuff, can you please help? 

Brief Introduction to TROJ_CRYPTFILE.SM

TROJ_CRYPTFILE.SM is a new Trojan and also a potentially malicious program has been spread on internet for a while. This one mainly disguises itself as normal software in some unknown website or third-party download resource; it can be installed through a download manager. Normally, innocent users whose computer were infected by TROJ_CRYPTFILE.SM would not notice that until they find their computer system acting funny, most of them will be shocked when the find already messed up their computer, because the thought they did not do anything before, they will never allow a program like install in computers. Well, actually this virus is very tricky, in some ways; it can bypass the permission from users and perform some action to harm the system without letting computer administrator know!   Read the rest of this post »

Published by Tony Shepherd on October 9, 2014 1:02 pm

I have been accused by Interpol on my smartphone? It says that I have violated some kind of law and I will be put into prison if I don’t pay the fine in time. I’m so scared now. And this thing blocks me out of my phone and I can’t do anything on it. I only use my phone for calls, short messages and some web searching. How could thing happen? I don’t think I have done something wrong. How can I get my phone back? I have many important contacts on my phone and I don’t want to lose them. What should I do now? Please help! Hi, so I got a notification on my phone from “the police” saying how I’ve been accessing illegal content, and is asking for ￡100 so I I downloaded a new browser to search what this is and I found out it’s a virus, how can I remove it?

Brief Introduction to This Virus

Interpol, the full name of this authority is International Criminal Police Organization, when you get a warning message from this organization on your phone, sorry to tell you that you have been hit by a kind of ramsonware. Just like the virus with the same name which targets on computer, this virus can lock your phone from using and ask you to pay to unlock the phone. With the development of mobile phone technology, many mobile systems have been invented nowadays, from Symbian to Mac and Android today, the mobile phones are smarter and smarter. From online research, the biggest scale of mobile system is Android, and there are a great amount people use smart phones with Android systems. Seeing this, cyber hackers switch the target from attacking computers to Android smart phones. Read the rest of this post »

Published by Tony Shepherd on October 9, 2014 5:26 am and last modified on June 2, 2016 3:02 am.

Websearch.searchfix.info was loaded as my default start page on the Firefox every time I launched the Internet browser. The fake site caused all Internet search results to load with its own search system. It displayed many pop-up ads on the hijacked browser. Unfortunately, I can’t seem to get rid of the browser hijacker via my advanced anti-virus software. How can I delete the hijacker infection from the contaminated computer? Any hijacker removal will be much grateful.

Brief Introduction about This Websearch.searchfix.info

Websearch.searchfix.info is a fake web site that adds to your Internet Explorer, Google Chrome, Mozilla Firefox and other web browsers upon its arrival. It is identified as a browser redirect which is released through network. PC users who visit doubtful sites, random popups and free download resources etc. are likely to suffer from this browser hijacker. You will come across many annoying troubles during Internet searches and other activities on the target computer. To illustrate, the bogus site has its own search system which pretends to help you search for your favorites. However, it is not a reliable site but a big computer infection designed to perform malicious actions on your computer. The browser hijacker is capable to redirect your websites to other harmful web pages which are associated with browser adware or notorious parties online. Net users hardly enjoy your web browsing tasks since weird and unwanted web pages will be loaded as your Internet search results. And you will get many pesky pop-up ads and messages which ask you to visit commercial ads, click on sponsored links and download freeware and so on. To avoid any further loss, PC users should take actions to deal with the browser redirect completely.
Read the rest of this post »

Published by Tony Shepherd on October 9, 2014 4:59 am