Removal of HORSEMONEY ransomware