Virus and Spyware Removal Guides, uninstall instructions

What is mp3converter[.]to?

mp3converter[.]to allows visitors to download YouTube videos converted to MP3 and MP4 formats, however, this page uses rogue advertising networks and redirects users of its video conversion service to other untrusted websites. Do not use the services of these websites. Furthermore, it is illegal to download videos from YouTube.

What is Encryptedsearch.org?

Encrypted Search is a browser hijacker, advertised as a web searching tool with reinforced privacy measures. It is supposedly capable of encrypting search queries, traces of which it deletes after thirty minutes of inactivity. This hijacking application modifies browsers and promotes its fake search engine (encryptedsearch.org).

Additionally, it monitors users' browsing activity and gathers information wrangled from it. Most users install this rogue app inadvertently, therefore it is classified as a PUA (potentially unwanted application). It is noteworthy, that Encrypted Search is often installed alongside other browser hijackers or is otherwise promoted by them.

What is Prometey?

Similar to AnteFrigus, Prometey is malicious software classified as ransomware. It operates by encrypting data and demanding payment for decryption. During the encryption process, all affected files are appended with an extension, consisting of a random character string.

For example, a filename such as "1.jpg" would be similar to "1.jpg.caacbbcc". After this process is complete, a ransom message with the format "CLICK_HERE-[random_string].txt" (e.g. "CLICK_HERE-caacbbcc.txt") is dropped into every affected folder.

What is SystemSpot?

SystemSpot is classified as adware and a Potentially Unwanted Application (PUA). Although it is promoted as providing fast searches, improved search results, etc., this app actually diminishes the browsing experience. SystemSpot adware delivers intrusive advertisements, which affect browsing and have harmful capabilities.

Its classification as a PUA is due to the application's dubious proliferation techniques. I.e., most users download/install this PUA unintentionally. Furthermore, most of these unwanted applications (including adware) can track browsing-related data.

What is Protect My Search Daily?

Protect My Search Daily supposedly prevents users from visiting untrusted, harmful websites, however, this app is categorized as a potentially unwanted application (PUA), a browser hijacker. PUAs promote the addresses of fake search engines by changing browser settings and collecting browsing data.

This particular app promotes protectmysearchdaily.com. People usually download and install apps such as Protect My Search Daily inadvertently. Furthermore, this browser hijacker is promoted through the set-ups of other similar applications. Therefore, Protect My Search Daily is often installed together with another browser hijacker.

What is faters0upload[.]com?

Identical to mob1ledev1ces.com, faters0upload[.]com is a scam website that promotes various rogue installers, which are usually disguised as Flash Player updates. These fake updaters are commonly used to infiltrate systems with untrustworthy software - adware, browser hijackers and other Potentially Unwanted Applications (PUAs).

They can also cause malware infections (e.g. install trojans, ransomware, etc.). Few users access faters0upload[.]com or other deceptive sites intentionally - they are redirected by intrusive ads or PUAs already installed on the system.

What kind of malware is Parallax?

Parallax is a remote administration tool (RAT), which can be purchased on a hacker forum. Remote administration tools are programs used by cyber criminals to take full control over the targeted computer. Generally, they use RATs to infect systems with malware, steal personal information and perform other actions that enable them to generate revenue in various ways.

What is CentralRush?

CentralRush is one of many apps that supposedly improve the browsing experience, but is categorized as a potentially unwanted application (PUA), adware. Typically, people download and install software of this type unintentionally. Adware-type apps display various intrusive advertisements.

They also operate as information tracking tools, gathering information relating to users' browsing habits.

What is "Your computer is low on memory"?

"Your computer is low on memory" is a deceptive pop-up window displayed by rogue applications (e.g. adware, browser hijackers or other Potentially Unwanted Applications - PUAs). It is displayed by ScreenSaver.app, ScreenCapture.app, Spaces.app, MacSecurityPlus and other dubious apps.

The pop-up is designed to trick users into giving the application displaying it various permissions such as control over browsers and the data stored therein.

What is oke[.]io?

The oke[.]io website provides a URL-shortening service, however, it uses rogue advertising networks - it redirects visitors who use the service to various other untrusted websites.

Websites of this type commonly open pages that attempt to trick people into installing potentially unwanted applications (PUAs) including browser hijackers, adware-type apps, or even malicious software such as Trojans and ransomware. We advise against visiting any sites that redirect visitors to other untrustworthy, potentially malicious websites.