Virus and Spyware Removal Guides, uninstall instructions

What is MacReviver?

MacReviver is advertised as software that helps Mac users to improve system performance and stability, however, various virus detection engines recognize its installer as that of a potentially unwanted application (PUA). Typically, apps of this type are distributed through the set-ups of other (usually free) programs and/or various deceptive websites.

Therefore, people often download and install PUAs unintentionally, or they are deceived into it. In any case, apps categorized as PUAs should never be trusted.

What is View Free Recipes Now?

As its name suggests, View Free Recipes Now is a rogue application endorsed for quick access to various food recipe websites. It is classified as a browser hijacker, due to the changes it makes to browser settings in order to promote search.viewfreerecipesnowtab.com (a fake search engine).

Furthermore, this app monitors users' browsing activity. Since most users install View Free Recipes Now inadvertently, it is also classified as a PUA (Potentially Unwanted Application). Note that this app is often distributed together with another PUA called Encrypted Search.

What is "Your iPhone has been located"?

Scammers behind this phishing scam use deceptive text messages to trick recipients into providing credentials via a fake iCloud website.

They disguise their text messages as coming from Apple Support. Note that the Apple company (or support service) has nothing do to with this scam. We strongly recommend that you ignore this text message and, more importantly, do not enter any credentials (e.g., your Apple ID, password or other details) into this fake iCloud page.

What is bestevervideoplayernew[.]info?

bestevervideoplayernew[.]info is one of many deceptive websites designed to trick visitors into installing various potentially unwanted applications (PUAs) such as browser hijackers, adware-type apps through a fake Adobe Flash Player installer.

In some cases, these websites download installers that infect operating systems with malicious programs such as ransomware, Trojans or other malware. In any case, never trust bestevervideoplayernew[.]info or similar sites. Browsers tend to open them when PUAs are already installed.

What is theultimatesafevideoplayers[.]info?

theultimatesafevideoplayers[.]info is a deceptive web page running a fake Adobe Flash Player update scam. This website can also redirect to other sites, promoting similar scams. The scam model works by claiming that visitors' Flash Player software is outdated and recommends bogus updates.

Note that fake updaters are commonly used to infiltrate a variety of untrustworthy software (e.g. adware, browser hijackers, etc.) and malicious programs (e.g. ransomware, trojans, etc.). Few users access theultimatesafevideoplayers[.]info intentionally, since most are redirected by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system.

What is cmilg[.]pro?

cmilg[.]pro is similar to brotherenuryc[.]pro, gubudakis[.]com, daystream[.]club and many other rogue websites. All redirect visitors to untrusted websites or load dubious content. People do not often visit these sites intentionally - they are opened by potentially unwanted applications (PUAs) that are installed on browsers and/or operating systems.

What is 2NEW?

Discovered by Michael Gillespie, 2NEW is malicious software belonging to the Dharma ransomware family. It is designed to encrypt data and demand payment for decryption. When 2NEW malware encrypts, files are renamed according to the following pattern: original filename; unique ID; developer's email address, and; ".2NEW" extension.

For example, a file such as "1.jpg" would appear similar to "1.jpg.id-1E857D00.[new2crypt@aol.com].2NEW", and so on for all compromised files. Following the encryption process, a text file ("FILES ENCRYPTED.txt") is created and a pop-up window is displayed.

What is easymedia2[.]com?

easymedia2[.]com is a rogue website designed to load dubious content or open a number of other rogue web pages. Other examples of websites of this type include newsbreak[.]com, daystream[.]club and gubudakis[.]com. Typically, people do not visit these sites intentionally - they are opened by browsers with potentially unwanted applications (PUAs) installed on them.

Most PUAs collect information relating to users' browsing habits and serve intrusive advertisements.

What is Flash App+?

Flash App+ is a browser hijacker that changes browser settings to promote searchpowerapp.com (a bogus search engine).

Additionally, Flash App+ has data tracking capabilities, which are employed to monitor and record browsing-related information. Due to the dubious methods used to proliferate this app, Flash App+ is also classified as a Potentially Unwanted Application (PUA).

What is ShadowTechRAT?

ShadowTechRAT is a Remote Access Trojan (RAT). Cyber criminals proliferate programs of this type to remotely access and/or control infected computers. I.e., to infect systems with other high-risk malware, steal personal/confidential information, and so on.

Typically, RATs are difficult to detect, since they do not appear on lists of running programs/processes, or they are disguised as regular, harmless programs.