Virus and Spyware Removal Guides, uninstall instructions

What is vidconverter[.]co?

As with wwserch42.biz, newsredirect.net, localmylife.info and many other rogue websites, vidconverter[.]co present visitors with dubious content and/or redirects them to other untrustworthy and malicious web pages.

Most users access these sites inadvertently, since they are redirected by intrusive ads or Potentially Unwanted Applications (PUAs) already infiltrated into the system. Note that apps within this classification do not need express permission to be installed onto devices.

PUAs operate by causing redirects, running intrusive advertisement campaigns and tracking browsing-related information.

What is Socelars?

Socelars is an information stealing trojan. This malware steals Facebook and Amazon session cookies, and sensitive data from the Facebook Ads Manager. It infects systems under the guise of a PDF reader. As was discovered by MalwareHunterTeam, this fake PDF reader is promoted on identical web pages: smartpdfreader[.]com, pdfguidance[.]com, and pdfaide[.]com.

Currently, these websites do not have working download links to the bogus PDF reader, however, it is likely that there are other rogue pages that actively promote this trojan. Few users access these web pages intentionally - typically, they are redirected to them by adware-type Potentially Unwanted Applications (PUAs).

What is privacyegg[.]com?

privacyegg[.]com is one of many untrustworthy websites that advertise rogue software by using scare tactics. This particular web page is designed to trick visitors into believing that their computers are infected with viruses and installing a program called OneSafe PC Cleaner.

Note that privacyegg[.]com cannot be trusted and should be closed/ignored. If the browser opens it automatically, this is likely to be due to a potentially unwanted application (PUA) installed on the browser or operating system.

What is ouo[.]io?

ouo[.]io is one of many websites that enables shortening of URL addresses. This is a legitimate website (not malicious), however, it uses various dubious advertising networks. Therefore, it contains dubious ads, and people who use it are redirected to other rogue websites. For this reason, we recommend that you avoid using ouo[.]io

What is Machete virus?

Machete is malicious software (malware) that operates as an information stealer. It is capable of taking screenshots, taking photos through the webcam, logging keystrokes, copying files to USB drives, stealing data saved on the clipboard and recording various sensitive information such as user-credentials.

The cyber criminals who proliferate this malware might use stolen data to generate revenue in various ways. If your computer is already infected with Machete, remove it from the system immediately.

What is PiXie?

PiXie is malicious software classified as a Remote Access Trojan (RAT). It primarily operates by stealing account credentials (logins, passwords) and recording videos. It also has keylogging abilities (i.e., monitors key strokes). RAT-type malware is categorized as a high-risk infection and can lead to a number of serious issues.

What is qikc.xyz?

qikc.xyz is the address of a fake search engine that is opened through another dubious address (searchgg.xyz). Like most fake search engines, qikc.xyz is promoted through a browser hijacker. Two known apps that promote this address are called APP and CERX, which are related to another potentially unwanted application (PUA) called QIP.

These apps are classified as PUAs, since people do not generally download or install them intentionally. Once installed, however, browser hijackers change browser settings and record browsing data.

What is Fast Flight Tracker?

As its name suggests, the Fast Flight Tracker app allows flight tracking of aircraft, however, this software modifies browser settings and records browsing data.

Applications that operate in this manner are called browser hijackers. Since people usually do not download or install apps such as Fast Flight Tracker intentionally, they are also known as potentially unwanted applications (PUAs). Additionally, Fast Flight Tracker is installed with another PUA called Hide My Searches.

What is CStealer?

Discovered by MalwareHunterTeam and further researched by James, CStealer is malicious software classified as a trojan. This malware is designed to steal passwords stored in Google Chrome browsers. Trojan infections are high-risk and can lead to a number of significant issues.

What kind of malware is Dexphot?

Dexphot is the name of a malicious program that infects systems with a cryptocurrency miner. It is capable of reinstalling a miner if an installed antivirus suite attempts to remove it. In summary, cyber criminals use resources of infected systems to mine cryptocurrency, which helps them to generate revenue.

If there is any reason to believe that your computer is infected with Dexphot (or another cryptominer), remove it from the system immediately.