Virus and Spyware Removal Guides, uninstall instructions

What is bacdau.vn?

bacdau.vn is a deceptive website claiming to be a legitimate Internet search engine. It also claims to enhance the web browsing experience by generating the most relevant search results and providing quick access to various popular websites (for example, YouTube, Gmail, Facebook, Google, etc.).

Although, this functionality may seem legitimate, be aware that this website is promoted using dubious installation set-ups that hijack Internet browsers. Furthermore, bacdau.vn continually monitors users' web browsing activity.

What is Vegclass?

Vegclass is another ransomware infection identical to Mahasaraswati, Green_Ray, and JohnyCryptor. After stealthily infiltrating the system, Vegclass uses an asymmetric encryption algorithm to encrypt various files stored on victims' computers. During encryption, Vegclass ransomware adds the .Vegclass(@)aol.com.xtbl extension to the name of each encrypted file.

It also changes the desktop wallpaper and creates a 'How to decrypt your files' text file, placing it in each folder containing encrypted files.

What is Ecovector?

Ecovector is a ransomware-type virus identical to Green_Ray, Mahasaraswati and JohnyCryptor. After infiltrating computers, Ecovector encrypts various files and appends the name of each encrypted file with the .{ecovector3(@)aol.com}.xtbl extension.

To encrypt files ,Ecovector uses asymmetric encryption and, thus, public (encryption) and private (decryption) keys are generated during the encryption process. Furthermore, Ecovector changes desktop wallpapers and creates a 'How to decrypt your files.txt' file, placing it in each folder containing encrypted files.

What is trendingbees.com?

Trendingbees.com is a fake Internet search engine identical to freewebtrending.com. By falsely claiming to generate the most relevant search results and improve the web browsing experience, trendingbees.com often tricks users into believing that this site is legitimate.

In fact, developers promote trendingbees.com using dubious software 'installers' that modify web browser settings without direct user permission. In addition, trendingbees.com continually tracks users' web browsing activity.

What is YTDownloader?

The YTDownloader application is presented as a great tool to facilitate download of videos from various video sharing websites. This software may seem legitimate and useful, however, YTDownloader is classed as a potentially unwanted program (PUP).

This association is made due to a deceptive software marketing method employed by the developers called 'bundling' (stealth installation of third party applications together with the chosen software). YTDownloader installation is known to cause browser redirects to the www-searching.com website and intrusive online advertisements (Ads by Shopper-pro and iWebar).

Advertisements generated by applications bundled with YTDownloader often redirect to bogus websites containing infectious content, thereby exposing your computer to risk of infection.

What is freewebtrending.com?

Freewebtrending.com is a fake Internet search engine claiming to enhance the web browsing experience by generating the most relevant search results.

These claims often trick users into believing that freewebtrending.com is a legitimate website, however, developers promote this bogus website using deceptive 'installer' set-ups that hijack web browsers and stealthily modify their settings. In addition, freewebtrending.com continually monitors users' web browsing activity by gathering various user/system information.

What is Moccini?

Moccini is a deceptive application identical to Bakinu. This bogus application supposedly allows users to search the Internet and various websites directly from the desktop. Many users believe that Moccini is legitimate, however, this app is classed as a potentially unwanted program (PUP) and adware.

One of the main reasons for these negative associations is stealth installation - Moccini often infiltrates systems without users’ permission. Furthermore, this PUP causes unwanted browser redirects and tracks users' web browsing activity.

What is Appdater?

Appdater is a dubious application that supposedly helps users to keep their installed software up-to-date. On initial inspection, Appdater may seem legitimate and useful, however, due to rogue behavior, this app is classed as a potentially unwanted program (PUP) and adware.

After stealthily infiltrating systems without users’ consent, Appdater generates intrusive online advertisements and tracks users' web browsing activity.

What is Payransom?

Payransom is an updated version of Jigsaw ransomware. Both of these viruses have almost identical behavior. They stealthily infiltrate the system and then encrypt various files.

Unlike Jigsaw, however, this ransomware extends the name of each encrypted file with the .payransom extension, making it straightforward to determine which files are encrypted. A screen is then displayed containing detailed information about the encryption.

What is MacBar?

MacBar is a deceptive application that supposedly improves the web browsing experience by allowing users to search the Internet directly from the desktop - "We all use the web for our personal and professional lives, but clutter and distractions slow us down. MacBar solves this problem by letting you browse and search straight from your desktop - with one click of the mouse." 

This PUP specifically targets MacOS. On initial inspection, MacBar may seem legitimate and useful software, however, due to rogue behavior (stealth installation and tracking of users' web browsing activity), MacBar is classed as a potentially unwanted program (PUP).