Virus and Spyware Removal Guides, uninstall instructions

What is eadingenered[.]pro?

eadingenered[.]pro is one of many rogue websites online. These sites tend to share similarities. For example, actraffic.info, vimlo.pro, and sauwoaptain.com are all of the same type. The primary purpose of these web pages is to present visitors with untrustworthy, possibly harmful content, and generate redirects to dubious and malicious websites.

Few users access eadingenered[.]pro intentionally - most are redirected by intrusive advertisements or Potentially Unwanted Applications (PUAs) already present within the system. Apps within the this classification do not require explicit user permission to infiltrate devices.

PUAs force-open untrustworthy/malicious web pages, run intrusive ad campaigns, and track browsing-related information.

What is actraffic[.]info?

Similar to vimlo.pro, costsimpleplay.com, sauwoaptain.com, and thousands of others, actraffic[.]info is a rogue website. It operates by presenting users with highly dubious content and by generating redirects to other untrustworthy, even malicious web pages.

Most visitors arrive at actraffic[.]info inadvertently through redirects caused by intrusive ads or Potentially Unwanted Applications (PUAs). Note that these apps do not need explicit permission to be installed onto users' devices. Once successfully infiltrated, they cause redirects, run intrusive ad campaigns, hijack browsers, and collect browsing-related information.

What is vimlo[.]pro?

vimlo[.]pro is one of many rogue websites on the internet (costsimpleplay.com, sauwoaptain.com, and laddedmuzics.pro are other relevant examples of such sites). They present visitors with dubious content and generate redirects to untrustworthy, malicious web pages.

Few users access vimlo[.]pro and similar sites intentionally - most are redirected by intrusive ads or Potentially Unwanted Applications (PUAs) already infiltrated into the system. These apps do not need express user permission to be installed onto devices.

Once successfully installed, they cause redirects, run intrusive advertisement campaigns, hijack browsers, and track sensitive data.

What is PC Mechanic Plus?

PC Mechanic Plus software supposedly fixes the registry, cleans junk files, removes broken shortcuts and items that might cause problems with privacy and security.

It is advertised as a system optimizer, however, PC Mechanic Plus developers distribute it by including it into the download and/or installation set-ups of other software. People often download and install these programs unintentionally. For this reason, PC Mechanic Plus is classified as a potentially unwanted application (PUA).

What is Mbed?

Mbed is a ransomware infection belonging to the Djvu malware family. It is designed to encrypt data and demand ransom payments for decryption.

When Mbed encrypts data, it renames all files with the ".mbed" extension. For example, a file such as "1.jpg" would appear as "1.jpg.mbed", and so on for all compromised files. After this process is complete, a text file named "_readme.txt" is created on the desktop.

What is SpartCrypt?

SpartCrypt (also known as SpartCrypter) is malicious software classified as ransomware. The program was discovered by S!Ri who also took screenshots of the ransom messages. SpartCrypt encrypts the victim's data and renames all compromised files by adding the name and email address of the developers, the victim's ID, and ".Encrypted" extension.

For example, "1.jpg" might be renamed to a filename such as "1.jpg.SpartCrypt[LordCracker@protonmail.com]-[ID-1E857D00].Encrypted". It also creates a text (.txt) file ("How_To_Restore_Your_Files.txt") and displays a pop-up window, both of which contain information about how to contact SpartCrypt, and other details.

What is SySS?

Discovered by Jakub Kroustek, SySS is a malicious program belonging to the Dharma/Crysis ransomware family. Devices infected with SySS have their files encrypted and ransom demands are made to the victims, effectively to purchase decryption tools/software.

During the encryption process, all files are renamed with a unique ID (generated individually for each victim), ransomware developer's email address, and ".SySS" extension.

For example, an encrypted file such as "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[syspentest@aol.com].SySS", and so on for all affected files. After this process is complete, a text file ("FILES ENCRYPTED.txt") is stored on the desktop and a pop-up window is displayed.

What is costsimpleplay[.]com?

costsimpleplay[.]com operates like sauwoaptain[.]com, routgveriprt[.]com, notification-centar[.]com, and many other rogue websites. It redirects visitors to various other untrustworthy websites or displays dubious content.

In most cases, websites such as costsimpleplay[.]com are opened by potentially unwanted applications (PUAs) installed on browsers and/or operating systems. Typically, people download and install PUAs unintentionally. Furthermore, most of these apps collect information relating to users' browsing activity and deploy advertisements.

What is Age?

Discovered by GrujaRS, Age is malicious software belonging to the Phobos ransomware family. It encrypts data and demands ransom payments for decryption. When Age encrypts, it renames all files with a unique ID number, developer's email address, and the ".age" extension.

For example, a filename such as "1.jpg" might appear as something similar to "1.jpg.id[1E857D00-2495].[agent5305@firemail.cc].age", and so on. Once this process is complete, two files ("info.txt" and "info.hta") are created on the desktop.

What is search.pizgetz.com?

search.pizgetz.com is one of many fake search engines that supposedly provide fast and accurate results. Other examples of search engines of this type include home.specialtab.com, search.turdeland2.com, and search.newsflashapp.com.

Typically, they are promoted by potentially unwanted applications (PUAs) called browser hijackers, which change browser settings. Furthermore, most of these apps and fake search engines collect browsing-related data.