Virus and Spyware Removal Guides, uninstall instructions

What is Find My Directions?

Find My Directions is a browser hijacker, promoted as a tool kit, consisting of quick access to maps and an enhanced web searcher. It is supposedly capable of providing various route maps, local traffic information and driving directions.

However, it actually modifies browsers to redirect to its fake search engine (search.hfindmydirections.net) and it gathers intel on users' browsing activity. As most users install Find My Directions inadvertently, it is categorized as a PUA (potentially unwanted application).

What is videommm[.]pro ?

videommm[.]pro is a dubious website. If opened, it forces people to visit other untrustworthy websites or displays dubious content. There are many websites similar to videommm[.]pro. Other examples are mediasvideo[.]world, cudalbapt[.]com, and celeb-secret[.]live.

People rarely open these sites intentionally - they are redirected to them through clicked dubious ads or by potentially unwanted apps (PUAs) installed on browsers or operating systems. Additionally, most PUAs collect information relating to users' browsing habits and/or display intrusive ads.

What is Quick Flight Tracker?

Quick Flight Tracker is a rogue application, endorsed as a tool pack, consisting of quick access to flight data and a web searcher. It can allegedly allow users to check live flight statuses and other related information from a browser's new tab/window and homepage, as well as generate enhanced search results.

Despite how useful this app appears, it is both a browser hijacker and a PUA (potentially unwanted application). Quick Flight Tracker modifies browsers to promote its fake search engine (search.hquickflighttracker.com), and it also spies on users browsing activity. Few users install this application intentionally, therefore it is classified as a PUA.

What kind of malware is SystemBC?

SystemBC is malicious software written in the C++ programming language. It sets up SOCKS5 proxies on computers so that cyber criminals can hide malicious traffic that is associated with other malicious programs.

In summary, cyber criminals proliferate SystemBC together with other malware and use the aforementioned SOCKS5 proxies to prevent other malware from being detected. SystemBC is used by a number of cyber criminals and can be purchased on hacker forums. To avoid possible damage, you are strongly advised to remove SystemBC from your system immediately.

What is Spartan Sentinel?

Spartan Sentinel is a piece of software, endorsed as a privacy and security safety suite. It is supposedly capable of deleting users' browsing data (e.g. browsing history and files, chat logs, etc.) or creating "dummy" data. It is also allegedly able to secure log-in information, speed up browsers and remove other online security/privacy issues.

This program has an official website, where the trial version can be downloaded for free. However, it can also be downloaded/installed alongside other software. This method of marketing is called "bundling", by which ordinary software is pre-packed with undesirable content.

This deceptive tactic is widely used by PUA (potentially unwanted application) developers, who freely abuse user tendency to recklessly rush through download/installation setups. Such poor download/installations habits, expose users' devices to possible system invasions and/or infections. Spartan Sentinel is often installed inadvertently, therefore it is categorized as a PUA.

What is fastandprettysearch.com?

fastandsearch.com is a fake search engine, however, it is advertised as useful and legitimate. Generally, developers distribute search engines of this type through rogue download or installation set-ups. These set-ups promote fake search engines by changing browser settings. The search engines are generally used to gather various information.

What is Search Hub?

Search Hub is a browser hijacker, advertised as a tool for enhancing web search and allegedly provides quick access to favorite websites.

It is designed to change certain browser settings in order to promote its fake search engine (search.hgetsearchhub.com) and it also spies on users' browsing activity. It is classified as a PUA (potentially unwanted application), due to the fact that most users install it inadvertently.

What is DarkRAT?

DarkRAT is one of many remote access tools (RATs) used to control connected computers remotely. Unfortunately, in many cases, cyber criminals trick people into installing RATs onto their systems and then use them to steal personal details, infect systems with malware, and cause other damage.

If your system is infected with this RAT, we strongly recommend that you uninstall it immediately.

What is StuardRitchi?

StuardRitchi is a ransomware, belonging to the GlobeImposter ransomware family. It is designed to encrypt files and keep them on lock-down, until a ransom is paid (decryption software/tool is bought). StuardRitchi changes afflicted file extensions into ".crypt", which would make "1.jpg" appear as "1.jpg.crypt" and so on.

It drops an html file, titled "how_to_back_files.html" on victim's desktop, which contains the ransom demanding message. This malicious piece of software was discovered by dnwls0719.

What is encryptedRSA?

Discovered by Michael Gillespie, encryptedRSA is part of the SamSam ransomware family. These programs prevent victims from accessing their data by encrypting it with strong encryption algorithms. Typically, the only way for victims to unlock their files is to decode them with software that can be purchased from the cyber criminals who developed the ransomware.

This particular ransomware infection changes the extension of each encrypted file by adding ".encryptedRSA". For example, "1.jpg" becomes "1.jpg.encryptedRSA". Note that encryptedRSA also creates a message, which is stored in a text file named "HELP_DECRYPT_YOUR_FILES.txt".