Virus and Spyware Removal Guides, uninstall instructions

What is Buran?

First discovered by malware research nao_sec, Buran is high-risk ransomware distributed using Rig Exploit Kit. This is a new variant of another ransomware infection called Vega.

After successfully infiltrating the system, Buran encrypts most stored files and appends filenames with the victim's unique ID (e.g., "sample.jpg" might be renamed to a filename such as "sample.jpg.48E7EE9F-3B50-B177-0614-DF09178EE722").

Following successful encryption, Buran generates a text file ("!!! YOUR FILES ARE ENCRYPTED !!!.TXT") and stores it on the desktop. The file contains a ransom-demand message.

What is Segurazo?

Segurazo antivirus (also known as SAntivirus) is described as anti-virus software that includes real-time protection, threat detection, and protection of data and passwords.

In fact, this program is a potentially unwanted application (PUA), since it is distributed through the download or installation set-ups of other software. Many people download and install software of this type unintentionally.

What is onlinecontent[.]fun?

Onlinecontent[.]fun is a rogue website, sharing a lot of similarities with mega-deals.mobi, weads32.com, naneso.com and hundreds of others. It operates by generating redirects to unreliable, possibly malicious websites, as well as deliver dubious content (including clickbait) for user consumption.

It is rarely accessed intentionally; most visitors get redirected by clicking on intrusive ads or by having it opened by PUAs (potentially unwanted applications) in their device.

It should be known, that rogue apps do not need express user permission to be installed onto their systems. Once successfully infiltrated, they cause unauthorized redirects, run invasive advertisement campaigns and track data.

What is born2bahick[.]com?

Born2bahick[.]com, sharing a lot of similar traits with mega-deals.mobi, getmedia.me, pushmehoney.com and many others, is a rogue website. It is designed to generate redirects to untrustworthy and possibly malicious sites, as well as feed users unreliable content (including clickbait).

Visitors to this website rarely access it intentionally; most get redirect by intrusive advertisements or have it forcefully opened by PUAs (potentially unwanted applications). It is noteworthy, that said apps do not require express user consent to be installed onto their devices.

Once successfully infiltrated, they cause unauthorized redirects, deliver invasive ad campaigns and some can even spy on users' browsing activity.

What is hp.myway.com?

MyPrivacyManager is one of many apps created by Mindspark Interactive Network. It supposedly provides easy access to privacy tools and safety-related browser settings, however, MyPrivacyManager developers distribute it by including it into the set-ups of other software.

Therefore, many people download and install this app unintentionally, and it is thus categorized as a potentially unwanted application (PUA). Specifically, MyPrivacyManager is a browser hijacker that changes browser settings to promote a fake search engine (hp.myway.com).

What is mega-deals[.]mobi?

Similar to push4free.com, veinlacrolat.pro, feedmedia.me and many others, mega-deals[.]mobi is a rogue website. Designed to cause redirects to untrustworthy/malicious sites and feed them highly dubious content (including click bait). Few visitors ever access it willingly, most happen upon it by way of redirection.

Either by clicking on intrusive ads (usually located in unreliable websites) or by having it opened by PUAs (potentially unwanted applications). It should be noted, that undesirable apps do not need express user consent to invade their devices. PUAs cause redirects, deliver invasive adverts and track data.

What is Game Booster?

Discovered by MalwareHunterTeam, the Game Booster program supposedly speeds up computers for a smoother gaming experience. In fact, this software is a trojan (malicious program) disguised as other, legitimate software called Smart Game Booster.

To distribute this malware, the developers have created a fake download web page that supposedly downloads Smart Game Booster.

To promote their malware, cyber criminals created the gamebooster[.]pro site, which is identical in appearance to the genuine download web page (pcgameboost[.]com). Do not download software advertised on the gamebooster[.]pro website. This software is designed to infect computers with a trojan called Baldr.

What is hp.myway.com?

Developed by Mindspark Interactive Network, ProductManualsGuide is a rogue application. It is marketed as a free tool for finding printable product manuals, with a supplementary web searching tool. Since users tend to install this app inadvertently, it is classified as a PUA (potentially unwanted application).

ProductManualsGuide is also a browser hijacker, it makes changes to browser settings and redirects users to hp.myway.com - its fake search engine. As a PUA, it may also possess data tracking capabilities.

What is keepvid[.]pro?

The keepvid[.]pro website allows visitors to download videos from YouTube. Many websites provide this service, however, it is illegal to download videos from YouTube.

Furthermore, keepvid[.]pro uses rogue ad networks. This site leads visitors to others used to advertise unwanted browser apps (extensions, add-ons, and so on) and other dubious software. Do not use services provided by keepvid[.]pro or other similar websites.

What is Websitetrafficgo?

websitetrafficgo is a scam site used to advertise dubious software. Scammers designed this website to display a fake virus alert message and, thus, people who who arrive at this web page often believe that their computers are infected. Visitors are encouraged to remove the 'detected virus' with a program called Smart Mac Booster.

Do not take the Websitetrafficgo scam seriously or download software advertised through the site. The same applies to any other similar scam pages.