Virus and Spyware Removal Guides, uninstall instructions

What is hp.myway.com?

EasyFileConvert is a rogue application that falsely claims to allow conversion of various file formats. Judging on appearance alone, EasyFileConvert may appear legitimate and useful, however, this app is categorized as a browser hijacker and a potentially unwanted program (PUP).

There are three main reasons for these negative associations: 1) installation without users' consent; 2) stealth modification of web browser settings, and; 3) tracking of users' Internet browsing activity.

What is ramblrr.com?

Developers present ramblrr.com as an Internet search engine that generates improved search results and provides quick access to various popular websites.

Judging on appearance alone, ramblrr.com may appear legitimate and useful, however, this website gathers various information relating to users' Internet browsing activity. Furthermore, developers promote it by employing deceptive download/installation set-ups designed to modify Internet browser settings without permission.

What is traff-1.ru?

traff-1.ru is a rogue website that redirects users to various other malicious websites. Developers promote this site by employing various deceptive download/installation set-ups designed to hijack web browsers and modify various settings without users' consent.

Be aware that the websites that traff-1.ru redirects to might contain infectious content and record various user-system information relating to web browsing activity.

What is CryptoDevil?

CryptoDevil is a ransomware-type virus discovered by malware researcher, xXToffeeXx. After infiltrating the system, CryptoDevil stealthily encrypts various files. Unlike other ransomware-type viruses, however, this virus only encrypts files stored within the CryptoDevil folder (and subfolders).

In addition, CryptoDevil appends names of encrypted files with the ".devil" extension (e.g., "sample.jpg" is renamed to "sample.jpg.devil"). Following successful encryption, CryptoDevil opens a pop-up window that contains a ransom-demand message.

What is trovi.com?

The Trovi.com browser hijacker infiltrates users' Internet browsers through free software downloads. This website is created by Conduit Ltd (operated by ClientConnect Ltd) and distributed using a deceptive software marketing method called 'bundling'.

Internet users commonly install this browser settings-changing adware (capable of modifying the homepage and default search engine fields) when downloading or installing freeware.

Computer users should be aware that, today, most free software download websites use 'download clients' to offer installation of advertised browser plug-ins together with free software chosen for download. Thus, reckless freeware downloading and installation can result in adware infections.

What is Lick?

First discovered by malware researcher, Jakub Kroustek, Lick is a ransomware-type virus similar to Kirk. Once infiltrated, Lick encrypts various files and appends filenames with the ".Licked" extension. For example, "sample.jpg" is renamed to "sample.jpg.Licked".

Lick then creates the following files: 1) "ERRORLOG.txt", containing a ransom-demand message; 2) "stats.txt", containing a list of encrypted files, and; 3) a pwd file, containing a decryption password, which unfortunately is also encrypted.

What is amisites.com?

Identical to funcionapage.com, attirerpage.com, and a number of other bogus sites, amisites.com is a fake Internet search engine that falsely claims to enhance the web browsing experience by generating the most relevant search results. On initial inspection, amisites.com may seem similar or identical to legitimate Internet search engines such as Yahoo, Bing, and Google.

Therefore, users often believe that amisites.com is also trustworthy. In fact, developers promote this bogus site using dubious software 'installers' designed to modify Internet browser settings without users' permission. Furthermore, amisites.com continually records various user/system information.

What is RocketTab?

Rocket Tab is a browser add-on developed by Rich River Media. The software claim to make the Internet browsing experience more productive by enabling multiple site search capabilities and providing the convenience of searching popular local sites without having to open additional windows or tabs.

Although this functionality may seem legitimate, this plug-in is categorized as adware or a potentially unwanted application. Rocket Tab installs on browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without users' consent using a deceptive software marketing method called 'bundling'.

What is ZinoCrypt?

ZinoCrypt is a ransomware-type virus discovered by malware researcher, MalwareHunterTeam. Once infiltrated, ZinoCrypt encrypts files and appends filenames with the ".ZINO" extension. For example, "sample.jpg" might be renamed to "sample.jpg.ZINO".

Following successful encryption, ZinoCrypt creates a text file ("ZINO_NOTE.txt") containing a ransom-demand message, and places it on the desktop.

What is search.mysearch.com?

Search.mysearch.com is a deceptive website that claims to be an Internet search engine. The appearance of this site is identical to other websites such as Google, Yahoo, and Bing, Users often believe that search.mysearch.com is legitimate, however, search.mysearch.com is promoted using bogus software 'installers' designed to modify web browser settings.

In addition, search.mysearch.com collects various information relating to Internet browsing activity.