Virus and Spyware Removal Guides, uninstall instructions

What is the fake "Claim EIGEN" website?

"Claim EIGEN" is a scam promoted on claims-eigenfoundations[.]xyz (but it could be hosted on other domains). The scheme is supposedly distributing EIGEN tokens – instead, it functions as a cryptocurrency drainer. Essentially, the scam steals digital assets from victims' cryptowallets.

It must be emphasized that this fake giveaway is not associated with any existing platforms or entities.

What kind of email is "Unusual Activities In Your Account"?

Upon examination, we determined that the "Unusual Activities In Your Account" email is spam. The letter reports on unrecognized activity detected on the recipient's email account. Updating its information (password) is critical to avoid the account being disconnected from the server. This mail aims to lure victims into disclosing their email log-in credentials to a phishing site.

What is the fake "$FATTY Presale" website?

Our researchers discovered a page running "$FATTY Presale" while inspecting deceptive websites. After examining this presale event, we determined that it is fake.

This scam was promoted on fatty-claim.pages[.]dev, but it could also be hosted elsewhere. The fraudulent "$FATTY Presale" operates as a crypto drainer. Victims of this scheme experience financial loss.

What kind of page is bidrdtrck[.]com?

We have examined bidrdtrck[.]com and discovered that the main goal of this web page is to trick visitors into allowing it to show notifications. Like most websites of this type, bidrdtrck[.]com uses clickbait to deceive visitors. It is advisable not to agree to receive notifications from sites like bidrdtrck[.]com and always close them if encountered.

What kind of scam is "Email Server"?

We have analyzed this email and found that its purpose is to extract personal information from recipients. This fraudulent letter is disguised as a notification from an email service provider and contains a misleading link. Emails of this type are called phishing emails. Recipients should ignore them.

What is the fake "NEIRO Register" website?

"NEIRO Register" is a scam promoted on register-neirocoin[.]app (note that other domains are likely). It promises rewards for users who register within the next 24 hours, likely in the form of free NEIRO memecoins. This scheme is a crypto drainer that steals cryptocurrency from victims' digital wallets.

It must be emphasized that regardless of any similarity to any existing platforms, this "NEIRO Register" site is not associated with them.

What is the fake "Claim $METIS" website?

While investigating deceptive websites, our research team found the "Claim $METIS" scam page. This scheme was discovered on decentralized-worlds.pages[.]dev, but it could be hosted elsewhere. It is a fake airdrop supposedly distributing METIS tokens.

The scam functions as a cryptocurrency drainer – by siphoning funds from exposed digital wallets. It must be emphasized that this scheme is not associated with any existing platforms or other entities.

What kind of scam is "Domain/Company Name Conflict"?

Our team has examined this email and concluded that it is a phishing email. Scammers use such emails to trick unsuspecting recipients into disclosing personal information. In this particular case, scammers pretend to be a company named NET Registry to extract information from recipients. It is highly advisable not to respond to such emails and click the provided link.

What is "mETH Protocol Signup" scam?

During our inspection of app-methprotocol[.]co, we discovered that it is a fraudulent website designed to trick visitors into taking steps that could lead to financial loss. Such sites often use convincing designs to appear legitimate. The deceptive site in question is disguised as a cryptocurrency platform.

What is Ajina?

Ajina (also known as Mamont) is a banking Trojan targeting Android users. It is known for stealing financial information and two-factor authentication (2FA) messages. Ajina is distributed by disguising it as legitimate banking and other apps. Cybercriminals behind Ajina have been observed targeting users in Armenia, Azerbaijan, Iceland, Kazakhstan, Kyrgyzstan, Pakistan, Russia, Tajikistan, Ukraine, and Uzbekistan.