Virus and Spyware Removal Guides, uninstall instructions

What is ProductTask?

ProductTask is disguised as an app that supposedly helps users to search (provide accurate search results and other similar features).

In fact, it is a potentially unwanted application (PUA) classified as adware. Typically, people do not download or install adware intentionally. When installed, PUAs display unwanted, intrusive advertisements and record data relating to users' browsing habits.

What is fetchtube[.]com?

The fetchtube[.]com website offers a YouTube video download service. There are two issues with this web page: 1) it is illegal to download videos from YouTube, and; 2) it uses rogue advertising networks. People who use fetchtube[.]com are redirected to various untrustworthy websites. For these reasons, fetchtube[.]com should be avoided.

What is Nvram?

Discovered by GrujaRS, Nvram is ransomware belonging to the CrySis/Dharma malware family. It operates by encrypting data and demanding ransom payments for decryption. During the encryption process, all files are renamed with a unique ID number, the developer's email address, and the ".nvram" extension.

Therefore, a file named, for example, "1.jpg" would appear as something like "1.jpg.id-007D851E.[clifieb@tutanota.com].nvram", and so on. A text file ("FILES ENCRYPTED.txt") is then created and stored on the desktop. Nvram also displays a pop-up window.

What is "Please yourself Email Scam"?

Like most email scams, this one is sent by scammers who seek to extort money from unsuspecting recipients. They claim that the recipient's computer is infected with malware, which allowed them to record a compromising video.

Scammers behind this email threaten to proliferate the video unless victims send a specific sum of money. We strongly recommend that you ignore this email and others of its kind.

What is asonsbirthi[.]pro?

asonsbirthi[.]pro is the address of a website that contains dubious content. It also redirects visitors to other untrustworthy websites. Note that asonsbirthi[.]pro functions like many other web pages of this kind including, for example, pushstack[.]co, readmenewz[.]com, and shireamentsp[.]info.

Most people end up visiting these websites unintentionally, since they are redirected to them by potentially unwanted applications (PUAs) installed on their browsers or operating systems. Additionally, these apps are usually designed to display various ads and collect details relating to users' browsing habits.

What is "Fake Software Update"?

Fake Software Update refers to a deceptive pop-up window, which claims that the Adobe Flash Player is outdated and requires an update. This scam promotes various rogue applications (e.g., browser hijackers and adware) and other potentially malicious content via fake Flash Player updaters/installers.

These pop-ups are usually displayed by deceptive/scam websites that are rarely accessed intentionally - most visitors to them are redirected by Potentially Unwanted Applications (PUAs) or intrusive advertisements.

What is MightyBrowser?

According to developers of the MightyBrowser application, this software supposedly help users to browse and search. In fact, MightyBrowser is a potentially unwanted application (PUA) categorized as adware. People do not generally download or install apps of this type intentionally - they are often tricked.

Note that adware-type apps deliver intrusive advertisements and are often designed to gather various information relating to users.

What is pushstack[.]co?

pushstack[.]co is an untrustworthy website that contains dubious content. If opened, it can redirect people to a number of other websites of this kind. Note that visitors do not generally arrive this site intentionally - websites such as pushstack[.]co are opened by potentially unwanted applications (PUAs) installed on browsers and/or operating systems.

Furthermore, these apps are often designed to gather data and display ads. Some examples of web pages that have similar functionality to pushstack[.]co include shireamentsp[.]info, notify-system[.]com, and mediasvideo[.]live.

What is Major?

Discovered by GrujaRS, Major is a malicious program classified as ransomware. It is designed to encrypt data and keep it locked until a ransom is paid (i.e., decryption tools/software is purchased). During encryption, all files are appended with the victim's unique ID number, Major developer's email address, and the ".AIR" extension.

For example "1.jpg" might appear similar to "1.jpg.33868453691972502380.ex_parvis@aol.com.AIR", and so on for all affected files. After this process is complete, an HTML file ("TRY_TO_READ.html") is created and stored on the desktop. The wallpaper of the desktop is also changed.

What is studentslearnintogether.club?

studentslearnintogether.club is the address of a fake search engine, which is promoted through a potentially unwanted application (PUA), a browser hijacker called Students Learn Together. Generally, hijackers promote these search engines by changing browser settings.

Furthermore, apps of this type usually gather information relating to users' browsing activities. Typically, people download and install browser hijackers unintentionally, and they are, therefore, classified as PUAs.