Virus and Spyware Removal Guides, uninstall instructions

What is ultimate-captcha[.]com?

If visited, ultimate-captcha[.]com loads dubious content or leads to other untrustworthy websites. Many other websites have identical behavior. Some examples are rex-news1[.]club, pushpush[.]net and nerdailingcurv[.]com. In most cases, they are opened by browsers with Potentially Unwanted Applications (PUAs) installed on them.

I.e., people do not usually visit these web pages intentionally. Furthermore, PUAs force browsers to open untrustworthy sites such as ultimate-captcha[.]com, serve advertisements and collect information relating to browsing habits of their users.

What is mainsourceofupdate[.]best?

mainsourceofupdate[.]best is a deceptive/scam web page, which claims that the visitor's Adobe Flash Player is outdated. It also endorses a fake Flash updater. These rogue updaters are used to proliferate a wide variety of untrustworthy and malicious content.

Few users access mainsourceofupdate[.]best intentionally, since most are redirected to this site by intrusive advertisements or Potentially Unwanted Applications (PUAs) already infiltrated into the system.

What is ConvertMyFile Search?

ConvertMyFile Search is a browser hijacker, which is advertised as a tool for quick access to online file format conversion services. It operates by modifying browsers to promote a fake search engine (services.convertmyfile-svc.org). The updated variant of this browser hijacker promotes search.convertmyfiletab-nt.org fake search engine.

Note that ConvertMyFile Search also monitors browsing activity and gathers personal data. Since most users install this program inadvertently, it is additionally classified as a Potentially Unwanted Application (PUA).

What is Anchor_DNS?

Anchor_DNS is a malicious program associated with another malware infection called TrickBot. It operates as a 'backdoor', which is used on high-profile targets. Anchor_DNS communicates with Command-and-Control (C2) servers over DNS using the DNS Tunneling technique.

In this way, Anchor_DNS can receive commands, transfer data and download additional malware or other unwanted software. It can also avoid detection by certain security suites.

What is CentralHere?

CentralHere is adware and promoted as tool that supposedly improves the browsing experience. It is claimed that this app can provide fast searches, accurate search results and similar, however, it delivers a wide variety of unwanted and harmful advertisements.

Due to its dubious proliferation methods, CentralHere is additionally categorized as a Potentially Unwanted Application (PUA).

What is Maze?

There is more than one version of Maze ransomware (the previous version is also named Maze). The new version was discovered by nao_sec.

Ransomware-type programs encrypt data and create ransom messages that contain information about how to decrypt files, however, victims cannot generally regain access to their files without tools held only by developers of the ransomware. This variant of Maze does not encrypt files if it detects the "C:\hutchins.txt" file on the system.

If this is NOT the case, Maze encrypts files, renames them by adding a random extension (for example, "1.jpg" becomes "1.jpg.sA16PA"), creates the "DECRYPT-FILES.txt" file, and changes the desktop wallpaper.

What is SimpleSearchApp?

SimpleSearchApp is categorized as adware. It is endorsed as tool to enhance the browsing experience by allegedly providing fast searches, accurate and improved search results, etc. In fact, it delivers intrusive ad campaigns. I.e., displays various advertisements, some of which are harmful.

Furthermore, due to its dubious proliferation methods, SimpleSearchApp is classified as a Potentially Unwanted Application (PUA).

What is SearchPrimary?

SearchPrimary is adware-type software, allegedly designed to improve the browsing experience. This application is supposedly capable of providing fast searches, accurate search results, and so on. In fact, it runs intrusive advertisement campaigns. I.e., SearchPrimary delivers various unwanted and even harmful ads.

Most users install this app inadvertently, and therefore it is also classified as a Potentially Unwanted Application (PUA).

What is ResultSync?

Do not trust the ResultSync app (which is advertised as useful and legitimate) - it serves ads and does not operate as advertised. This application is categorized as adware and, in most cases, people do not download or install this software intentionally.

For this reason, apps such as ResultSync are classed as potentially unwanted applications (PUAs). Furthermore, adware-type apps are often designed to collect information relating to users' browsing habits.

What is Asd?

Discovered by Jakub Kroustek, Asd is a malicious program belonging to the Dharma/Crysis ransomware family. This malware is designed to encrypt data and make ransom demands for decryption. During the encryption process, all affected files are renamed with the victim's unique ID, developer's email address, and the ".asd" extension.

For example, "1.jpg" might appear as something similar to "1.jpg.id-1E857D00.[asdbtc@aol.com].asd". Once this process is complete, a text file ("FILES ENCRYPTED.txt") is created on the desktop and a pop-up window is displayed.