Virus and Spyware Removal Guides, uninstall instructions

What is mybestsearch.net?

mybestsearch.net is the address of a fake search engine. These bogus tools typically offer improved search results and similar "useful" features. In fact, they are rarely able to provide valid search results or deliver any other value. Fake search engines are usually promoted by Potentially Unwanted Applications (PUAs) called browser hijackers.

As well as promoting useless tools, browser hijackers can track browsing-relating data.

What is smashapps.net?

Smashapps.net is the address of a fake search engine. Generally, these search engines are promoted by various browser hijackers. Research shows that one of the apps that promotes smashapps.net is called Suls APP. Typically, browser hijackers promote fake search engines by making certain changes to browser settings.

Apps of this type are categorized as potentially unwanted applications (PUA), since users tend to download and install them inadvertently. As well as promoting fake search engines, browser hijackers often gather information relating to users' browsing habits.

What is Covm?

Covm belongs to the Djvu ransomware family. It encrypts files, changes filenames and creates a ransom message. Covm renames files by appending the ".covm" extension to filenames. For example, it renames "1.jpg" to "1.jpg.covm", "2.jpg" to "2.jpg.covm", and so on.

It creates a ransom message in a file named "_readme.txt" and drops this in all folders that contain encrypted data.

What is My Horoscope Tab?

My Horoscope Tab is a rogue app advertised as a tool for easy access to daily horoscopes and other astrological content. In fact, it operates by making modifications to browsers to promote hmyhoroscopetab.com (A bogus search engine). This application also has data tracking capabilities, which are employed to monitor users' browsing activity.

Due to the dubious methods used to proliferate My Horoscope Tab, it is classified as a Potentially Unwanted Application (PUA). Note that My Horoscope Tab is often distributed together with the Hide My History PUA.

What is BANG?

BANG is a malicious program belonging to the Dharma ransomware family. The discovery of this malware is credited to Jakub Kroustek. Following successful infiltration, BANG ransomware encrypts files in order to demand payment for decryption.

During the encryption process, all affected files are renamed according to this pattern: original filename, unique ID assigned to the victims, cyber criminals' email address and the ".BANG" extension. For example, a file originally named "1.jpg" would appear as something similar to "1.jpg.id-1E857D00.[gangflsbang@protonmail.ch].BANG" following encryption.

After this process is complete, ransom-demand messages are created in a pop-up window and the "FILES ENCRYPTED.txt" text file.

What is the DarkTrack RAT?

DarkTrack is a malicious program classified as a Remote Access Trojan (RAT). This type of malware enables remote access and control over an infected device. The level of control these programs have varies, however, some can allow user-level manipulation of the affected machine.

The functionalities of RATs likewise varies and so does the scope of potential misuse. DarkTrack has a broad range of functions/capabilities, which make this Trojan a highly-dangerous piece of software.

What is SearchModule?

SearchModule is an adware-type application with browser hijacker characteristics. Following successful infiltration, this app delivers various unwanted and dangerous advertisements, modifies browsers and promotes a fake search engine. Additionally, most adware and browser hijackers can record browsing-related data.

Since many people download/install SearchModule unintentionally, it is also classified as a Potentially Unwanted Application (PUA). One of the dubious techniques used to distribute SearchModule is via fake Adobe Flash Player updates. These bogus software updaters/installers are used to proliferate not only PUAs, but also Trojans, ransomware and other malware.

What is application-update[.]com?

The application-update[.]com website loads various scams. Research shows that the displayed scams target mainly mobile users. At the time of research, all scams served by application-update[.]com were designed to trick people into installing various potentially unwanted applications (PUAs).

Note that apps should never be downloaded from unofficial, deceptive websites, even if the apps are legitimate.

What is Maps N' Direction Hub?

Maps N' Direction Hub is a rogue application endorsed as a tool for easy access to various maps and routes. It is classified as a browser hijacker due to the modifications it makes to browsers to promote hmapndirectionhub.com (a bogus search engine). Maps N' Direction Hub also monitors users' browsing activity.

Furthermore, due to the dubious methods used to distribute this app, it is classified as a Potentially Unwanted Application (PUA). Note that Maps N' Direction Hub is often distributed together with Hide My History, another PUA.

What is "Your Google Ads account has been suspended"?

Phishing emails such as this are often sent by cyber criminals who attempt to deceive unsuspecting recipients into providing private, sensitive information. In this particular case, they send emails claiming that the recipients' Google Ads accounts have been suspended and urge them to restore the accounts by logging in via a deceptive website.

Note that Google has nothing to do with this email or the bogus website. Therefore, you should ignore this phishing scam.