Virus and Spyware Removal Guides, uninstall instructions

What is Royal Canadian Mounted Police?

The Royal Canadian Mounted Police (RCMP) message demands that computer users pay a $100 CAD fine. This is a scam, a ransomware infection delivering false statements - accusing PC users of downloading copyrighted music and video files, in order to scare them into paying a fake fine.

In fact, this message was created by cyber criminals via Trojan infections employed to infiltrate users' systems with ransomware scams. The Royal Canadian Mounted Police do not send messages such as this and no authorities internationally use these methods (locking computer screens) to collect fines for any law violations.

What is is Ad.Xtendmedia.com?

Ad.Xtendmedia.com is an ad server used to provide pop-up and banner ads to various sources. Many Internet users refer to Ad.xtendmedia.com as a virus or malware, since their Internet browsers continually open pop-up ads originating from this ad network.

Computer users should be aware that this website alone is not related to computer security infections, however, it generates deceptive ads and clicking on these may lead to serious privacy and security issues.

Moreover, pop-up ads by Ad.xtendmedia.com are employed by various misleading programs and freeware 'download installers' in order to monetize incoming web traffic. Browser redirects and pop-up ads by this website can be caused by potentially unwanted browser extensions and adware.

What is DnsBasic.com?

DnsBasic.com is a misleading website which attempts to coerce Internet users into using their malicious search engine. Note that many computer users refer to DnsBasic.com as the DnsBasic virus or the DnsBasic browser hijacker.

These associations are made since this website employs deceptive promotion methods: hijacking Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) and modifying the settings (homepage and default search engine) without the user's consent.

Browser redirects to DnsBasic.com are often caused by rogue free software developers and download websites, which use 'freeware installers'. Using deceptive tactics, these installers offer installation of additional browser add-ons and toolbars when Internet users download their programs.

What is You Shall Not Pass?

The "You shall not pass" message appears when attempting to access Google, Facebook, or other popular websites. It is a host hijacker - a security infection, which modifies the operating system Hosts file. This file is used to resolve canonical names of websites to IP addresses.

When this file is modified, users may be redirected to malicious websites whilst still observing valid URLs in address bar. Note that this particular security threat does not appear to be especially malicious - it blocks access to popular websites, however, it does not perform other malicious tasks.

Other Hosts file hijackers prevent users' access to the Internet, then coerce them into completing online surveys before returning Internet access.

What is Computer Crime and Intellectual Property Section?

The Computer Crime and Intellectual Property Section message "Your PC is blocked due to at least one of the reasons specified below" is a scam, a ransomware virus created by cyber criminals. This fake message infiltrates users' systems via detected security vulnerabilities and blocks the computer screens.

Moreover, it makes false accusations of copyright violations and related rights infringements (or viewing and distributing prohibited pornographic content), and then demands payment of a $300 fine using MoneyPak.

This particular ransomware virus originates from a family of rogue software called Flimrans and targets PC users from the USA. Internet users should be aware that the Computer Crime and Intellectual Property Section does not use screen locking messages to collect fines. This is a scam and paying this fake fine is equivalent to sending your money to cyber criminals.

What is Europol Interpol Virus?

The Europol Interpol message "Ihr Internet Service Provider blockiert" blocks computer screens and accuses computer users of watching child pornography. This is a scam, a ransomware virus created by cyber criminals. The main purpose of this scam is to trick unsuspecting PC users into paying a bogus 100 Euro fine using PaySafeCard.

This ransomware virus is especially rogue since it displays various child porn-related images on the infected computer. This screen-blocking message originates from a family of ransomware called Revoyem and predominantly targets PC users from Germany.

What is MoneyGram?

MoneyGram is a leading global payment services company, not a virus. Note, however, that today, many computer users refer to MoneyGram as the "MoneyGram Virus". This association is made, since cyber criminals use this legitimate service to collect bogus fines.

This is achieved by infecting Internet users' systems with ransomware viruses, which block computer screens and demand payment of fines to unlock them. Note that MoneyGram is in no way related to ransomware viruses.

If you observe a message on your computer, supposedly from the FBI Cybercrime Division or other authority, ordering payment of a fine for alleged law violations (cyber criminals often make false accusations of watching child pornography or using pirated music and video files), then you are dealing with a ransomware virus.

What is XP Micro Antivirus?

The XP Micro Antivirus fake online security scanner displays fake security scan results with the intention of tricking unsuspecting PC users into downloading rogue software. Cyber criminals use bogus security warning pop-ups and 'scans' in order to scare PC users into believing that their computers are infiltrated with high-risk malware.

They then offer downloads, which supposedly remedy these issues. Internet users should be aware that XP Micro Antivirus is a scam, a malicious online ad with none of the features required to scan or detect possible malware or virus infections.

Commonly, such ads are delivered by deceptive ad networks and malicious websites, thus, computer users who fall for this trickery download the suggested program and inadvertently infect their computers with fake antivirus or rogue optimization software.

What kind of application is VisualBee?

The VisualBee Toolbar browser toolbar installs on users' Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) together with free software downloaded from the Internet. Furthermore, this unwanted program modifies Internet browser settings by changing the default search engine and homepage to visualbee.delta-search.com

What is DealBrowsing?

DealBrowsing is a browser extension and desktop app developed by Visicom Media Inc. It promises to deliver relevant coupon ads to Internet users who visit online shopping websites.

Whilst this browser add-on and desktop app is not malicious, many computer users refer to it as the 'DealBrowsing virus' or adware - an association made since DealBrowsing may install on users' computers along with free software downloaded from the Internet.

This software marketing method is called 'bundling' and is used by many popular download websites in order to monetize their free software services.