Virus and Spyware Removal Guides, uninstall instructions

What is Palestinian Civil Police Force?

The Palestinian Civil Police Force message blocks users' computer screens and demands payment of a fine for alleged law violations. This is not a legitimate message, it is a ransomware virus created by cyber criminals to extort money from unsuspecting Palestinian PC users.

This fake message makes bogus claims that the computer was blocked due to the user watching pornography or using pirated music and video files.

Note that paying the $100 (100 Euro or 500 NIS) fine is equivalent to sending your money to cyber criminals responsible for creating this scam. This particular ransomware virus originates from a family called Urausy and predominantly targets Palestinian PC users.

What is Jordan Public Security Directorate?

The Hashemite Kingdom of Jordan Public Security Directorate message blocks computer users' screens, demanding payment of a $300 (300 Euro or 300 JOD) fine using cashU. This is a scam, a message created by cyber criminals and categorized as a ransomware virus.

It aims to trick unsuspecting Jordanian PC users into paying a bogus fine for alleged law violations such as watching pornography, using copyrighted video, music files, etc.

This message is a scam and should not be trusted. Computer users should be aware that neither the Jordan Public Security Directorate nor any other international authority or organization use computer screen-blocking messages to collect fines for any law violations.

What is SPAMHAUS?

The Spamhaus message reports the following: "You have lost control over your computer. Your system and all your files have been blocked and encrypted because you were spreading the Malware (viruses, Trojans, worms). You are breaking numerous International and USA laws".

This is a scam, a ransomware virus created by cyber criminals with the purpose to scare unsuspecting PC users into paying a bogus $300 fine for alleged law violations. This deceptive message demands that PC users pay a fine for watching child pornography, using unlicensed software, or being in possession of pirated audio and video files.

Computer users should be aware that no international authorities or organizations (including Spamhaus) use screen-blocking messages such as this to collect fines for any law violations.

What is Website access has been restricted?

The online message, 'Access Restricted!', appears when trying to access popular websites (such as Facebook, YouTube, Google, Bing, etc.) This is a Hosts file hijacker virus, a redirect virus created to coerce unsuspecting PCs users into completing online surveys.

Cyber criminals responsible for creating this scam receive commission each time users complete these deceptive online surveys. Internet users should be aware that completing these surveys can lead to serious privacy issues and considerable phone charges.

What is Searchiu.com?

The Searchiu.com website is promoted using free software. This site is closely related to Internet browser hijackers, and thus using this site for daily Internet searches, is not recommended. Computer users often visit this site unwillingly by redirection.

These redirect issues are invariably a consequence of not paying close enough attention to the installation steps of free software downloaded from the Internet. Browser redirects to Searchiu.com are caused by free software, some of which uses a deceptive software or website promotion method called 'bundling'.

What is Systemcare-antivirus.org?

Systemcare-antivirus.org is a malicious website created by cyber criminals also responsible for releasing a rogue antivirus program called System Care Antivirus. Whilst this website may appear legitimate, in fact it was created to clone a previous deceptive business model.

This model infected Internet users' computers with a fake security program, which attempted to scare them into purchasing a useless 'full version'. System Care Antivirus originates from a family of fake antivirus programs called WinWebSec. This program reports non existent security infections in the hope that unsuspecting PC users fall for the deception and buy the license key.

What is Globososo.com?

The Globososo.com website is promoted using free software and Internet users are often redirected to this site unwillingly. This is due to the Internet browser settings, homepage, and default search engine being changed to globososo.com without their consent.

Moreover, many users report that they are unable to reverse these changes and are forced to visit this website each time they start their Internet browsers. This browser hijacker is distributed using free software downloaded from the Internet and redirects to globososo.com are a consequence of not paying close enough attention during the installation phase.

Internet users should be aware that many download websites and freeware developers use a deceptive software distribution method called 'bundling' in order to monetize their downloads.

What is BigSeekPro.com?

The BigSeekPro.com website is promoted using unwanted browser add-ons and toolbars. The majority of traffic to this website is from visitors inadvertently redirected to it.

This site uses a customized Yahoo! search engine and returns legitimate search results, however, BigSeekPro.com has no privacy policy, and thus, use of this website is not recommended and may lead to serious privacy issues.

At time of research, redirects to this website were applied by '3rd party toolbar', a browser add-on, which installs together with popular YouTube video-downloading software.

What is Lebanese Internal Security Forces?

The Lebanese Internal Security Forces message demands payment of a $100 (100 Euro or 200,000 Lebanese pounds) fine in order to unblock your computer. This is a scam. This computer screen-blocking message is ransomware created by cyber criminals in order to extort money from unsuspecting PC users from Lebanon.

Computer users should be aware that no international authorities (including the Lebanese Internal Security Forces) use such messages to collect fines for any law violations. The deceptive message presented within this ransomware virus claims that computer users must pay the fine for using copyrighted files (music, videos, software) or for watching pornography.

What is Qvo6.com?

The Qvo6.com website presents users with a search bar similar to that of Google.com The creators of this website, however, use a deceptive promotion method: redirects to it are applied without computer users' consent when installing free software downloaded from the Internet.

Qvo6.com is a rogue browser hijacker, a website that adds no real value for visitors. Moreover, Internet users often visit this site unwillingly, since they are forcibly redirected to it.

To avoid browser redirect issues such as this, Internet users should express caution when installing free software, since many download websites use so-called 'download clients', which are designed to offer additional software when freeware is downloaded and installed.