Virus and Spyware Removal Guides, uninstall instructions

What is ICSPA - Votre ordinateur a été verrouillé?

This Message, purportedly sent from the FBI CyberCrime Division and International Cyber Security Protection Alliance, demands that the user pays a 200 Euro fine in order to unlock the computer. This is a scam, a ransomware infection targeting PC users predominantly from France.

Computer users should be aware that neither the FBI nor any other international authority or organization use screen-locking messages to collect fines for any law violations. These messages are used by cyber criminals to extort money from unsuspecting PC users who fall for their trickery and pay the bogus fine using Ukash or PaySafeCard.

This deceptive message states that computer users must pay the fine for allegedly watching child-related pornography or using pirated content such as videos, music, software, etc. These statements are false. Cyber criminals responsible for creating this scam use this deceptive text to scare PC users into believing that they have committed a crime.

What is Savings Addon?

Savings Addon is a potentially unwanted browser add-on created by 215 Apps. This extension is designed to display coupon ads when users visit shopping websites and the developers claim that this plug-in will save time and money when shopping online.

The downside of Savings Addon, however, is that in most cases it installs on users' Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) without their consent.

This browser plug-in installs together with free software downloaded from the Internet using a marketing method called 'bundling'. Internet users should be aware that many popular freeware download websites use 'download clients', which offer installation of additional software.

What is iON Internet Security?

iON Internet Security from cloud is a rogue security program which reports non-existent security infections in an attempt to scare PC users into purchasing a 'full version'. This software is created by cyber criminals who make money from unsuspecting computer users who fall for the trickery displayed by this bogus software.

PC users should be aware that none of the security infections identified by iON Internet Security from cloud exist on their systems.

Fake security scans and 'detection' of multiple high-risk malware infections are just a part of the scam. Adding to the danger, this fake security scanner modifies the registry of the infected operating system and configures the scanner to start automatically on each system start-up.

What is Similar Sites?

Similar Sites is a browser extension, which as the name suggests, displays a list of sites similar to the current one visited by the user. This browser plug-in is developed by SimilarSites and promises to save with its ability to generate a list of sites related to the user's browsing interest.

Similar Sites is a popular browser add-on and not related to malware or viruses, however, many Internet users recently report that it was installed on their Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox, and Opera) without their consent.

Unwilling installation of the Similar Sites extension can be caused by free software installation, since this browser plug-in is promoted using a software distribution method called 'bundling'. Note that today, many download websites and freeware developers employ this marketing technique to monetize incoming web traffic.

What is Coupon Pigeon?

Coupon Pigeon is a potentially unwanted program (PUP), a browser add-on, which displays coupon ads on various online shopping websites such as qvc.com, Walmart, zappos.com, Target, etc.

Many computer users report that this browser plug-in was installed on their Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) without their consent, and furthermore, many experience unwanted coupon ads and diminished browser performance.

Note that the developers of Coupon Pigeon (215 Apps) create PUPs such as these on an almost daily basis. They also employ a deceptive software marketing method called 'bundling' for distribution. Unwilling installation of Coupon Pigeon adware is usually a consequence of not paying close enough attention when downloading and installing free software.

What is BiggestDeals?

BiggestDeals Shopping Buddy is a browser extension developed by Local Directory Inc. This browser add-on displays coupon deals when users visit online shopping websites such as BagsBuy.com, BestBuy.com, Drugstore.com, etc. The creators claim that this plug-in helps to save money and time whilst shopping online.

It is compatible with the Internet Explorer, Google Chrome, and Mozilla Firefox browsers. Be aware that the BiggestDeals extension may install on your Internet browser unwillingly, since it if often 'bundled' with free software downloaded from the Internet.

Today, the bundling distribution method is employed by many download websites using 'download clients', which offer installation of additional software, browser toolbars, and add-ons.

Ministry of Interior, Kingdom of Saudi Arabia virus "Computer Locked" removal guide

The Ministry of Interior, Kingdom of Saudi Arabia message blocks the user's computer screen and demands payment of a $100 (100 Euro or 500 AED) fine. This is a scam created by cyber criminals and used to trick unsuspecting PC users in order to extort money from them.

Paying this fine is equivalent to sending your money to Cyber criminals. In fact, the Ministry of Interior does not use messages such as this to collect fines for any law violations.

This type of message is called ransomware, originates from a family of screen lockers called Urausy, and targets PC users predominantly from Saudi Arabia. Note that ransomware messages are localized and may change their appearance and deceptive message according to the location of the targeted computer.

Abu Dhabi Police GHQ virus removal guide

The Abu Dhabi Police GHQ message blocks computer users' screens demanding payment of a $100 (500 AED or 100 Euro) fine using cashU. This is a scam, a ransomware virus created by cyber criminals with the purpose of tricking unsuspecting PC users from the United Arab Emirates into paying a fake fine for alleged law violations.

The deceptive message displayed by this ransomware states that a fine must be paid for watching pornography or using and distributing copyrighted content such as videos, music, software, etc. No international authorities including the Abu Dhabi Police GHQ use computer screen blocking messages to collect fines for any law violations.

Paying this $100 fine is equivalent to sending money to cyber criminals. This particular ransomware virus originates from a family called Urausy and targets PC users from the United Arab Emirates. Note that rogue messages such as these are localized, so that PC users from different countries observe variants of the same message.

Bundeskriminalamt "Ihr Internet Service Provider ist blockiert" virus removal guide

The Bundeskriminalamt message states that the computer has been blocked due to the user watching pornography involving minors. This is a scam, a ransomware virus developed by cyber criminals to trick unsuspecting PC users (predominantly from Germany) into paying a bogus 100 Euro fine.

In fact, no international authorities or organizations use screen blocking messages to collect fines for any law violations. Cyber criminals responsible for creating this scam exploit the name and graphics of Bundeskriminalamt in order to make their deceptive message appear authentic.

Note that the main purpose of this scam is to extort money from computer users who fall for this trickery - paying the 100 Euro fine is equivalent to sending your money to cyber criminals.

Metropolitan Police Virus "Your Personal Computer has been blocked" removal guide

This message, purportedly sent by the Metropolitan Police, demands payment of a 100 Pound fine for allegedly watching pornography involving minors. This is a scam, a ransomware virus created by cyber criminals whose intention is to scare unsuspecting PC users from the UK into paying a bogus fine.

In fact, paying this fine is equivalent to sending your money to cyber criminals. Neither the Metropolitan Police nor any other international authority or organization use screen blocking messages to collect fines for any law violations.