Virus and Spyware Removal Guides, uninstall instructions

What is Trustedoffer.com?

TrustedOffer.com is a malicious website, which serves various deceptive ads in the hope that Internet users complete online surveys, divulge their private information, or install various adware and potentially unwanted programs (PUPs).

This site is related to unwanted browser add-ons, which, when installed on Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox), cause pop-up ads served by TrustedOffer.com

Whilst these pop-up ads do not cause malware, Internet users should avoid clicking them since they lead to installation of unwanted browser toolbars, redirect issues, and online surveys, which encourage computer users to subscribe to costly and useless mobile services.

What is Savings Magnet?

Savings Magnet is a potentially unwanted browser add-on, which installs on users' computers through free software downloads. Creators of this browser plug-in state that this browser extension saves time and money whilst shopping online.

It collects special online sales coupons, discounts, and displays these deals when Internet users visit online shopping websites such as Walmart, Ebay, Amazon, etc.

While the functionality of Savings Magnet add-on may seem useful, many computer users refer to this extension as the Savings Magnet virus or adware. This negative association arises since Internet users commonly install the browser plug-in without their consent - this as a result of Savings Magnet being 'bundled' with free software downloaded from the Internet.

What is GlobaSearch.com?

The Globasearch.com website is owned and operated by Ilyesoft Studio and presents users with a customized Google search engine, bookmarks, and quick links to popular websites such as Wikipedia, YouTube, Yahoo etc.

This website is not malicious and not related to malware or virus infections, however, the creators use a deceptive marketing method to attract website visitors. 

Many Internet users report that they experience browser redirects to Globasearch.com These unwanted browser redirects are caused by dubious download websites and freeware developers who monetize their downloads and free software by enforcing browser setting modifications during the downloading and installation phase.

What is LessTabs?

The LessTabs (or Less Tabs) browser add-on enhances Internet users' browsing experience by displaying quick information relating to highlighted text without the need to open additional browser tabs. When the user highlights text (by selecting it), LessTabs displays a pop-up window with relevant translations, thesaurus, Wikipedia, and additional search results.

Whilst such added functionality may seem useful, many computer users refer to this browser add-on as the LessTabs virus or adware. Such associations are made since the LessTabs browser extension is promoted using free software downloads, and Internet users often download and install it unwillingly.

What is Continue to Save?

The 'Continue to Save' browser extension is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox. This add-on promises to save Internet users time and money by displaying coupons and special offer ads whilst shopping on websites such as Amazon, Ebay, Walmart, etc.

Note that, while the idea of saving money by this method may seem useful, many Internet users report that Continue to Save was installed on their Internet browsers without their consent and they experience difficulty removing it.

Some computer users refer to this browser extension as the Continue to Save virus or spyware. While such associations may seem strict, this extension is categorized as adware or a potentially unwanted program (PUP).

What is Sys-doctor.com?

Sys-doctor.com is a malicious website created by cyber criminals who are also responsible for distributing the System Doctor 2014 fake antivirus program. This site is created with the purpose of tricking payment processing companies into believing that they are dealing with a legitimate company developing genuine antivirus software.

Note that whilst this website may appear legitimate, in fact it is a scam. It acts to clone a deceptive business model, a model which infects users' computer with a fake antivirus program and coerces them into buying a bogus license key to activate it.

What is Internet Security 2014?

Internet Security 2014 is a rogue antivirus program which reports non-existent security infections in the hope that PC users will purchase a useless license key. This program is created by cyber criminals and distributed using 'exploit kits' and drive-by downloads.

After infiltration, Internet Security 2014 imitates a legitimate antivirus program by performing a 'security scan'. Computer users who negotiate this program should be aware that all security scans, warning pop-ups, and malware detection lists generated by it, are fake.

The main purpose of this rogue program is to scare unsuspecting PC users into believing that their computers are infected with high-risk viruses and then to coerce them into activating Internet Security 2014  (by purchasing the 'full version').

What is Ured Za Posebne Poslove Sigurnosti?

The Ured Za Posobne Poslove Sigurnosti (Croatian Police) message, "Vaš kompjuter je blokiran zbog barem jednoga od razioga navedenog u nastavku", blocks the computer user's screen and demands payment of a 100 Euro (or 500 HRK) fine. This is a scam.

If you observe this message on your computer screen, your PC is infiltrated with a ransomware virus, which makes false accusations of law violations such as watching child pornography, being in possession of pirated copies of music and video files, etc. This is in order to trick you into paying a bogus fine.

Note that paying this fine, using Ukash or paysafecard when requested by this message, is equivalent to sending your money to cyber criminals. This ransomware virus originates from a family called "Urausy" and targets PC users predominantly from Croatia.

Internet users should be aware that no legitimate authorities, including Ured Za Posobne Poslove Sigurnosti, use screen-blocking messages to collect fines for any law violations.

What is Austrian Polizei Virus?

The Austrian Polizei message "Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt" blocks computer screens and demands payment of a 100 Euro fine using Ukash or PaySafeCard. This message is not sent by the Austrian Police, it is a scam delivered by a ransomware virus.

Cyber criminals responsible for developing this virus hope that computer users from Austria will fall for the deceptive text displayed within the message and pay the bogus fine.

The fake Austrian Polizei Cybercrime Investigation Department message states that the user must pay a fine for allegedly watching child pornography or owning pirated copies of copyrighted video and music files.

What is Searchnu.com?

The Searchnu.com website is promoted by several toolbars and browser add-ons. Searchnu.com is a simple website with several links to social networks, YouTube, and online games. It also has a search bar that redirects inputted search queries to Ask.com

This website is not strictly related to malware or viruses, however, redirects to this website are a consequence of browser extension installation.

Commonly, Internet users are redirected to Searchnu.com following installation of the Bandoo plug-in or Searchqu toolbar. Note that installation of these browser plug-ins can occur either if downloaded individually or when 'bundled' with free software (such as iLivid or other popular video converters, YouTube video downloaders, etc.)