Virus and Spyware Removal Guides, uninstall instructions

What is You Shall Not Pass?

The "You shall not pass" message appears when attempting to access Google, Facebook, or other popular websites. It is a host hijacker - a security infection, which modifies the operating system Hosts file. This file is used to resolve canonical names of websites to IP addresses.

When this file is modified, users may be redirected to malicious websites whilst still observing valid URLs in address bar. Note that this particular security threat does not appear to be especially malicious - it blocks access to popular websites, however, it does not perform other malicious tasks.

Other Hosts file hijackers prevent users' access to the Internet, then coerce them into completing online surveys before returning Internet access.

What is Computer Crime and Intellectual Property Section?

The Computer Crime and Intellectual Property Section message "Your PC is blocked due to at least one of the reasons specified below" is a scam, a ransomware virus created by cyber criminals. This fake message infiltrates users' systems via detected security vulnerabilities and blocks the computer screens.

Moreover, it makes false accusations of copyright violations and related rights infringements (or viewing and distributing prohibited pornographic content), and then demands payment of a $300 fine using MoneyPak.

This particular ransomware virus originates from a family of rogue software called Flimrans and targets PC users from the USA. Internet users should be aware that the Computer Crime and Intellectual Property Section does not use screen locking messages to collect fines. This is a scam and paying this fake fine is equivalent to sending your money to cyber criminals.

What is Europol Interpol Virus?

The Europol Interpol message "Ihr Internet Service Provider blockiert" blocks computer screens and accuses computer users of watching child pornography. This is a scam, a ransomware virus created by cyber criminals. The main purpose of this scam is to trick unsuspecting PC users into paying a bogus 100 Euro fine using PaySafeCard.

This ransomware virus is especially rogue since it displays various child porn-related images on the infected computer. This screen-blocking message originates from a family of ransomware called Revoyem and predominantly targets PC users from Germany.

What is MoneyGram?

MoneyGram is a leading global payment services company, not a virus. Note, however, that today, many computer users refer to MoneyGram as the "MoneyGram Virus". This association is made, since cyber criminals use this legitimate service to collect bogus fines.

This is achieved by infecting Internet users' systems with ransomware viruses, which block computer screens and demand payment of fines to unlock them. Note that MoneyGram is in no way related to ransomware viruses.

If you observe a message on your computer, supposedly from the FBI Cybercrime Division or other authority, ordering payment of a fine for alleged law violations (cyber criminals often make false accusations of watching child pornography or using pirated music and video files), then you are dealing with a ransomware virus.

What is XP Micro Antivirus?

The XP Micro Antivirus fake online security scanner displays fake security scan results with the intention of tricking unsuspecting PC users into downloading rogue software. Cyber criminals use bogus security warning pop-ups and 'scans' in order to scare PC users into believing that their computers are infiltrated with high-risk malware.

They then offer downloads, which supposedly remedy these issues. Internet users should be aware that XP Micro Antivirus is a scam, a malicious online ad with none of the features required to scan or detect possible malware or virus infections.

Commonly, such ads are delivered by deceptive ad networks and malicious websites, thus, computer users who fall for this trickery download the suggested program and inadvertently infect their computers with fake antivirus or rogue optimization software.

What kind of application is VisualBee?

The VisualBee Toolbar browser toolbar installs on users' Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) together with free software downloaded from the Internet. Furthermore, this unwanted program modifies Internet browser settings by changing the default search engine and homepage to visualbee.delta-search.com

What is DealBrowsing?

DealBrowsing is a browser extension and desktop app developed by Visicom Media Inc. It promises to deliver relevant coupon ads to Internet users who visit online shopping websites.

Whilst this browser add-on and desktop app is not malicious, many computer users refer to it as the 'DealBrowsing virus' or adware - an association made since DealBrowsing may install on users' computers along with free software downloaded from the Internet.

This software marketing method is called 'bundling' and is used by many popular download websites in order to monetize their free software services.

What is Decrypt Protect?

The Decrypt Protect message blocks users' computer screens demanding payment of a $300 fine (using MoneyPak, Ukash or PaySafeCard) in order to regain access to the computer. This is a scam, a ransomware virus that has no connection with legiimate authorities or organizations.

This deceptive message states that computer users are required pay a fine for alleged law violations including distribution of pornographic material, possession of unlicensed software, and possession of video or audio files. This is a scam created by cyber criminals. This fake message exploits the names of MBL Advisory (Malware Block List) and USA Patriot ACT.

What is 24/7 PC Guard Support?

24/7 PC Guard Support is a bogus virus removal support service promoted using fake online security warning pop-ups. The rogue company responsible for this scam use a fake antivirus program called PC Guard in order to scare unsuspecting PC users into purchasing their rogue 24/7 PC Support services for $179.99.

Initially, this rogue program presents users with a fake online security warning message stating that the computer may have been infected with spyware or other high-risk malware. Internet users should be aware that these online security threats (indicating pop-ups) are false and used by a bogus support company in order to deceive computer users.

What is WebBrowserSearch.com?

Web Browser Search is a browser add on created by AOL Inc. This extension is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox. It is a browser plug-in providing users with quick access to online services such as Web Tattoo, Tattoons, Incredible Screensavers, etc.

Whilst Web Browser Search is created by a legitimate company, many computer users report that webbrowsersearch.com was set as their default search engine and homepage (also applied to any new tabs) without their consent. Such unwilling Web Browser Search add-on installation may occur when using the aforementioned online services.

Internet users should be aware that many websites offering free screen-savers, smileys, browser skins, etc. (in this case, free web tattoo) use browser add-ons and toolbars to monetize incoming web traffic. In this way, they provide free services and earn revenue each time the Web Browser Search add-on is installed.