Virus and Spyware Removal Guides, uninstall instructions

Master Penalty Document Virus

What is Master Penalty Document?

The Master Penalty Document message (purporting to be delivered from SOPA and PIPA), blocks computer users' desktops and is a scam. This is a ransomware infection which orders computer users to pay a 100 Euro fine for supposed law violations (for example, using a pirated version of an operating system or other software).

PC users should not trust this message, since it has no connection with legitimate authorities. It is a scam created by cyber criminals who make money from computer users who fall for such trickery and pay the bogus fine. Paying this fine is equivalent to sending your money to cyber criminals, and there is no guarantee that your computer will be unblocked as a result.

Win Server Defender

What is Win Server Defender?

Win Server Defender is a rogue antivirus program that infects the Windows Server operating system. The program imitates a security scan, and after generating a list of fake security infections, advises computer users to purchase the full version. This scam originates from a family of name-changing rogue programs called Braviax.

This particular bogus program is the only known fake antivirus software to specifically target the Windows Server operating system. That is not to say that it does not attack others; note that this rogue is capable of adapting its name according to the operating system it infiltrates.

For example, for a system running Windows 7, the name is modified to appear as Win7 Defender and for Windows XP, it appears as XP Defender. To give the appearance that your system is infected with viruses and malware, Win Server Defender disables the Task Manager, disallows execution of installed software, and generates fake security warning pop-ups.

Police Virus - Your Operating System is Locked

What is" Police Virus - Your Operating System is Locked"? 

"Police - Your operating system is locked" is a ransomware infection developed and distributed by cyber criminals. If you see this type of message blocking your computer screen, your PC is infected with a ransomware infection. Do not pay any fines demanded by this message, of which there are several variants.

For example, PC users from Europe are ordered to pay a 100 Euro fine to unlock the operating system, whereas those from the USA and Canada, $200. Note that international authorities have no connection with this message - it is a scam.

If you pay this fine, you will send your money to cyber criminals and your operating system will remain locked. This ransomware infection originates from a family of screen lockers called Goscri. Virus

What is

The website presents users with a search bar - the creators claim that this is a search engine.

In fact, it displays results from other reputable search engines (such as Google, Bing, or Yahoo!) Whilst the organic search results delivered by this website seem legitimate, clicking on sponsored results may lead to installation of unwanted browser extensions or even malware.

The website is promoted using browser add-ons and freeware (free software that computer users download from the Internet). During installation this software installs additional Internet browser extensions (which modify browser settings including the homepage and default search engine), and plug-ins, which prevent the settings from being changed by the user.


What is FirstRowSportsApp?

FirstRowSportsApp is a free program claiming to enable users to watch various sports-related channels and events. In fact, this is a useless program created with the sole purpose of gaining affiliate revenues from browsers add-ons bundled with it. FirstRowSportsApp is a clone of TornTV.

When computer users download and install this program, they will also inadvertently install the Babylon toolbar (causing browser redirects to, Yontoo Adware (causing unwanted ad pop-ups), and the Browser Protect plug-in (disabling changes to your hijacked Internet browser settings).

Fast Address Bar

What is Fast Adress Bar?

The Fast Address Bar browser add-on claims to enhance Internet users' browsing experience by adding search engine functionality to the address bar. Once installed, this browser plug-in suggests additional websites when addresses are typed into the address bar.

Note, however, that whenever you click on suggested sites, you are redirected to Moreover, some of the suggested sites are promoted by the developers of Fast Address Bar.

Shop to Win Adware

What is Shop to Win?

The Shop to Win browser extension (compatible with Internet Explorer and Mozilla FireFox) tracks Internet users' browsing and awards prizes to those who purchase products from their partners. Developers of this website claim that Shot to Win has partnered with more than 2500 merchants.

This browser extension is not related to malware or virus infections, however, recent complaints from computer users state that they did not willingly install this plug-in and receive notifications and ads from Shop to Win. This categorizes the browser plug-in an unwanted application.

There are two ways in which Shop to Win becomes installed on users' systems: 1) the plug-in is downloaded from the Shop to Win homepage and users' are aware of it presence on their systems, or; 2) it is bundled with free software and installed without users' consent.

Complete an Offer to Unlock Your Desktop Virus

What is Complete an Offer to Unlock Your Desktop?

"Complete an offer below to unlock your desktop" is a ransomware infection used by cyber criminals to coerce PC users into taking online surveys, thus making money from dubious affiliate networks.

This ransomware infection differs from others distributed - standard ransomware infections exploit the names of authorities (such as the FBI, Interpol, Federal Department, etc.), demanding payment of bogus fines for supposed law violations.

"Complete an offer to unlock your desktop", however, is a new approach to ransomware infections. This scam blocks computer users' desktops and attempts to coerce them into taking up online offers. Redirect

What is

iMesh is a P2P program that enables users to download songs and videos. Redirects to are also caused by BearShare freeware. iMesh is legitimate software used by many computer users worldwide, however, the downside of this free program is the adware bundled with its installer.

By default, each user electing to install iMesh will also install a search-results toolbar and have their Internet browser default homepage modified to Note that users can opt out of these potentially unwanted installations and homepage changes, though unfortunately, many users do not pay close enough attention at the installation phase.

CouponBar Toolbar

What is CouponBar toolbar?

The CouponBar Toolbar browser add-on supposedly enhances the Internet browsing experience by displaying coupon deals on Internet shopping websites, thus allowing users to save money whilst buying online.

The toolbar alone is not related to malware or spyware infections, however, it is promoted using free software and is commonly installed on users' systems without their consent.

This categorizes CouponBar as an unwanted browser extension. When installed on Internet browsers, this browser add-on not only displays coupon deals, but also changes the default homepage to


Page 2150 of 2175

<< Start < Prev 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 Next > End >>
About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

Virus and malware removal

This page provides information on how to avoid infections by malware or viruses and is useful if your system suffers from common spyware and malware attacks.

Learn about malware removal