Virus and Spyware Removal Guides, uninstall instructions

What is GARDA?

The GARDA (The Guardians of the Peace of Ireland and The National Crime Prevention unit) message, "Your computer has been blocked up for safety reasons listed below", blocks computer screens and demands payment of a 100 Euro fine using PaySafeCard or Ukash to unblock the PC. This is a scam.

The message makes fake accusations of law infringements (viewing/storage and/or dissemination of child pornography/zoophilia/rape, downloading of pirated music, videos, warez, etc.) in order to scare unsuspecting PC users from Ireland into paying the bogus fine.

Note that paying the fine when ordered by this message (screenshot below) is equivalent to sending your money to cyber criminals.

What is Search Deals?

Search Deals is a browser add-on created by CloudCanvas Inc. When installed, this plugin displays coupon ads when users search the Internet using Google. Whilst such added functionality may seem legitimate, the Search Deals add-on is categorized as adware or a potentially unwanted program (PUP), since it installs on users' Internet browsers (Internet Explorer, Google Chrome, and Mozilla FireFox) together with free software downloaded from the Internet.

Moreover, it displays various unwanted ads and tracks users' Internet browsing habits. Many users report that they observe 'Search Deals Ads' when searching the Internet, even though they did not willingly install any browser add-ons.

Unwilling or inadvertent installation of Search Deals can be caused by various freeware 'installers' and 'download clients', which are employed by many developers of free software and free software download websites.

What is Policja (Polizja) Biuro Służby Kryminalnej?

The Polizja. Biuro Służby Kryminalnej message, "UWAGA! Pański osobisty komputer został zablokowany ze wzslędów bezpieczeństwa z wskazanych niżej przyczyn", blocks computer screens and demands payment of a 500 PLN fine for alleged law violations (including watching child pornography, distributing copyrighted content, etc.) This is a scam.

The message is not sent by legitimate authorities from Poland; it is created by cyber criminals in the hope that unsuspecting PC users will fall for their trickery and pay the bogus fine. Paying the 500 PLN fine using Ukash or PaySafeCard is equivalent to sending your money to cyber criminals.

PC users should be aware that no authorities, internationally, use screen-blocking messages to collect fines for any law violations - this is a well-known scam created by cyber criminals.

What is ACMA?

The following message blocks the computer screen and demands payment of a AUD $100 fine using Ukash for alleged law violations: Australian Communications and Media Authority (ACMA), Australian Federal Police (AFP), Australian Crime Commission (ACC) and Royal Australian Corps of Military Police (RACMP), "Your computer has been blocked for safety reasons".

This is a scam, a ransomware infection created by cyber criminals whose main purpose is to trick unsuspecting PC users from Australia into paying the bogus fine.

The accusations of law infringements presented by this message (viewing/storage and/or dissemination of banned pornography, downloading pirated music, video, software, etc.) are false. Cyber criminals hope that PC users will believe the message and pay the bogus fine.

What is EUROPOL All files encrypted?

The Internet browser (Internet Explorer, Google Chrome, Mozilla FireFox or Safari) message, which is supposedly delivered by EUROPOL (European Cybercrime Centre), stating that "All activities of this computer have been recorded. All your files are encrypted." is a scam. This message is not sent by Europol or EC3, it is a ransomware virus created by cyber criminals.

This deceptive message states that computer users must pay a £200 GBP fine using Ukash for alleged law violations (illegally using or distributing copyrighted content, such as video, music, or/and software, viewing or distributing prohibited pornographic content, violating the law, or neglectful use of your PC).

In fact, no legitimate authorities (including Europol) use Internet browser/computer screen-blocking messages to collect fines for any law violations.

What is Agence Nationale de la Sécurité?

The following message is a ransomware virus: Agence Nationale de la Sécurité des Systèmes D'information "Haute Autorité pour la Diffusion des Oeuvres et la Protection des Droits sur Internet", "ATTENTION! Votre ordinateur personnel est bloqué pour des raisons de sécurité suivantes."

Computer users from France should be aware that no legitimate authorities use screen-blocking messages to collect fines for any law violations. This fake message demands payment a 100 Euro fine using Ukash or PaySafeCard in order to unblock your computer. Note that paying this fine is equivalent to sending your money to cyber criminals.

What is Metropolitan British Police?

The Metropolitan British Police and Serious (misspelled "Serios") Organised Crime Agency (SOCA) message blocks computer screens and demands payment of a 100 Pound fine to unlock the system. This is a scam. This message is not sent by legitimate authorities from the UK, it is a ransomware virus created by cyber criminals.

No of authorities from the UK, including the Police Central e-crime Unit - PCeU, Cheshire Constabulary, Serious Organised Crime Agency - SOCA, or Metropolitan British Police, use screen-blocking messages to collect fines for any law violations (such as allegedly downloading pirated music, videos, viewing/storage and/or dissemination of banned pornography, etc.)

Paying this bogus 100 Pound fine using Ukash or PaySafeCard is equivalent to sending your money to cyber criminals.

What is Antivirus System?

Antivirus System is a rogue antivirus program, which reports non-existent security infections in the hope that unsuspecting PC users will purchase a useless 'full version'. This program is created by cyber criminals in order to extort money and credit card information - it is a scam and should not be trusted.

Antivirus System originates from a family of fake antivirus programs called FakeRean and infiltrates users' operating systems (Windows XP, Windows Vista, Windows 7, and Windows 8) using any detected security vulnerabilities. Commonly, this rogue antivirus program is proliferated using 'exploit kits' via infected email messages, malicious websites, and drive-by downloads.

What is Safe Saver?

The Safe Saver is a browser add-on that generates coupon and deals ads when Internet users visit online shopping websites such as eBay, Amazon, Walmart, etc. This plug-in is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox.

Whilst savings on purchases made online might seem beneficial, many computer users refer to Safe Saver as adware, spyware, or a virus. These negative associations are made since this browser add-on is a potentially unwanted application, which is installed on users' computers without their consent. Safe Saver installs together with free software downloaded from the Internet.

What is Votre fournisseur est bloqué?

The "Votre fournisseur d'accès à Internet est bloqué" message blocks computer screens demanding payment of a 100 Euro fine using Ukash or PaySafeCard. This is a scam. This message is not sent by Ministère de L'Intérieur, it is a ransomware virus created by cyber criminals.

The main purpose of this deceptive message is to deceive unsuspecting PC users from France into paying a bogus fine. This fake message states that computer users were watching pornography involving minors and thus have to pay a fine in order to avoid arrest. Note that paying this fine is equivalent to sending your money to cyber criminals.