Virus and Spyware Removal Guides, uninstall instructions

What is LessTabs?

The LessTabs (or Less Tabs) browser add-on enhances Internet users' browsing experience by displaying quick information relating to highlighted text without the need to open additional browser tabs. When the user highlights text (by selecting it), LessTabs displays a pop-up window with relevant translations, thesaurus, Wikipedia, and additional search results.

Whilst such added functionality may seem useful, many computer users refer to this browser add-on as the LessTabs virus or adware. Such associations are made since the LessTabs browser extension is promoted using free software downloads, and Internet users often download and install it unwillingly.

What is Continue to Save?

The 'Continue to Save' browser extension is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox. This add-on promises to save Internet users time and money by displaying coupons and special offer ads whilst shopping on websites such as Amazon, Ebay, Walmart, etc.

Note that, while the idea of saving money by this method may seem useful, many Internet users report that Continue to Save was installed on their Internet browsers without their consent and they experience difficulty removing it.

Some computer users refer to this browser extension as the Continue to Save virus or spyware. While such associations may seem strict, this extension is categorized as adware or a potentially unwanted program (PUP).

What is Sys-doctor.com?

Sys-doctor.com is a malicious website created by cyber criminals who are also responsible for distributing the System Doctor 2014 fake antivirus program. This site is created with the purpose of tricking payment processing companies into believing that they are dealing with a legitimate company developing genuine antivirus software.

Note that whilst this website may appear legitimate, in fact it is a scam. It acts to clone a deceptive business model, a model which infects users' computer with a fake antivirus program and coerces them into buying a bogus license key to activate it.

What is Internet Security 2014?

Internet Security 2014 is a rogue antivirus program which reports non-existent security infections in the hope that PC users will purchase a useless license key. This program is created by cyber criminals and distributed using 'exploit kits' and drive-by downloads.

After infiltration, Internet Security 2014 imitates a legitimate antivirus program by performing a 'security scan'. Computer users who negotiate this program should be aware that all security scans, warning pop-ups, and malware detection lists generated by it, are fake.

The main purpose of this rogue program is to scare unsuspecting PC users into believing that their computers are infected with high-risk viruses and then to coerce them into activating Internet Security 2014  (by purchasing the 'full version').

What is Ured Za Posebne Poslove Sigurnosti?

The Ured Za Posobne Poslove Sigurnosti (Croatian Police) message, "Vaš kompjuter je blokiran zbog barem jednoga od razioga navedenog u nastavku", blocks the computer user's screen and demands payment of a 100 Euro (or 500 HRK) fine. This is a scam.

If you observe this message on your computer screen, your PC is infiltrated with a ransomware virus, which makes false accusations of law violations such as watching child pornography, being in possession of pirated copies of music and video files, etc. This is in order to trick you into paying a bogus fine.

Note that paying this fine, using Ukash or paysafecard when requested by this message, is equivalent to sending your money to cyber criminals. This ransomware virus originates from a family called "Urausy" and targets PC users predominantly from Croatia.

Internet users should be aware that no legitimate authorities, including Ured Za Posobne Poslove Sigurnosti, use screen-blocking messages to collect fines for any law violations.

What is Austrian Polizei Virus?

The Austrian Polizei message "Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt" blocks computer screens and demands payment of a 100 Euro fine using Ukash or PaySafeCard. This message is not sent by the Austrian Police, it is a scam delivered by a ransomware virus.

Cyber criminals responsible for developing this virus hope that computer users from Austria will fall for the deceptive text displayed within the message and pay the bogus fine.

The fake Austrian Polizei Cybercrime Investigation Department message states that the user must pay a fine for allegedly watching child pornography or owning pirated copies of copyrighted video and music files.

What is Searchnu.com?

The Searchnu.com website is promoted by several toolbars and browser add-ons. Searchnu.com is a simple website with several links to social networks, YouTube, and online games. It also has a search bar that redirects inputted search queries to Ask.com

This website is not strictly related to malware or viruses, however, redirects to this website are a consequence of browser extension installation.

Commonly, Internet users are redirected to Searchnu.com following installation of the Bandoo plug-in or Searchqu toolbar. Note that installation of these browser plug-ins can occur either if downloaded individually or when 'bundled' with free software (such as iLivid or other popular video converters, YouTube video downloaders, etc.)

What is United States Courts?

The United States Courts message "Your computer has been locked" demands that PC users pay a $300 fine using MoneyPak in order to unlock their computers. This is a scam and should not be trusted - a ransomware virus created by cyber criminals to scare unsuspecting PC users into paying a bogus fine. Paying this fine is equivalent to sending your money to cyber criminals.

In fact, neither the United States Courts nor any other authority or organization, internationally, use screen-locking messages to collect fines for any law violations.

This particular ransomware virus predominantly targets PC users from the USA and makes false accusations of illegally downloading copyrighted material (such as MP3s, Movies, Software, etc.) in order to trick computer users into paying the bogus $300 fine. To generate a sense of urgency, cyber criminals demand that the fine be paid within 48 hours.

What is Switzerland Polizei?

The Switzerland Polizei message "Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt" demands payment of a 100 Euro (or 100 CHF) fine in order to unblock the user's computer.

This is not related to any authorities from Switzerland, it is a scam, a ransomware virus created by cyber criminals to deceive computer users into paying a bogus fine using Ukash or paysafecard.

The message states that a fine must be paid due to the PC user allegedly watching child pornography or being in possession of pirated copies of music, video files, etc. Furthermore, cyber criminals attempt to create a sense of urgency by stating that this fine must be paid within 72 hours.

What is Politie Office Central?

The Politie Office Central message demands payment of a 100 Euro fine using Ukash or PaySafeCard in order to unblock the user's computer. This is a bogus message, a scam created by cyber criminals.

This ransomware virus targets PC users predominantly from Belgium, however, be aware that no authorities, internationally, use screen-blocking messages to collect fines for any law violations. Paying this fine is equivalent to sending your money to cyber criminals.

This devious message makes false accusations of watching child pornography, possessing pirated video, music files, etc. in order to scare computer users into paying the bogus fine. Moreover, this message orders the fine to be paid within 72 hours - a ploy to create a sense of urgency.