Virus and Spyware Removal Guides, uninstall instructions

What is Win Server Defender?

Win Server Defender is a rogue antivirus program that infects the Windows Server operating system. The program imitates a security scan, and after generating a list of fake security infections, advises computer users to purchase the full version. This scam originates from a family of name-changing rogue programs called Braviax.

This particular bogus program is the only known fake antivirus software to specifically target the Windows Server operating system. That is not to say that it does not attack others; note that this rogue is capable of adapting its name according to the operating system it infiltrates.

For example, for a system running Windows 7, the name is modified to appear as Win7 Defender and for Windows XP, it appears as XP Defender. To give the appearance that your system is infected with viruses and malware, Win Server Defender disables the Task Manager, disallows execution of installed software, and generates fake security warning pop-ups.

What is" Police Virus - Your Operating System is Locked"? 

"Police - Your operating system is locked" is a ransomware infection developed and distributed by cyber criminals. If you see this type of message blocking your computer screen, your PC is infected with a ransomware infection. Do not pay any fines demanded by this message, of which there are several variants.

For example, PC users from Europe are ordered to pay a 100 Euro fine to unlock the operating system, whereas those from the USA and Canada, $200. Note that international authorities have no connection with this message - it is a scam.

If you pay this fine, you will send your money to cyber criminals and your operating system will remain locked. This ransomware infection originates from a family of screen lockers called Goscri.

What is Findamo.com?

The Findamo.com website presents users with a search bar - the creators claim that this is a search engine.

In fact, it displays results from other reputable search engines (such as Google, Bing, or Yahoo!) Whilst the organic search results delivered by this website seem legitimate, clicking on sponsored results may lead to installation of unwanted browser extensions or even malware.

The Findamo.com website is promoted using browser add-ons and freeware (free software that computer users download from the Internet). During installation this software installs additional Internet browser extensions (which modify browser settings including the homepage and default search engine), and plug-ins, which prevent the settings from being changed by the user.

What is FirstRowSportsApp?

FirstRowSportsApp is a free program claiming to enable users to watch various sports-related channels and events. In fact, this is a useless program created with the sole purpose of gaining affiliate revenues from browsers add-ons bundled with it. FirstRowSportsApp is a clone of TornTV.

When computer users download and install this program, they will also inadvertently install the Babylon toolbar (causing browser redirects to search.babylon.com), Yontoo Adware (causing unwanted ad pop-ups), and the Browser Protect plug-in (disabling changes to your hijacked Internet browser settings).

What is Fast Adress Bar?

The Fast Address Bar browser add-on claims to enhance Internet users' browsing experience by adding search engine functionality to the address bar. Once installed, this browser plug-in suggests additional websites when addresses are typed into the address bar.

Note, however, that whenever you click on suggested sites, you are redirected to search.fastaddressbar.com Moreover, some of the suggested sites are promoted by the developers of Fast Address Bar.

What is Shop to Win?

The Shop to Win browser extension (compatible with Internet Explorer and Mozilla FireFox) tracks Internet users' browsing and awards prizes to those who purchase products from their partners. Developers of this website claim that Shot to Win has partnered with more than 2500 merchants.

This browser extension is not related to malware or virus infections, however, recent complaints from computer users state that they did not willingly install this plug-in and receive notifications and ads from Shop to Win. This categorizes the browser plug-in an unwanted application.

There are two ways in which Shop to Win becomes installed on users' systems: 1) the plug-in is downloaded from the Shop to Win homepage and users' are aware of it presence on their systems, or; 2) it is bundled with free software and installed without users' consent.

What is Complete an Offer to Unlock Your Desktop?

"Complete an offer below to unlock your desktop" is a ransomware infection used by cyber criminals to coerce PC users into taking online surveys, thus making money from dubious affiliate networks.

This ransomware infection differs from others distributed - standard ransomware infections exploit the names of authorities (such as the FBI, Interpol, Federal Department, etc.), demanding payment of bogus fines for supposed law violations.

"Complete an offer to unlock your desktop", however, is a new approach to ransomware infections. This scam blocks computer users' desktops and attempts to coerce them into taking up online offers.

What is Search.iMesht.net?

iMesh is a P2P program that enables users to download songs and videos. Redirects to search.imesh.com are also caused by BearShare freeware. iMesh is legitimate software used by many computer users worldwide, however, the downside of this free program is the adware bundled with its installer.

By default, each user electing to install iMesh will also install a search-results toolbar and have their Internet browser default homepage modified to search.imesh.net Note that users can opt out of these potentially unwanted installations and homepage changes, though unfortunately, many users do not pay close enough attention at the installation phase.

What is CouponBar toolbar?

The CouponBar Toolbar browser add-on supposedly enhances the Internet browsing experience by displaying coupon deals on Internet shopping websites, thus allowing users to save money whilst buying online.

The toolbar alone is not related to malware or spyware infections, however, it is promoted using free software and is commonly installed on users' systems without their consent.

This categorizes CouponBar as an unwanted browser extension. When installed on Internet browsers, this browser add-on not only displays coupon deals, but also changes the default homepage to search.coupons.com

What is MyBrowserBar toolbar?

The MyBrowserBar toolbar (an Internet browser extension) is promoted using popular free software. This toolbar is legitimate and not related to malware or spyware infections, however, computer users commonly install this toolbar inadvertently and without their consent.

This situation occurs when computer users do not pay close attention during installation of free software downloaded from the Internet. This method of bundling free browser add-ons and toolbars is common and used by developers for monetization purposes.

The following are some popular free software packages that bundle the MyBrowserBar Toolbar with their programs: YTD Video Downloaders (allows users to download videos from YouTube), Pdfforge (software used to create PDF documents), dealio (coupon savings-related add-on), IObit (security and registry cleaner software), Vuze (bittorrent client), etc.