Virus and Spyware Removal Guides, uninstall instructions

What is GetSavin?

The GetSavin browser add-on is developed by Adpeak Inc. and promises to enhance computer users' Internet browsing experience by providing notifications of available coupons and deals when shopping online.

This functionality may seem useful, however, the GetSavin browser add-on is known to install on Internet browsers (Internet Explorer, Google Chrome and Mozilla FireFox) without users' consent. Computer users report that they observe GetSavin coupon ads even though they did not install this browser plug-in.

This situation may occur if users download and install free software from the Internet. GetSavin uses a deceptive marketing method called 'bundling', and thus, many users install this browser add-on unwillingly.

What is Malta Police Association?

The Malta Police Association message blocks the computer screen, demanding payment of a 100 Euro fine for alleged illegal use or distribution of copyrighted material, viewing prohibited pornographic content, or possession of a malware-infected PC. This is a scam.

In fact, the Malta Police Association has no connection with this message - it is a ransomware infection created by cyber criminals. The message originates from a family called Urasy and is known to target various countries. This particular screen locker targets PC users from Malta.

When this ransomware infects users' systems, it blocks the desktop and orders payment of a fine to unblock it. Note that paying this fine using PaySafeCard or Ukash is equivalent to sending your money directly to cyber criminals.

What is Deals Plugin?

Deals Plugin is a browser extension developed by Amazing Apps (215 Apps) and promises to save time and money when shopping online. This browser add-on displays coupon and deal ads when Internet users visit online shopping websites.

Whilst such functionality may seem legitimate, many computer users report that Deals Plugin was installed on their Internet browsers (Internet Explorer, Google Chrome, and Mozilla Firefox) without their consent.

Unwilling installation such as this may be caused by a deceptive marketing method called 'bundling'. Potentially unwanted programs such as Deals Plugin often self-install together with free software downloaded from the Internet.

What is Special Savings?

The SpecialSavings.com website offers users various coupons and deals, helping to save money whilst shopping online. The website appears legitimate and not related to malware infections. Recently, however, users report that they are seeing unwanted Special Savings coupon ads when visiting various websites including Walmart, Verizon, Best Buy, Sears, etc.

These unwanted coupon and deal ads are caused by a browser extension called Special Savings, which is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox. This browser plug-in can be downloaded from the Special Savings website, however, many users report that this add-on was installed on their computers without their consent.

What is Disk Antivirus Professional?

Disk Antivirus Professional is a fake antivirus program, the main purpose of which, is to sell a useless license key. This program is a fake security scanner that mimics the detection of various security threats on users' PCs. It then uses these bogus threats in an attempt to coerce users into paying for a 'full version' in order to remove them.

This is a scam created by cyber criminals who make money from users who fall for the trickery shown by Disk Antivirus Professional. In fact, none of security threats detected by this program exist on users' PCs. This bogus software creates random files on their systems, and then 'identifies' them as being Trojans, malware, or viruses.

What is FileBulldog?

The FileBulldog toolbar is created using Visicom Media Api to enhance Internet users' browsing experience by providing shortcuts to popular websites. The program, also called FileBulldog, claims to maintain computer security by automatically downloading software updates.

Whilst on initial inspection, this program and associated toolbar appear legitimate, many computer users report that they have installed the Filebulldog toolbar without their consent.

The result of FileBulldog toolbar installation is browser redirect issues to the search.filebulldog.com and dealbd.mystart.com websites. Commonly, these unwilling toolbar installations occur when computer users install freeware downloaded from the Internet.

What is Ads on Images?

Recently, many computer users reported that they observed unwanted ads appearing upon images when surfing the Internet. According to the reports, the ads appeared in Facebook, Wikipedia, MSN, etc. Following some research, our security team discovered that there is a new browser add-on (adware) distributed using freeware downloads.

This causes unwanted ads to appear on all images present in various websites. This browser add-on is called 'Services x86' and is installed on users' Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox) together with free software. This browser add-on is especially rogue, since at time of testing, it was installed without permission using silent installers.

What is Savings Vault?

Savings Vault is a browser extension developed by 215 Apps (Excellent Apps), which displays coupon deals when Internet users visit various online shopping websites such as Expedia, Kmart, OfficeDepot, etc. This browser add-on is compatible with Internet Explorer, Google Chrome, and Mozilla FireFox.

The creators of Savings Vault state that this browser plug-in helps to save time and money when shopping online, and although this functionality may seem useful, many Internet users report that this add-on was installed on their Internet browsers without their consent. This type of unwilling installation may occur when users download and install freeware.

What is SUISA?

SUISA is a legitimate organization from Switzerland which provides music-related copyright services. This organization is in no way related to a message that blocks computer users' screens, demanding payment of a 150 CHF fine for alleged download of pirated music files from the Internet.

This message is called ransomware and is created by cyber criminals with the sole purpose of tricking unsuspecting PC users into paying bogus fines. In fact, paying this fine will result in sending your PaySafeCard code to Cyber criminals - you will lose your money and your computer will remain blocked.

What is AKM?

The AKM message blocks computer users' screens with the text, "Ihr Computer ist gesperrt", demanding payment of 100 Euro fines in order to unblock them. This is a scam, a ransomware infection developed by cyber criminals. Fake messages such as this are used to scare unsuspecting PC users into paying bogus fines using pre-paid cards such as PaySafeCard or MoneyPak.

This malicious message blocks users' desktops and is derived from a ransomware family called Gimemo, which targets PC users from Austria. Cyber criminals responsible for releasing this scam exploit the name of AKM (a legitimate organization related to music copyright services in Austria).