Virus and Spyware Removal Guides, uninstall instructions

What is Sys-doctor.com?

Sys-doctor.com is a malicious website created by cyber criminals who are also responsible for distributing the System Doctor 2014 fake antivirus program. This site is created with the purpose of tricking payment processing companies into believing that they are dealing with a legitimate company developing genuine antivirus software.

Note that whilst this website may appear legitimate, in fact it is a scam. It acts to clone a deceptive business model, a model which infects users' computer with a fake antivirus program and coerces them into buying a bogus license key to activate it.

What is Internet Security 2014?

Internet Security 2014 is a rogue antivirus program which reports non-existent security infections in the hope that PC users will purchase a useless license key. This program is created by cyber criminals and distributed using 'exploit kits' and drive-by downloads.

After infiltration, Internet Security 2014 imitates a legitimate antivirus program by performing a 'security scan'. Computer users who negotiate this program should be aware that all security scans, warning pop-ups, and malware detection lists generated by it, are fake.

The main purpose of this rogue program is to scare unsuspecting PC users into believing that their computers are infected with high-risk viruses and then to coerce them into activating Internet Security 2014  (by purchasing the 'full version').

What is Ured Za Posebne Poslove Sigurnosti?

The Ured Za Posobne Poslove Sigurnosti (Croatian Police) message, "Vaš kompjuter je blokiran zbog barem jednoga od razioga navedenog u nastavku", blocks the computer user's screen and demands payment of a 100 Euro (or 500 HRK) fine. This is a scam.

If you observe this message on your computer screen, your PC is infiltrated with a ransomware virus, which makes false accusations of law violations such as watching child pornography, being in possession of pirated copies of music and video files, etc. This is in order to trick you into paying a bogus fine.

Note that paying this fine, using Ukash or paysafecard when requested by this message, is equivalent to sending your money to cyber criminals. This ransomware virus originates from a family called "Urausy" and targets PC users predominantly from Croatia.

Internet users should be aware that no legitimate authorities, including Ured Za Posobne Poslove Sigurnosti, use screen-blocking messages to collect fines for any law violations.

What is Austrian Polizei Virus?

The Austrian Polizei message "Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt" blocks computer screens and demands payment of a 100 Euro fine using Ukash or PaySafeCard. This message is not sent by the Austrian Police, it is a scam delivered by a ransomware virus.

Cyber criminals responsible for developing this virus hope that computer users from Austria will fall for the deceptive text displayed within the message and pay the bogus fine.

The fake Austrian Polizei Cybercrime Investigation Department message states that the user must pay a fine for allegedly watching child pornography or owning pirated copies of copyrighted video and music files.

What is Searchnu.com?

The Searchnu.com website is promoted by several toolbars and browser add-ons. Searchnu.com is a simple website with several links to social networks, YouTube, and online games. It also has a search bar that redirects inputted search queries to Ask.com

This website is not strictly related to malware or viruses, however, redirects to this website are a consequence of browser extension installation.

Commonly, Internet users are redirected to Searchnu.com following installation of the Bandoo plug-in or Searchqu toolbar. Note that installation of these browser plug-ins can occur either if downloaded individually or when 'bundled' with free software (such as iLivid or other popular video converters, YouTube video downloaders, etc.)

What is United States Courts?

The United States Courts message "Your computer has been locked" demands that PC users pay a $300 fine using MoneyPak in order to unlock their computers. This is a scam and should not be trusted - a ransomware virus created by cyber criminals to scare unsuspecting PC users into paying a bogus fine. Paying this fine is equivalent to sending your money to cyber criminals.

In fact, neither the United States Courts nor any other authority or organization, internationally, use screen-locking messages to collect fines for any law violations.

This particular ransomware virus predominantly targets PC users from the USA and makes false accusations of illegally downloading copyrighted material (such as MP3s, Movies, Software, etc.) in order to trick computer users into paying the bogus $300 fine. To generate a sense of urgency, cyber criminals demand that the fine be paid within 48 hours.

What is Switzerland Polizei?

The Switzerland Polizei message "Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt" demands payment of a 100 Euro (or 100 CHF) fine in order to unblock the user's computer.

This is not related to any authorities from Switzerland, it is a scam, a ransomware virus created by cyber criminals to deceive computer users into paying a bogus fine using Ukash or paysafecard.

The message states that a fine must be paid due to the PC user allegedly watching child pornography or being in possession of pirated copies of music, video files, etc. Furthermore, cyber criminals attempt to create a sense of urgency by stating that this fine must be paid within 72 hours.

What is Politie Office Central?

The Politie Office Central message demands payment of a 100 Euro fine using Ukash or PaySafeCard in order to unblock the user's computer. This is a bogus message, a scam created by cyber criminals.

This ransomware virus targets PC users predominantly from Belgium, however, be aware that no authorities, internationally, use screen-blocking messages to collect fines for any law violations. Paying this fine is equivalent to sending your money to cyber criminals.

This devious message makes false accusations of watching child pornography, possessing pirated video, music files, etc. in order to scare computer users into paying the bogus fine. Moreover, this message orders the fine to be paid within 72 hours - a ploy to create a sense of urgency.

What is POLIISI Tietoverkkorikos Tutkinnan Yksikkö?

The Finland Pollisi message blocks the user's computer screen and demands payment of a 100 Euro fine within 72 hours for alleged law violations. This is a scam and should not be trusted.

The message is not related to the Finnish police, it is a ransomware virus created by cyber criminals whose main purpose is to steal money from unsuspecting PC users using devious means, including screen-blocking messages.

Paying the fine as demanded by the POLIISI Tietoverkkorikos Tutkinnan Yksikkö message using Ukash or PaySafeCard is equivalent to sending your 100 Euros to cyber criminals.

Computer users should be aware that neither the Finnish police, nor any other authority or organization, internationally, use screen-blocking messages to collect fines for any law violations. If you observe a message requesting payment of a fine using Ukash or PaySafeCard, your PC is infiltrated with a ransomware virus.

What is Polisen Enheten för databrott?

The Polisen Enheten för databrott message blocks the computer screen stating that this is due to the user allegedly watching child pornography, transferring prohibited content, or for possessing pirated copies of video, music, or software files. This is a scam, a ransomware virus targeting computer users predominantly from Sweden.

The main purpose of this deceptive screen-blocking message is to trick PC users into paying a bogus 100 Euro (or 1000 SEK) fine using Ukash or PaySafeCard.

Computer users should be aware that no legitimate authorities or organizations, internationally, use these messages to collect fines for any law violations. Paying this fine as demanded by the Polisen Enheten för databrott message (screenshot below), is equivalent to sending your money to cyber criminals.