Virus and Spyware Removal Guides, uninstall instructions

What is MyWebFace?

MyWebFace Toolbar is a browser add-on that allows users to access an online tool called MyWebFace. This web tool enables users to transform their face photos into cartoon images, share their creations, etc.

Whilst such functionality is seen by many as useful and fun, in order to access this tool, users are asked to install the MyWebFace toolbar - adware that modifies users' Internet browser settings and causes redirects to mywebsearch.com When installed on your PC, the toolbar will change your default search engine and homepage to home.mywebsearch.com Moreover, each newly-opened browser tab will also redirect to the this website.

What is Zwinky?

Zwinky is an online service enabling users to create individual cartoon avatars. Whilst some find this service useful, its developers have chosen a deceptive monetization strategy by asking their users to download the Zwinky toolbar in order to use their free services. When installed, this toolbar modifies the user's homepage and default search engine browser settings.

Moreover, each newly-opened tab is redirected to the home.mywebsearch.com website. Note that using this website for your daily Internet searches adds no real value - this redirect is applied for monetization purposes, since each time a computer user clicks on sponsored search results, the developers of Zwinky Toolbar gain revenue.

What is Computer Locked - Ukash?

Deceptive messages demanding payment of fines for supposed law violations are scams. Such security infections are classed as ransomware. Screen lockers of this nature are created by cyber criminals in the hope that PC users will fall for their trickery and send them the money.

There are several ransomware families targeting PC users from different countries using localized variants of their fake messages.

In order to make these false messages appear authentic, cyber criminals exploit the names and graphics of local authorities. To determine the location of the target computer, ransomware infections detect IP addresses and are capable of presenting PC users with a deceptive message adapted with graphics and names of local authorities.

What kind of application is SweetPacks?

Sweetpacks is a developer of browser add-ons. This company has created many popular browser extensions, which enhance users' Internet browsing experience, such as adding emoticons, enabling users to play premium games without charge, correcting spelling mistakes, video conversions, etc.

The following are some of the names of Sweetpacks' browser plug-ins: Ginger, GamePacks, SweetIM, VideoConverter, and SweetIM for FaceBook. Alone, these browser extensions are not related to malware of virus infections, however, these add-ons cause browser redirects and unwanted ads issues.

To monetize incoming web traffic, Sweetpacks add-ons modify the homepage and default search engine settings of users' Internet browsers to home.sweetim.com and search.sweetpacks.com respectively. Furthermore, their plug-ins are bundled with DealPly and PriceGong adware.

What is DealPly?

The DealPly browser extension displays coupon deals when computer users visit online shopping websites such as eBay, Amazon, etc. Developers of this browser extension claim that this app helps Internet users to save time and money whilst shopping online.

Note that DealPly is not a virus or malware, it is a legitimate browser add-on, however, its deceptive distribution strategy categorizes it as an unwanted browser extension. There are several different methods by which DealPly can be installed on users' systems:

1) the extension is downloaded from its homepage, and the user is aware of its installation, or; 2) the browser plug-in is installed together with some free software or other browser add-ons - commonly, this form of installation takes place without the user's consent.

What is Master Penalty Document?

The Master Penalty Document message (purporting to be delivered from SOPA and PIPA), blocks computer users' desktops and is a scam. This is a ransomware infection which orders computer users to pay a 100 Euro fine for supposed law violations (for example, using a pirated version of an operating system or other software).

PC users should not trust this message, since it has no connection with legitimate authorities. It is a scam created by cyber criminals who make money from computer users who fall for such trickery and pay the bogus fine. Paying this fine is equivalent to sending your money to cyber criminals, and there is no guarantee that your computer will be unblocked as a result.

What is Win Server Defender?

Win Server Defender is a rogue antivirus program that infects the Windows Server operating system. The program imitates a security scan, and after generating a list of fake security infections, advises computer users to purchase the full version. This scam originates from a family of name-changing rogue programs called Braviax.

This particular bogus program is the only known fake antivirus software to specifically target the Windows Server operating system. That is not to say that it does not attack others; note that this rogue is capable of adapting its name according to the operating system it infiltrates.

For example, for a system running Windows 7, the name is modified to appear as Win7 Defender and for Windows XP, it appears as XP Defender. To give the appearance that your system is infected with viruses and malware, Win Server Defender disables the Task Manager, disallows execution of installed software, and generates fake security warning pop-ups.

What is" Police Virus - Your Operating System is Locked"? 

"Police - Your operating system is locked" is a ransomware infection developed and distributed by cyber criminals. If you see this type of message blocking your computer screen, your PC is infected with a ransomware infection. Do not pay any fines demanded by this message, of which there are several variants.

For example, PC users from Europe are ordered to pay a 100 Euro fine to unlock the operating system, whereas those from the USA and Canada, $200. Note that international authorities have no connection with this message - it is a scam.

If you pay this fine, you will send your money to cyber criminals and your operating system will remain locked. This ransomware infection originates from a family of screen lockers called Goscri.

What is Findamo.com?

The Findamo.com website presents users with a search bar - the creators claim that this is a search engine.

In fact, it displays results from other reputable search engines (such as Google, Bing, or Yahoo!) Whilst the organic search results delivered by this website seem legitimate, clicking on sponsored results may lead to installation of unwanted browser extensions or even malware.

The Findamo.com website is promoted using browser add-ons and freeware (free software that computer users download from the Internet). During installation this software installs additional Internet browser extensions (which modify browser settings including the homepage and default search engine), and plug-ins, which prevent the settings from being changed by the user.

What is FirstRowSportsApp?

FirstRowSportsApp is a free program claiming to enable users to watch various sports-related channels and events. In fact, this is a useless program created with the sole purpose of gaining affiliate revenues from browsers add-ons bundled with it. FirstRowSportsApp is a clone of TornTV.

When computer users download and install this program, they will also inadvertently install the Babylon toolbar (causing browser redirects to search.babylon.com), Yontoo Adware (causing unwanted ad pop-ups), and the Browser Protect plug-in (disabling changes to your hijacked Internet browser settings).