Severity scale:  

Remove “Malicious Pornographic Spyware/Riskware Detected” virus (Removal Instructions) - May 2018 update

removal by Ugnius Kiguolis - - | Type: Adware

“Malicious Pornographic Spyware/Riskware Detected” – a fake message created by cyber criminals

The image displaying "Malicious Pornographic Spyware/Riskware Detected"

“Malicious Pornographic Spyware/Riskware Detected” is a technical support scam[1] that is aimed to trick users into calling a specific phone number in order to fix computer-related problems. Scammers create threatening messages on compromised websites and use adware programs to redirect users to them. As soon as users accidentally install some potentially unwanted program (PUP), his or her browser might start redirects to misleading tech support website.

Name Malicious Pornographic Spyware/Riskware Detected
Type Technical support scam
Distribution Adware, malicious ads, compromised websites
Targeted OS Windows
Phone number 1-888-326-5882
Purpose Trick people into calling fake Microsoft help line
Other symptoms Redirects to suspicious websites, increased amounts of ads and pop-ups on the browser
Elimination To uninstall Malicious Pornographic Spyware/Riskware Detected” adware, install Reimage Reimage Cleaner Intego and run a full system scan

“Malicious Pornographic Spyware/Riskware Detected” virus typically redirects users to or sites that displays fake Microsoft alert. Microsoft-related scams[2] comprises the majority of all tech support scams. The reason for such tendency is simple – users react to Microsoft or Windows alerts more sensitively convinced that related notifications are genuine.

"Malicious Pornographic Spyware/Riskware Detected" example"Malicious Pornographic Spyware/Riskware Detected" may leave a bigger "impact" for those users who indeed visit web pages with adult content.

Creators of this technical support scam use psychological terror and want to make people believe their computers were infected by malicious pornographic spyware. Due to the infection, their sensitive information and credit card details might be in danger. However, only Microsoft support line can protect from the damage. However, we want to warn that the following alert is not legitimate:

Microsoft Warning Alert
Malicious Pornographic Spyware/Riskware Detected
Error # 0xx90025ee9
Please call us immediately at: 1-888-326-5882
Do not ignore this critical alert.
If you close this page, your computer access will be disabled to prevent further damage to our network.
Your computer has alerted us that it has been infected with a Pornographic Spyware and risk ware. The following information is being stolen:
> Financial Data
> Facebook Logins
> Credit Card Details
> Email Account Logins
> Photos stored on this computer
You must contact us immediately so that our expert engineers can walk you though the removal process over the phone to protect your identity.. Please call us within the next 5 minutes to prevent your computer from being disabled or from any information loss.

In order to grant more reliability, a specific error code 0xx90025ee9 is indicated as well. However, this error message is just a creation of people standing behind malicious pornographic spyware/riskware detected scam. Even if you have recently visited adult-oriented websites, we can ensure that this error does not warn cyber infection on your computer.

"Malicious Pornographic Spyware/Riskware Detected" Microsoft Scam

Researchers from[3] report that pornographic spyware alert has a couple different versions. They might use other phone numbers and give another error code. Despite these minor changes, the aim of the hoax remains the same. Therefore, if you receive an unknown error code or suggestion to call some support service, you should always look up for more information online.

Online forums are full of people questions what is pornographic spyware and is this alert sent by Microsoft. Victims of various scams also share their stories how these scammers took advantage of them. Typically, these cyber threats are created for these reasons:

  • Convincing users into installing TeamViewer or another program enabling remote access in order to gain access to user’s computer.
  • Selling useless or corrupted security programs that are expensive.
  • Tricking users into installing an obfuscated antivirus that is actually malware or spyware.[4]
  • Obtaining credit card details and other sensitive information.

"Malicious Pornographic Spyware/Riskware Detected" alert

Frightened that their credit card credentials and personal data will be leaked, might follow the predetermined scenario of the scammers. Instead of wasting time and money on such felonies, instead, proceed to “Malicious Pornographic Spyware/Riskware Detected” removal.

Luckily, this particular scam can be easily terminated. You can simply exit it by clicking on Prevent this page from creating additional dialogues. Then, scan the device with malware elimination tool, such as Reimage Reimage Cleaner Intego or Malwarebytes. It will help you also remove “Malicious Pornographic Spyware/Riskware Detected.”

"Malicious Pornographic Spyware/Riskware Detected" malware"Malicious Pornographic Spyware/Riskware Detected" may leave a bigger "impact" for those users who indeed visit web pages with adult content.

Redirects to technical support scam website usually begin after adware infiltration

This tech support scam works mainly through the adware scripts placed on movie streaming, torrent sharing domains and similar domains overcrowded with links and ads. Clicking on a certain link may trigger the installation of the ad-supported application.

Such adware/malware temporarily paralyzes the website. In order to exit the web page, clicking on the exit button is not sufficient. Click on the earlier mentioned button. Let us assure that no serious spyware nor data-stealing viruses have corrupted your computer.

"Malicious Pornographic Spyware/Riskware Detected" example

Additionally, adware which is responsible for redirecting to scam website might travel in software bundles and sneak into the system if users do not pay attention to the installation of freeware. The hijack might happen when users rely on Quick/Recommended settings. To avoid such problems, it’s important to use Advanced/Custom settings and follow the instructions attentively.

“Malicious Pornographic Spyware/Riskware Detected” removal instructions

In spite of the alarming content of such scam, you can easily remove “Malicious Pornographic Spyware/Riskware Detected” virus. You can opt rather for an optimal solution – automatic elimination. Scan the infected computer and let your chosen anti-malware program to clean all adware-related components.

However, if you feel skilled enough, you can opt for the automatic “Malicious Pornographic Spyware/Riskware Detected” removal. For more information, please check the instructions presented below. But if redirects to scam site reappear, we highly recommend using security software.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove “Malicious Pornographic Spyware/Riskware Detected” virus, follow these steps:

Erase “Malicious Pornographic Spyware/Riskware Detected” from Windows systems

Follow the instructions to get rid of all questionable programs that might be responsible for redirects to scam website:

To remove “Malicious Pornographic Spyware/Riskware Detected” from Windows 10/8  machines, please follow these steps:

  1. Enter Control Panel into Windows search box and hit Enter or click on the search result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 1
  3. From the list, find entries related to “Malicious Pornographic Spyware/Riskware Detected” (or any other recently installed suspicious program).
  4. Right-click on the application and select Uninstall.
  5. If User Account Control shows up, click Yes.
  6. Wait till uninstallation process is complete and click OK.Uninstall from Windows 2

If you are Windows 7/XP user, proceed with the following instructions:

  1. Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP
  3. Pick the unwanted application by clicking on it once.
  4. At the top, click Uninstall/Change.
  5. In the confirmation prompt, pick Yes.
  6. Click OK once the removal process is finished.

Uninstall “Malicious Pornographic Spyware/Riskware Detected” from Mac OS X system

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove “Malicious Pornographic Spyware/Riskware Detected” from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for “Malicious Pornographic Spyware/Riskware Detected”-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove “Malicious Pornographic Spyware/Riskware Detected”, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to “Malicious Pornographic Spyware/Riskware Detected” and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the “Malicious Pornographic Spyware/Riskware Detected”-related entries.Uninstall from Mac 2

Remove “Malicious Pornographic Spyware/Riskware Detected” from Internet Explorer (IE)

Though it is not elaborate, you may run through these steps and ensure that all elements of “Malicious Pornographic Spyware/Riskware Detected” are permanently eliminated.

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for “Malicious Pornographic Spyware/Riskware Detected” and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example,
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete “Malicious Pornographic Spyware/Riskware Detected” removal.Reset Internet Explorer

Get rid of “Malicious Pornographic Spyware/Riskware Detected” virus from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the “Malicious Pornographic Spyware/Riskware Detected”-related extension and click on the Gear icon.
  3. Click on Uninstall at the bottom.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Reset MS Edge if that above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

If this solution failed to help you, you need to use an advanced Edge reset method. Note that you need to backup your data before proceeding.

  1. Find the following folder on your computer: C:\\Users\\%username%\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  2. Press Ctrl + A on your keyboard to select all folders.
  3. Right-click on them and pick DeleteAdvanced MS Edge reset 1
  4. Now right-click on the Start button and pick Windows PowerShell (Admin).
  5. When the new window opens, copy and paste the following command, and then press Enter:

    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml” -VerboseAdvanced MS Edge reset 2

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.Reset Chromium Edge

Eliminate “Malicious Pornographic Spyware/Riskware Detected” from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select plugins that are related to “Malicious Pornographic Spyware/Riskware Detected” and click Remove.Remove extensions from Firefox

Clear cookies and site data:

  1. Click Menu and pick Options.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data…
  5. Select Cookies and Site Data, as well as Cached Web Content and press Clear.Clear cookies and site data from Firefox

In case “Malicious Pornographic Spyware/Riskware Detected” did not get removed after following the instructions above, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox…
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox – this should complete “Malicious Pornographic Spyware/Riskware Detected” removal.Reset Firefox 2

Delete “Malicious Pornographic Spyware/Riskware Detected” from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to “Malicious Pornographic Spyware/Riskware Detected” by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

If the above-methods did not help you, reset Google Chrome to eliminate all the “Malicious Pornographic Spyware/Riskware Detected”-components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings to complete “Malicious Pornographic Spyware/Riskware Detected” removal.Reset Chrome 2

Erase “Malicious Pornographic Spyware/Riskware Detected” from Safari

Remove unwanted extensions from Safari:

  1. Click Safari > Preferences…
  2. In the new window, pick Extensions.
  3. Select the unwanted extension related to “Malicious Pornographic Spyware/Riskware Detected” and select Uninstall.Remove extensions from Safari

Clear cookies and other website data from Safari:

  1. Click Safari > Clear History…
  2. From the drop-down menu under Clear, pick all history.
  3. Confirm with Clear History.Clear cookies and website data from Safari

Reset Safari if the above-mentioned steps did not help you:

  1. Click Safari > Preferences…
  2. Go to Advanced tab.
  3. Tick the Show Develop menu in menu bar.
  4. From the menu bar, click Develop, and then select Empty Caches.Reset Safari

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. It is a hassle when your website is protected from suspicious connections and unauthorized IP addresses.

The best solution for creating a tighter network could be a dedicated/fixed IP address. If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for server or network manager that need to monitor connections and activities. This is how you bypass some of the authentications factors and can remotely use your banking accounts without triggering suspicious with each login. 

VPN software providers like Private Internet Access can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world. It is better to clock the access to your website from different IP addresses. So you can keep the project safe and secure when you have the dedicated IP address VPN and protected access to the content management system.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings. Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact – you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use Data Recovery Pro for the data restoration process.

About the author
Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

Removal guides in other languages

Your opinion regarding “Malicious Pornographic Spyware/Riskware Detected” virus