Severity scale:  

Remove (Free Guide) - Chrome, Firefox, IE, Edge

removal by Ugnius Kiguolis - - | Type: Adware is a cheaply designed greeting card service that may result in personal data disclosure is a suspicious site that might steal your WhatsApp account login details is a website that users may encounter at any time during the web browsing sessions on Google Chrome, Mozilla Firefox, Internet Explorer, or another browser. Allegedly, visitors can enter their dad's name and create a greeting card for Father's day in June, sharing it via the WhatsApp – a popular communication service. Just multiple other online greeting services created by (possibly) same individuals, looks cheap and reminds of animations that date 20 years ago.

Regardless to its design, virus goal is to make users create the greeting card and share it on WhatsApp, which changes the status on it by using a background script “whatsapp://send?text=I'm *name* %0Aopen this once%0A %0A.” Consequently, users may end up get registered to a premium SMS service or have their WhatsApp account compromised. As evident, is a scam that should not be trusted and should never be used due to security reasons.

Type Greeting card creation site; frequent redirects could indicate adware infection
A part of WhatsApp virus
Similar sites, etc.
Related script  whatsapp://send?text=I'm *name* %0Aopen this once%0A %0A
Main dangers  Users might expose their WhatsApp login information to unknown third-parties or lose money due to premium SMS service
Further actions If you experience redirects, pop-up ads, changed web browser homepage and search engine, you might be infected with a potentially unwanted program. To get rid of it, follow our manual removal guide below or employ an anti-malware app. To stop the premium SMS service, you will have to contact your phone operator and explain the situation
Recovery  In the case of the adware infection, you might find your system crashing or returning errors. If that is the case, you can scan your computer with Reimage Reimage Cleaner Intego to fix virus damage

Online scammers are particularly innovative, and they are constantly coming up with new ideas on how to trick regular users into subscribing for something they did not intend to in the first place. For example, over the past few years, users have been struggling with push notification viruses like, tech support scams as “Your system is infected” or rogue system optimizers, such as Mac Tonic. is yet another scam that uses social engineering,[1] and it is especially effective among users who are not that familiar with this type of online fraud.

As evident, the goal of every online scam is to trick users into making them spend money or provide private information that can be later sold for profits. At the time when ransomware is locking thousands of users' data every day and where high-profile data breaches are a daily occurrence,[2] users should make sure that they do not get tricked by and similar scams. is a website that users might be redirected to due to adware infection

Generally, is not attractive and simply looks cheap, which might discourage some users from using the service. Nevertheless, because it is seemingly free, users might find it useful for delivering greetings cards to their fathers. The provided message reads:


Wishing you happy Father's day!

God gave me the greatest gift I ever had,
God gave me the best friend in the form of my dad.
Father's Day wishes for a dad who is one in a million!

!! Wishing you a very Happy Father's Day. !!

As evident, you should not use for any means, and also never click the “Click here to share on Whatsapp” button, as it may result in sensitive information exposure or monetary loss due to premium server SMS you might be subscribed to via your phone.[3]

Note that in case you are experiencing frequent redirects to and similar scam sites, you should scan your machine with anti-malware software or check the list of the installed programs, as you might be infected with adware. In such a case, check the instructions to remove adware from your machine. If you are still having trouble after that and your system is crashing or is working slowly, we suggest using repair software Reimage Reimage Cleaner Intego.

Online fraud costs users millions of dollars each year

Unfortunately, but there are thousands, if not millions of websites that are filled with false claims and fake promises or users receiving benefits allegedly free. And while there are multiple sites that are legitimate and do not use fraud to monetize, there are many traps that inexperienced users can fall into, consequently losing money, disclosing their credit card details, or infecting their machines with malware.

Therefore, it is important to get deceived by online scams – here are a few tips from industry experts:[4]

  • Beware that company logos, and other attributes can be copied, so a site that claims to be partnered with Microsoft is not that until it has some proof;
  • There is not such a thing as online virus detection. In order to spot malware on your system, you need to have a dedicated anti-malware program installed on your device;
  • Microsoft of Apple technicians would never call you before prior notice;
  • Tech giants do not provide tech support numbers in their error messages;
  • If you see a site that offers a free gift like an iPhone and it seems too good to be true, it is likely a scam. To check whether a retailer is actually giving away iPhones (never happened before, but who knows?), visit its official website;
  • Do not provide credit card details for services that claim to be free, unless you know that it is legitimate and can be trusted;
  • Stay away from unknown and suspicious websites offering random services like greeting cards, there is likely fraud involved (use trusted services instead). background uses a background script to change status of WhatsApp

Get rid of adware and prevent from using your data removal does not usually requires much effort – simply close down the tab that you had it open on Google Chrome Chrome, Mozilla Firefox, Internet Explorer or any other browser, and never click on the “Click here to share on Whatsapp” button, and you will be safe. However, if you already clicked on the button, you might have provided your login details to unknown actors. In such a case, you should immediately change the password of your WhatsApp account.

You should also remove premium SMS service so that you would not be charged periodically. To do that, you will have to contact your phone operator and ask for further instructions. Nevertheless, this is not necessary if you noticed no unauthorized payments via your phone (so check your phone bill).

Finally, you should check your machine for potentially unwanted programs – we provide the instructions below. If you noticed suspicious browser activities such as redirects or increased amounts of ads, you need to find and delete adware from your machine. You can do it by checking the instructions below or scanning your device with a security tool. For the best results, you should also reset your browser.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove, follow these steps:

Delete from Windows systems

To get rid of unwanted programs from Windows, follow these steps:

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall and related programs
    Here, look for or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'

Get rid of from Mac OS X system

macOS users should perform the following actions when trying to eliminated adware:

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Eliminate from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Uninstall from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, should be removed from your Microsoft Edge browser.

Remove from Mozilla Firefox (FF)

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal. Click on 'Reset Firefox' button for a couple of times

Erase from Google Chrome

Reset Google Chrome as explained below:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Delete from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process. Select all options and click on 'Reset' button

Choose a proper web browser and improve your safety with a VPN tool

Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online. One of the basic means to add a layer of security – choose the most private and secure web browser. Although web browsers can't grant a full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features. 

Nevertheless, there's a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of Private Internet Access VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise. Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and Private Internet Access VPN will let you browse the Internet without a feeling of being spied or targeted by criminals. 

Recover files after data-affecting malware attacks

While much of the data can be accidentally deleted due to various circumstances, malware is also one of the main culprits that can cause loss of pictures, documents, videos, and other important files. Potentially unwanted programs may clear files that keep the application from running smoothly.

More serious malware infections lead to significant data loss when your documents, system files, or images get locked. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them. Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system.

In some cases, Data Recovery Pro can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection. 


About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions


Your opinion regarding