Check your Firefox Extensions and Plugins. Remove any Facemoods extension or plugin. If you still cannot get rid of this, 1. Close Firefox window. 2. Press Windows key+R to open run command. 3. Type "firefox -p" to enter Firefox Profile Manager. 4. Create a new profile by clicking "New Profile" button. 5. Follow the instructions to create a new profile. 6. Delete the old profile. 7. Open Firefox. Now your issue should be resolved.

Thank you, I've been looking for that solution for quite a bit of time now. I failed to see what the 'delete files' option was before deleting so, now I need to go and restore some info I had... luckily I was prepared.

Thanks again and thank you for the new hot key 'windows key - r'!

better:

• Open new tab
• Type "about:config" (without quotes) in the address bar
• Type this in the filter "keyword.URL" (without quotes)
• Right click on the value field and click on modify
• Then copy and paste following link there, or what you want.

http://www.google.com/search?hl=en&q=

• Done

Hello,

I'm from Facemoods. I'm sorry to hear of this inconvenience. We work with some third party services that distribute Facemoods, but the download must be with full knowing and consent of the user. If you guys remember the name or link of a program you've recently downloaded, it would be great if you could let us know so we could ensure this sort of thing in the future.

You can get full instructions for removal here: http://articles.facemoods.com/english/how-to-remove-facemoods/

You can also reach us with any question at support at facemoods.com

Thanks,

Yang The Facemoods Team

Yang11, I can't remember exactly what I downloaded as it has been about 2 months ago, however I do remember un-ticking all additional downloads provided available. I would like to know however (if you can), why facemoods' files/registries are categorized as 'PUPSC' in my spyware scan's statistics... It also seemed to be the cause of massive memory usage(90%avg dual (now without, 20%avg)) and slowing of the browser(temporary freezing every 5 sec.) too.

Hello TekuConcept,

We try our best to create the best user experience for our users, One of our main concerns is to keep Facemoods a light weight add-on with the smallest foot-print possible.

We would very much appreciate your help. Any information you can give us regarding the following will be a great aid.

  1. Are you using Firefox? (I assume so since this is mozilla support.... ).
  2. Which anti spyware software are you using?
  3. How did you get the CPU usage stats. Are they the browser's stats? Does it stop when facemoods is disabled? Is it only when browsing Facebook or at all times?

Thanks a lot!

My sister also discovered that she had facemoods installed as a google chrome extension. She *claims* that she hasn't installed anything of the sort, though I wasn't around to verify this.

I don't know what a "PUPSC" is, but it sounds like it is similar to "PUP" which means "Potentially Unwanted Program". These are generally programs which get flagged by a heuristic virus scanner. Heuristic scanners look for programs which exhibit virus like behavior, instead of looking for known viruses. The downside to these, is that they can produce a lot of false positives.

One website that I saw claims that facemoodssrv.exe does a lot of suspicious things:

   * Writes to another Process's Virtual Memory (Process Hijacking)
   * Enables a COM Object/Server on the Local Machine
   * Can communicate with other computer systems using HTTP protocols
   * Registers a Dynamic Link Library File
   * This process creates other processes on disk
   * Injects code into other processes
   * Performs DNS look ups to resolve URL IP addresses
   * Uses rootkit techniques to conceal its presence, interrogation or removal
   * Executes a Process

This would certainly explain why facemoods gets flagged as a "PUPSC" - this is definitely suspicious behavior! Mind you, facemoods isn't' necessarily a virus because it does these things. In fact, these make sense to me, as I think that facemoods is a program which "injects" smiley graphics in the place of plain text emoticons. In order to do this, you would have to figure out how to convince your web browser to replace a plain text emoticon. Mind you: this IS suspicious virus-like behavior. I personally wouldn't touch it with a ten foot pole. This isn't safe, and should (almost) never be done. The only exception that I can think about are anti-virus programs which use root-kit like behavior to make them harder for a virus to deactivate/sabotage/cripple.

Anyways, even if facemoods is legit, it is also possible that a virus writer has taken the facemoods code and modified it for their own purposes. They then package this with another harmless program. This way when an anti-virus catches it, it flags facemoodssrv.exe as a virus. Because facemoods may engage in risky activities normally, the virus writer may hope that virus scanners won't catch it, or that the user will disregard the warnings. Thus the virus gets away with doing malicious things, because it looks similar to what facemoods normally does.

If there is an application which is installing facemoods without your permission, my advice is to treat it like a virus. Don't trust add/remove programs to remove it correctly.

My question is this: Are the above listed behaviors normal for facemoods?

Would refer people to ThreatExpert if you want to see what this program does to your pc. As a guide, I found it by googling 'facemoods rootkit'.

This Yang guy above is all over d/l sites with his platitudes and is dedicated to writing fake reviews. Try Cnet as an example. The most comprehensive uninstall guide I could find was on deletemalware but once a rootkit is installed how can we possibly be sure?

Update. This was a new pc. How could I have forgotten about spybot search & destroy? :) All your dodgy toolbar problems eradicated. I'd picked up Babylon from somewhere too. Go download!

best thing now is to use google for everything, browser, email, photos, etc.