Your computer is infected with malicious software? Do you have popups on your PC?
If so, search this blog for removal instructions or find computer threats by category.

Wednesday, April 13, 2011

Remove Facemoods (Uninstall Guide)

Tell your friends:
Facemoods is a free add-on that gives you a huge collection of smileys, winks and text effects. Although, this add-on was created to enrich Facebook chat messages, you can also add the free emoticons to any blog post and forum post or include smileys to your mail. You can download Facemoods toolbar from facemoods.com, but it is also come along with many freeware tools, Windows themes or screensavers.



We decided to wrote an easy to follow Facemoods removal guide for Internet Explorer, Mozilla Firefox and Google Chrome because we receive emails from various people who can't remove Facemoods toolbar completely or restore web browser's default settings (usually, search engine and home page). Important: Facemoods is not a virus. We do not classify it as malicious software either. None of the anti-virus vendors are detecting Facemoods as malware, except ESET NOD32 which flags it as potentially unwanted application. If you have further questions about Facemoods, you can send an email to team@facemoods.com.




Facemoods removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.





2. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



3. Search for Facemoods Toolbar in the list. Select the program and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



4. Restart your computer. Facemoods should be gone. If it's still on your computer, please follow the removal instructions bellow to remove the remains.


Remove Facemoods Toolbar in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Toolbars and Extensions. Uninstall everything related to Facemoods from the list: Facemoods toolbar, facemoods.com, etc.



3. Select Search Providers. First of all, choose Bing search engine and make it your default search provider. Then select Facemoods Search and click Remove button to uninstall it (lower right corner of the window).



4. Go to ToolsInternet Options. Select General tab and click Use default button or enter your own website, e.g. gooog.com instead of facemoods.com. Click OK to save the changes. And that's it.






Remove Facemoods Toolbar in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose Facemoods and click Uninstall button.



3. Click the small magnifier icon at the right top corner as shown in the image below. Select Manage Search Engines... from the list.



4. Select Facemoods Search and click Remove button. Click OK to save the changes.



5. Go to ToolsOptions. Under the General tab reset the startup homepage. That's it.


Remove Facemoods Toolbar in Google Chrome:

1. Click this little Facemoods icon as shown in the image below and select Uninstall.



2. Click on Customize and control Google Chrome icon and select Options.



3. Change Google Chrome homepage to google.com or any other and click the Manage search engines... button.



4. Select Facemoods from the list remove it by clicking the "X" mark as shown in the image below.



Associated Facemoods files and registry values:

Files:
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoods.crx
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoods.png
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodsApp.dll
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodsEng.dll
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodssrv.exe
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\facemoodsTlbr.dll
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\uninstall.exe
  • C:\Program Files\facemoods.com\facemoods\1.4.17.4\bh\facemoods.dll
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "facemoods"
  • HKEY_CURRENT_USER\Software\facemoods.com
  • HKEY_CURRENT_USER\Software\facemoods.com\facemoods\instl
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "http://start.facemoods.com/?a=w7th"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A} "Facemoods Search"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "facemoodssrv"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search "SearchAssistant"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar "facemoods Toolbar"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\facemoods
Share the knowledge:

65 comments:

Anonymous said...

Thank you.

Anonymous said...

Thanks a lot man, It was really bugging..

Ili said...

FireFox
Remove
C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml

Anonymous said...

Clear the "C:\Documents and Settings\%Current User%\Local Settings\Temp" because it contains some random.exe file "pending for renaming" to facemoods.exe

Anonymous said...

thanks, very usefull!!

Anonymous said...

go to hell facemoods

Anonymous said...

Thanks - needed that - why oh why do FaceMoods think they can get away with this - I'll never use facemoods now , no matter what.

Anonymous said...

I don't know how it installed itself in the first place =/

Anonymous said...

Thank you! This was as bad as the "mywebsearch" crap. Unfortunately some sites love cramming you with this crap, and make you jump through hoops to fully get rid of it.

Mei Lin said...

You have no idea how much this helped me. I was getting so frusterated at Facemoods. Thank you so much!!!

Anonymous said...

This helped, although my Spybot - Search & Destroy 2 still shows facemood related malware in my computer which it cannot remove :S

Anonymous said...

Thank you very very much

Anonymous said...

Actually a program that is so hard, even impossible to remove can hardly be regarded as NOT malware

Anonymous said...

thanks a lot !

Anonymous said...

i have a problem, did all that was said here

but if i go to MSconfig to see what windows starts on startup, it also tells me facemoods, ofcourse i disabled it getting started on startup, but it means facemoods is still somewhere on my computer

if i try to search the location that MSconfig tells me facemoods is hided, my computer can't find the location..

any help?

Renan Cavalieri said...

facemoods is a suck.. this fuc* install automatic in some prograns that we download from internet.

GAlcidesS said...

Thanks, this program was starting to stress me out, and it was not very useful as a search tool.

Anonymous said...

i did all the steps you told but still this shit facemoods is the search engine in my firefox.someone please help me.

Anonymous said...

I installed it and it put spam on my Facebook page. It was really embarrassing to have it. I hated it.

Anonymous said...

I LOVE U GUYS

Anonymous said...

thank u very much... facemood was very spastic...

Anonymous said...

Many Thanks for the info.

Anonymous said...

Thank you for the info...though this should have never been installed silently on my computer :-(

Anonymous said...

facemoods is clearly malware. It hides from Add Remove programs. I can't get it out of Internet Explorer. It hides from IE/Tools/Manage Add Ons.

Anonymous said...

Thank you so much! I don't know how this got on but this information was a lifesaver. Best information around, brilliant help. Thank you..

Anonymous said...

It's not enough.

I had to delete a fake antivirus.

It was still not enough.

I had to delete register keys.

Still not enough, facemoods manages to come back with the software Mozbackup.

Could the problem come from Mozbackup ?

Anyway, it's a wonder facemoods isn't flagged as a malware, it's more sneaky and annoying than a normal one.

Anonymous said...

I can't remove from MSN.
Facemoods install a bar in MSN
Can anyone help me?

Anonymous said...

thanks a lot, who ever did so much of research on all explorers. i was running crazy with this facemoods. thanks for the step by step help. cheers to u guys/gals

Anonymous said...

Thanks dude .....
love you for that !!!!

Anonymous said...

Remove all references from the Windows registry:

Open up regedit (Run -> regedit)
File -> Export -> save - to backup the registry
CTRL+F -> type in 'facemoods'
Delete all instances of facemoods

Anonymous said...

facemoods sucks :(

Anonymous said...

This facemoods crap got on my nerves!!!!! jeez.. how the hell did it get installed?? we;; I'm glad i uninstalled it.. I can finally breath!! --___--... They force it into ppls browser... I deff won't use it either.. n it sucks.. Ha!

Anonymous said...

thanks, got this by accident, had it less than a day and it was doing my head in!

Anonymous said...

FACEMOODS HAS BEEN DEFEATED!!!!!! :D

Anonymous said...

facemoods its not a maleware i easily remove it from the add remove so its find

Anonymous said...

Thanks a lot. facemoods is the worst search engine I ever used.

Anonymous said...

Oh boy, am I thankful to the person who recommended removing all references to Facemood from the Windows registry. It scared me to even touch the registry, but I've taken the advice and, at long last, I'm no longer bothered by the Facemoods startpage, which I couldn't possibly get rid of. THANK YOU THANK YOU THANK YOU.

Just to repeat the tip:

Open up regedit (Run -> regedit OR hit the Windows key + R -> regedit)
File -> Export -> save - to backup the registry
CTRL+F -> type in 'facemoods'
Delete all instances of facemoods

Anonymous said...

Thanks !!

Anonymous said...

Deleting from the registry worked for me, damn thing should be clssed as malware

Anonymous said...

I honestly don't know what I installed or where I got it, but it was never mentioned in any downloads or programs...

I couldn't find any of the registry values (this is the first time I've even had to crack the editor on 7 >.>) or the program files, so I sure hope removing the toolbars/search engine, etc. was enough!

Otherwise uninstalled it everywhere I could find, and then it brought me to this feedback page saying "WE'RE SORRY TO SEE YOU GO".

I told them point blank in the comments "This was installed without my knowledge or permission, I'll be flagging it as adware in the future."

I really hope these people meet with an accident someday... YOU HEAR THAT FACEMOODS!?! YOU CAN KISS MY ARSE!

Anonymous said...

I completely agree with the last message. Facemoods cannot be regarded as a non-malware software when we don't even know how we got it on the computer. I also found this sh** on my computer right after I installed JDownloader, so Facemoods IS Malware. Spybot detects it as malware too. Look... I don't even have Facebook guys. I really don't need a toolbar like this and if I wanted one, I would have downloaded it MYSELF.

Like the last person said: F*** YOU FACEMOODS! (Without being too rude... anyway)

Gally said...

Totaly agree, damn you facemoods! and thx 4 the post guys =D

Anonymous said...

This worked fine, however, I could have just used system restore. Now I seem to be stuck with an even worse problem...getting this damn malware removal page off. It's my new home page whether I want it or not, and pops up to it whenever I open my explorer program.

Anonymous said...

i used facemood well but my question is do my friends need to have it also to read what ive wrote to there wall,, because they just only seen a tag name of the moods and not the icons...

Anonymous said...

I <3 you for posting this. Thanks so much for your help!

Anonymous said...

Thank you! I hated facemoods!

Anonymous said...

Thank you man .. facemood sucks..

Anonymous said...

TY!!!!!! tytytytyty!, i was goin' crazyy!

eS Jay said...

facemoods is malware. period.

Anonymous said...

Criminy!!! It was scary to see how deep this POS got into the Registry!!! Thanks for the tips!

Anonymous said...

chrome was infected with facemoods, I had to delete chrome as it became useless, impossible to clean and facemoods infected IE automatically. I had to clean 587 registry entries, all system restore files until I got rid of it. In my 22 years of web use I found facemoods as the MOST SUCCESSFUL MALWARE. It is worse than any virus I encountered by far.

Anonymous said...

It needs a class action or a law to stop these people accessing our private space, any no win no fee lawyers out there who want to take it up I will start it,
Google,bing,apple think of that payday...I liken it to the postman reading my post before delivering it, If they stopped you in the street went in your pocket took out your wallet and had a good look in it and then putting their card in it or stood next to you on the tube and went through your purse or briefcase they would have a bloody nose or aching Nuts.
It is an unsolicited intrusion, if somebody was to follow you all day every day recording your every move and action, I think that would be considered as a stalker.
The law should be that it is a world wide criminal act to install any software that changes, records, infects or causes distress and requires owners of that infected equipment to spend time removing.
With a minimum fine of $64,000 increasing for each offense, like memory has.
Oh, by the way Facemoods.com when you opened the two hotmail.com mails I sent you (had confirmation you have) with the .gif images, even if you back up the there is no saving the data, don't drink to much New Year's Eve, you will need your wits about you on 01/01/2012!
Just because you can do something doesn't make it right!

Workinprogress said...

Thank you...!!

Tolga BALCI said...

Great guide thank you.

Anonymous said...

I've done all of the above and still facemoods seems to be the default when I type words into the address bar (not the search bar, to the right, which now uses Google, but the address where the address is displayed). I've also tried running 'Spybot Search and Destroy' which, sadly, did not work.

I'm a bit leary of making registry changes, so haven't done that yet. How should I do it, just delete those lines, or change them somehow?

Anonymous said...

No further comment.

Anonymous said...

This darn thing even modded my keyboard in Bios - Sticky Key as well Very melicious - after a couple of hours I decide the only real way is to reformat and rebuild - I agree on the lawsuit if you can catch them. I think IT is using facemoods as a cover.

Anonymous said...

These bunch of rat bastards. I at the very lease sent an e-mail to them to vent my frustration. They are the problem with the internet! Like big government, nothing, i said nothing will ever be done about them. Thanks for the advise people. I at least have my browser back. If someone caame in my house without my permission, I would shoot them dead wo hesitation. Same difference!!!!

Anonymous said...

facemoods, SUCKS SOOOO BAD. I CANT REMOVE IT WITH THEIR STUPID DIRECTIONS. I HATE IT. I WANT MY BROWSER BACK. AND THESE BASTARDS OFF MY PAGE. I HAVE TRYED EVRYTHING TO REMOVE IT AND CANT. PEOPLE LIKE THIS OUGHT TO BE GIVEN A HELLISH FINE AND THEN SHOT.

Lewis said...

FACEMOODS IS MAJOR SPYWARE, I THINK WE SHOULD START A CLASS ACTION LAWSUIT. ARE THERE ANY LAWYERS OUT THERE LIKE TO TAKE THIS ON? LEAVE YOUR EMAIL ON THIS SITE, I'LL CONTACT YOU BACK. STARTING A NEW GROUP ON FACEBOOK, search "facemoods class action lawsuit" group. Join to see what's happening.

Anonymous said...

Thank you sooooooooooooo much!! :D

Anonymous said...

Removing The Nightmare (The right way on Mozilla)

Type in the adress bar about:config
Filter by "Keyword.URL". Right button on the value and select Modify
Type the url of your favorite search engine and accept.
Now filter by "facemoods" and for each key, right click on the value and select Restore
Close and reopen.

Cheers

Luis

Anonymous said...

Thanks for all the great tips. I deleted the toolbar from the control panel-add/remove programmes and still had facemoods opening in the internet explorer browser. My default search provider is google but facemood was openinig as a second browser and showed when I clicked new tabs to open. I run the registry search and found the 'tabs...facemoods' file and only then I got rid completely of this malicious thing.

Agata

Anonymous said...

Thank you so very much for your clear instructions on how to remove facemoods- I tried several other sets of instructions, but this is the only one that worked. I was starting to get really annoyed. VICTORY FOR THE FREE PEOPLES OF MIDDLE EARTH!

Manoel Junior said...

hey dude im from Brasil and want to say obrigado thank you!