How To Remove The “Fun Moods” Browser Hijacker Virus (, Face Moods)

Sean Doyle

Sean Doyle is an engineer from Los Angeles, California. Primary focuses include internet security and web spam. Google+

29 Responses

  1. Sally says:

    Thank you so much!!! I uninstalled+ everything else you suggested but didn’t install malwarebytes ran a check with AVG…didn’t find anything then read other peoples comments re: normal spyware detector thingy’s not detecting funmoods, so downloaded malwarebytes, scanned and sure enough there was still 2 of the buggers in my computer, thank you so much writing this page!!!!

  2. Thank you so much for posting this information. I removed the funmoods manually on all of my browsers as instructed. I uninstalled it from my computer using the control panel. I also scanned my computer with Ccleaner and AVG and now everything is clean. Does that mean its officially gone? I want to make sure its not running in the background anywhere or I may have missed something.

    • Sean Doyle says:

      It sounds like you were able to successfully remove funmoods, but if you suspect funmoods was installed via a third party download (from such sites as CNET downloads, etc) you may want to search your download history for anything suspicious or questionable.

      My suggestion to ensure funmoods is completely removed is to perform a free scan using Malwarebytes because of all scanning software Malwarebytes positively removes all files associated with funmoods, facemoods.

      Also, when using CCleaner check out the Tools > Startup section for any unwanted startups.

  3. Rish says:

    Funmoods crashed my Win 7 install. Now i am running Win 8 and it has come back. Does not show that it is installed in program manager and the browser. I had it deleted by Malwarebytes as KIS did nothing. Both KIS 2013 and Avast failed to detect it. Using Malwarebytes now. I hope it can sort it out.

  4. Dick says:

    Used your manual instructions to remove Funmoods junk and finally cleaned it up. Thanks

  5. Anonymous says:

    awesome! Thanks

  6. Anonymous says:

    Thank you so much.

  7. Jane says:

    If “badmood” say they are not spyware or a virus, Why my mcafee blocking the site? This is not fun and very annoying. he should change his name to bad mood. Thank you for this article. This article is very helpful.

  8. Leo says:

    Thank you. Norton IS did not detect fundmoods when I ran a full scan. Malwarebytes found 60 instances of funmoods. I deleted all. Hope this gets rid of the problem.
    Is Norton IS 2012 not good enough? I am relying on it.

  9. Anonymous says:

    Thank you!!

  10. Anonymous says:

    Excellent tutorial. really appreciated it!

  11. Anonymous says:

    Thank you very much your help was needed very much!

  12. Anonymous says:

    Thanks very much for the step by step guide.

    To reiterate what others have posted, this was bundled with software from – it can be any software as the one I installed was not listed in comments.

    Despite unchecking every box imaginable it still installed funmoods. I had Chrome running and Firefox and IE installed (but not running) and it installed itself on all three browsers. The installation happens silently without your consent. You will only be asked to restart your active / running browser – other browsers that are installed on your computer but not running will be affected but you won’t know till you open them the next time.

    CNET seriously need to sort their s*** out. Doesn’t matter how careful you are, you can still get hit if you use

    • jo says:

      I also got it from Years ago I used cnet (was it c|net or so) because we delivered also our programs there. On those days we learnt that there is not coming any viruses or malware. But the days have changed…

      Just few days ago I said to one security SW seller that I don’t need his SW, because I use only safe sites 😉 This can still happen, we one trust too much.

      Thank you very much for the instructions :-)

    • Lisa Falls says:

      Ironically, the only download I’ve done in the last probably three months was downloading malwarebytes from I had no problems before that, then suddenly had this funmood stuff and couldn’t figure out where it came from.

    • Book of Chrome says:

      I accidentally downloaded the funmoods add-on, and then I panicked and deleted Google Chrome…

  13. sand says:

    Actually don’t use I got it from there. Used to download stuff from there as well but won’t make that mistake again ._.

  14. Sarah Downing says:

    Thank you, Sean. I am not usually that stupid, but I idiotically installed this because it came with a program I felt I could trust. Either way, I soon realized it was causing havoc on my browsers and uninstalled it. Realizing that wasn’t enough (even after having run Malwarebytes and quarantined those puppies), I did the manual steps you suggested and they appear to be working. Much appreciated! Keep up the good work!:-).

  15. maria says:

    Thank you! I got this virus when I was downloading another program to remove another malware, fbdownloader. For some reason I forgot to use the site which I usually use for downloads. In that site and probably several others, they have already checked for viruses and malware. This was really stupid. Thank´s again for helping us computer dummies out ;)!

  16. Anonymous says:

    Really Thanks!

  17. sandeep says:

    I was very much afraid that what happened to all my browsers, thanks to u I was able to remove and restore my system..

  18. rajesh says:

    thank you very much..

  19. Gary says:

    Thanks, those bastards have been giving me trouble ever since I screwed up and installed them. You are great!

  20. Anonymous says:

    Thank you so much for help on removing this program-I was seeing changes on my default browser homepage!

  21. Anonymous says:

    thanks for info on removing this PARASITE !!!

  22. Thanks for this. BTW, downloading from IS NOT safe. I was installing an extension renamer called… EXTENSION RENAMER and this crap was packaged in with it AND DID NOT ASK or NOTIFY that it was being installed. OBVIOUSLY CNET aka IS NOT checking their software well enough.

  23. and also says:

    “ (Fun Moods) claims they are not adware, nor spyware, and also state they are not responsible for any malware on an infected computer system which may have been contracted through them by a third party. ”

    At least in my XP the CPU usage went to 100%. Firefox was using 99% until I removed the “fun”-toolbar.
    If that is a feature in other OS’s/browsers, then that sw in near to be a malware.

  1. October 5, 2012

    […] How To Remove The “Fun Moods” Browser Hijacker Virus (Start … […]

Leave a Reply

Your email address will not be published.