Warning! Visiting this site may harm your computer!

Bookmark and Share

Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. »Download

Online Virus Removal Guaranteed online virus removal service or you don't pay: www.OnlineComputerRepair.org

Warning! Visiting this site may harm your computer!

Talk about a BS error.  I'm sorry but sneaky little things like this really get to me.  I swear 90% of this stuff is from the russian mob.  This fake warning bob is also followed by the message. " This web site probably contains malicious software program, which can cause damage to your computer ect.."

Here is what it looks like
Fake Alert

This is what the real warning is supposed to look like

Real Alert

You can see the they look very similar.  However on the top one the wording is different and it has two different buttons.  One asking you to get protected.

After this warnign comes up it will try to take you to another fake and bogus security client.  In our case the client was called Personal Antivirus and the image looked like this

Personal Antivurs

Of course this Personal antivirus is a fake and bogus client.  Most people who get this warning already have this fake client installed on their computers.

Personal Antivirus removal instructions.

Manual Personal Antivirus Removal Instructions:

Stop Personal Antivirus Processes:
pav.exe
PerAvir.exe
services.exe
unins000.exe
winlogon.exe and iv.exe if running

Find and Delete these Personal Antivirus:
pav.exe
Uninstall Personal Antivirus.lnk
c:\Program Files\Personal Antivirus\activate.ico
c:\Program Files\Personal Antivirus\Explorer.ico
c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Program Files\Personal Antivirus\unins000.dat
c:\Program Files\Personal Antivirus\uninstall.ico
c:\Program Files\Personal Antivirus\working.log
c:\Program Files\Personal Antivirus\db
c:\Program Files\Personal Antivirus\db\DBInfo.ver
c:\Program Files\Personal Antivirus\db\ia080614.db
c:\Program Files\Personal Antivirus\db\ia080618x.db
c:\Program Files\Personal Antivirus\Languages
c:\Program Files\Personal Antivirus\Languages\IAEs.lng
c:\Program Files\Personal Antivirus\Languages\IAFr.lng
c:\Program Files\Personal Antivirus\Languages\IAGer.lng
c:\Program Files\Personal Antivirus\Languages\IAIt.lng
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Remove Personal Antivirus Registry Values:

<!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:1; mso-generic-font-family:roman; mso-font-format:other; mso-font-pitch:variable; mso-font-signature:0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} -->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"

We should note that you will also need to fix your host file as well.  In most cases we found issues all over with other viruses and torjans that came down with this bad boy.  We do recommend you scna your computer with spyware doctor with anitvirus here.  The scan will be able to detect what else you are infected with and you can go from there.

Virus Removal

7 comments for "Warning! Visiting this site may harm your computer!".

Anonymous's picture

1. Removing It

How do you remove this from my computer? I don't understand what you stated above regarding the C drive and Program Files. I browsed through my C drive and Program files and didn't find anything.

technical admin's picture

2. This is a generic section and

This is a generic section and error. You NEED to run a search for the actual fake virus name installed on your computer. From there you will be able to find the exact steps needed to remove your threat.

Anonymous's picture

3. Still not getting this. Can

Still not getting this. Can you dumb it down for me? I run XP. Are you saying that I should go to the search function? What is the search term? Whatever this is it gets past spybot and avg.

technical admin's picture

4. It's very easy. First find

It's very easy. First find out what you are infected with. What the name of the fake security client is. Only after that will you be able to do a search on this site for the exact virus you are infected with and you will be able to find the guide that walks you through the threat that you have installed on your computer.

The best thing you can most likely do is go out and purchase a real security client. Spybot and AVG will not do the trick. Those free clients are good but do not offer up front protection and often times can not remove well written viruses. Don't trust your computer to second rate products.

Anonymous's picture

5. Yay!

After realizing that Antivirus7 is a bogus antivirus client, I manually removed it from registry and all of its dll's and exe's then I restarted, and bam!! No more warnings!

Anonymous's picture

6. what did i miss??

So yes..i am helping my cousin with his pc..and he got this same virus. AV7...completely bogus.. So i deleted that. But i still cant find of those bogus registries to remove the rest. Which Dll's and exe's are to be removed?

technical admin's picture

7. It's all in the guide

It's all in the guide already. However if you can not located your traces then simply run a scan using the Spyware Doctor with Antivirus client. It will show you the exact traces that are left over and if you are infected with anything else.

Make your cousin actually purchase real security software so he never gets infected again. This is the only real way to be protected online.

Post new comment

The content of this field is kept private and will not be shown publicly. If you have a Gravatar account, used to display your avatar.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Enter the characters shown in the image.
Syndicate content