Warning! Visiting this site may harm your computer!
Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. »Download
Online Virus Removal Guaranteed online virus removal service or you don't pay: www.OnlineComputerRepair.org
Warning! Visiting this site may harm your computer!
Talk about a BS error. I'm sorry but sneaky little things like this really get to me. I swear 90% of this stuff is from the russian mob. This fake warning bob is also followed by the message. " This web site probably contains malicious software program, which can cause damage to your computer ect.."
Here is what it looks like

This is what the real warning is supposed to look like

You can see the they look very similar. However on the top one the wording is different and it has two different buttons. One asking you to get protected.
After this warnign comes up it will try to take you to another fake and bogus security client. In our case the client was called Personal Antivirus and the image looked like this

Of course this Personal antivirus is a fake and bogus client. Most people who get this warning already have this fake client installed on their computers.
Personal Antivirus removal instructions.
Manual Personal Antivirus Removal Instructions:
Stop Personal Antivirus Processes:
pav.exe
PerAvir.exe
services.exe
unins000.exe
winlogon.exe and iv.exe if running
Find and Delete these Personal Antivirus:
pav.exe
Uninstall Personal Antivirus.lnk
c:\Program Files\Personal Antivirus\activate.ico
c:\Program Files\Personal Antivirus\Explorer.ico
c:\Program Files\Personal Antivirus\PerAvir.exe
c:\Program Files\Personal Antivirus\unins000.dat
c:\Program Files\Personal Antivirus\uninstall.ico
c:\Program Files\Personal Antivirus\working.log
c:\Program Files\Personal Antivirus\db
c:\Program Files\Personal Antivirus\db\DBInfo.ver
c:\Program Files\Personal Antivirus\db\ia080614.db
c:\Program Files\Personal Antivirus\db\ia080618x.db
c:\Program Files\Personal Antivirus\Languages
c:\Program Files\Personal Antivirus\Languages\IAEs.lng
c:\Program Files\Personal Antivirus\Languages\IAFr.lng
c:\Program Files\Personal Antivirus\Languages\IAGer.lng
c:\Program Files\Personal Antivirus\Languages\IAIt.lng
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
Remove Personal Antivirus Registry Values:
<!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:1; mso-generic-font-family:roman; mso-font-format:other; mso-font-pitch:variable; mso-font-signature:0 0 0 0 0 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} -->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Personal Antivirus"
We should note that you will also need to fix your host file as well. In most cases we found issues all over with other viruses and torjans that came down with this bad boy. We do recommend you scna your computer with spyware doctor with anitvirus here. The scan will be able to detect what else you are infected with and you can go from there.








7 comments for "Warning! Visiting this site may harm your computer!".
1. Removing It
How do you remove this from my computer? I don't understand what you stated above regarding the C drive and Program Files. I browsed through my C drive and Program files and didn't find anything.
2. This is a generic section and
This is a generic section and error. You NEED to run a search for the actual fake virus name installed on your computer. From there you will be able to find the exact steps needed to remove your threat.
3. Still not getting this. Can
Still not getting this. Can you dumb it down for me? I run XP. Are you saying that I should go to the search function? What is the search term? Whatever this is it gets past spybot and avg.
4. It's very easy. First find
It's very easy. First find out what you are infected with. What the name of the fake security client is. Only after that will you be able to do a search on this site for the exact virus you are infected with and you will be able to find the guide that walks you through the threat that you have installed on your computer.
The best thing you can most likely do is go out and purchase a real security client. Spybot and AVG will not do the trick. Those free clients are good but do not offer up front protection and often times can not remove well written viruses. Don't trust your computer to second rate products.
5. Yay!
After realizing that Antivirus7 is a bogus antivirus client, I manually removed it from registry and all of its dll's and exe's then I restarted, and bam!! No more warnings!
6. what did i miss??
So yes..i am helping my cousin with his pc..and he got this same virus. AV7...completely bogus.. So i deleted that. But i still cant find of those bogus registries to remove the rest. Which Dll's and exe's are to be removed?
7. It's all in the guide
It's all in the guide already. However if you can not located your traces then simply run a scan using the Spyware Doctor with Antivirus client. It will show you the exact traces that are left over and if you are infected with anything else.
Make your cousin actually purchase real security software so he never gets infected again. This is the only real way to be protected online.
Post new comment