WARNING YOUR'RE IN DANGER! YOUR COMPUTER IS INFECTED WITH SPYWARE!

Bookmark and Share

Trouble removing this virus? Try Spyware Doctor With Antivirus from PCTools. »Download

Online Virus Removal Guaranteed online virus removal service or you don't pay: www.OnlineComputerRepair.org

If you have been getting the message"WARNING YOUR'RE IN DANGER! YOUR COMPUTER IS INFECTED WITH SPYWARE!" on your desktop followed by something like

"ALL YOU DO WITH COMPUTER IS STORED FOREVER IN YOUR HARD DISK.
WHEN YOU VISIT SITES, SEND E-MAILS... ALL YOUR ACTIONS ARE
LOGGED. AND IT IS IMPOSSIBLE TO REMOVE THEM WITH STANDART TOOLS.
YOUR DATA IS STILL AVAILABLE FOR FORENSICS. AND IN SOME CASES"

"FOR YOUR BOSS, YOUR FRIENDS, YOUR WIFE, YOUR CHILDREN.
Every sit you or somebody or even something, like spyware, opened in your browsers,
with all images, and all downloaded and maybe later removed movies or mp3 songs -
ARE STILL THERE and could break your life!"

"SECURE YOURSELF RIGHT NOW!"
"REMOVE ALL SPYWARE FROM YOUR PC!"

This is a clear sign if ever there was one that you are infected with a virus.  In most cases people with this exact message will also be infected with Personal Antivirus, Total Security 2009. This type of attack first started happening around 2004 and I first saw it with Smitfraud.  Of course then it was a pornographic image in many cases or a DANGER YOU HAVE BEEN HACKED message.

We will cover the manual removal of "WARNING YOUR'RE IN DANGER! YOUR COMPUTER IS INFECTED WITH SPYWARE!" in a second.

If you need advanced help you can also get it over at www.onlinecomputerrepair.org.  This is one of the leading remote computer repair companies in the world and they work fast and at a great price

Manual Removal Of the "WARNING YOUR'RE IN DANGER! YOUR COMPUTER IS INFECTED WITH SPYWARE!" Desktop highjack issue.

Update.

Because this message pertains to several different virus strains we encourage you to see the exact fake client oyu have installed and do a search on this site for it.  you stand a far better chance removing this client by using a specific removal guide that pertains to your virus strain.

Here are some of the more popular strains right now that carry this message of a very similar one.

Personal Antivirus, Windows Police PRO , Advanced Virus Remover and Total Security 2009

Kill process:

  • You need to first stop the actively running process that pertains to this threat.  Once you stop the main fake antivirus client often times you will then be able to install or update software.  Because we do not know the fake client you are infected with we can not name the process.  Do a search on this site for the fake client and follow that guide.

We do recommend running a full scan using Spyware Doctor with Antivirus to see what other infections you have.  From there you can search this site on how to remove those other traces.  If you are unable to install security software or even run anything at all then download the Mal-aware tool on the top right.  Run it in safe mode and you should then be able to re-boot and isntall SDA and get the updates as well.

HINT!! With almost every fake client that blocks you from starting any programs you will find that you need to stop the fake client from running and then you will be able to use security tools to remove your threat.

One great hat trick we learned over the years is to simply re-name the .exe file that is causing the virus strain to run.  To do this right click on the desktop shortcut that points to the fake client.  Select Properties and under the general tab you will see the path to the file.  At the end of that path you will see the .exe file name.  Now browse to were that path is on your computer.  Re-name the .exe file by right clicking on the file and selecting re-name.  Re-boot your computer.  On startup the program will most likely now be running.  Now you can browse to that same path again and delete the .exe file name.

From there you should be able to download and install Spyware Doctor with Antivirus, update the client and run a scan to find all the virus traces that need to be deleted.  We do recommend most people just register the client but it is not an absolute must.

If you find security websites are blocked our you still can not run any programs then look at our side bar.  We have links to direct fixes for things like

reseting the HOSTS file

Resetting IE

Restoring the Task Manager

Restoring the Regedit option

Resetting the executables to be able to run .exe programs again.

Keep in mind that some of these tools may not work if your virus program is still running.

Virus Removal

2 comments for "WARNING YOUR'RE IN DANGER! YOUR COMPUTER IS INFECTED WITH SPYWARE!".

Anonymous's picture

1. My computer is being

My computer is being hijacked. When I use any search engine regardless of whether it is yahoo, google, etc. if I click on a link, it takes me to some unrelated site. I have run every virus/spyware program I have and then some. I have used Hijack this. But NOTHING has removed the problem. I have been told I have Trojan.BHO, Rogue. WinAntiVirus, Adware.Gdown, Trojan.Agent by Malware Bytes which says it has removed it but the problem is still there. THIS ONLY HAPPENS WITH SEARCH ENGINES. I can cut and paste the link into the bar and go to the site but I cannot click on the link and go to the correct site. PLEASE HELP.

technical admin's picture

2. Have you ran Spyware Doctor

Have you ran Spyware Doctor with Antivirus. It should catch the trojan and remove it.

You can also try Spybot Search and Destroy as well.

Run them both in Safe mode after they have been updated.

Highjackthis should show you what has highjacked your browser and you should be able to see it.

What web browser are you using? IE / Firefox / Safari ?

IF IE or even any other you can re-set it to the default settings and disable all plugins.

your other option is to have a pro look at this for you. Expect of course to pay but we do recommend www.onlinecomputerrepair.org as they are cheap and good at what they do

Post new comment

The content of this field is kept private and will not be shown publicly. If you have a Gravatar account, used to display your avatar.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Enter the characters shown in the image.
Syndicate content