This article aims to help you by showing you how to remove the “Your system is heavily damaged by (4) virus!” from your PC and “Your system is heavily damaged by Four virus!” from your smartphone or tablet.

A new scamming virus-like messages have started appearing in the wild and they have been detected in both smartphones as well as computer. The messages can be seen on any mobile device, because they are actually a redirect to a web link and the same goes for computers as well. Their end goal is to convince the victims that they must install a suspicious phone app or install a program on your computer, called PCSmartCleanup. If you see messages from this virus on your computer or your smartphone, chances may as well be that it has been compromised by an app which may cause browser redirects to the “Your system is heavily damaged by (4) virus!” messages. This is why, we advise you to read this article and learn how to remove the “Your system is heavily damaged by (4) virus!” messages from your web browser or your smartphone and protect your devices in the future.

Threat Summary

Name	Four (4) Virus
Type	Scam / Browser Redirect
Short Description	A browser redirect to a usually random URL which displays a tab locking message, asking victims to download a rogue antivirus program.
Symptoms	A new tab on your browser may display a message saying “Your system is heavily damaged by (4) virus!”.
Distribution Method	Via Adware or advertising malware installed on your computer or by being redirected from a suspicious site.
Detection Tool	See If Your System Has Been Affected by Four (4) Virus Download Malware Removal Tool
User Experience	Join Our Forum to Discuss Four (4) Virus.

How Does (4) Four Virus Spread

The (4) Four virus can be spread via any type of software which is causing browser redirects on your computer. Usually, most often these are browser hijacking PUPs (Potentially Unwanted Programs). They aim to attach to your web browser and your computer as a suspicious browser extension or a program installed directly. They are usually installed via either another adware on your computer or via bundling. Bundling is a form of pushing the (4) Four virus software on your computer via adding the app that is causing redirects to it in the software setups of a free program you download online. This could be your favorite free torrent program, media player or any other free software.

In addition to this, you can receive a redirect to this website by simply visiting a suspicious URL which may cause a browser redirect as a result of having a script embedded in the website itself. Some sites go as far as bypassing ad-blocking software and this is the main reason why even if you have an Adblock installed to be careful which websites you visit.

(4) Four Virus – Activity and Purpose

The main purpose of this scamming software is to display it’s message and alongside it instructions on how to convince you to download a rogue antivirus program. Such fake antivirus programs pretend to discover fake malware on your computer and ask you to pay money in order to remove it. Some, more aggressive ones may even steal your financial details while you are purchasing their licensed versions. The messages of the (4) Four virus are very similar to one another, but they usually vary in what apps they push you to download. This is because they exist in all shapes and forms. The (4) Four virus pop-up can be seen in Windows machines, MacBooks and Apple and Android smartphones as well. The most often met message is the Windows one, which looks like the following:

It tries to get victims to panic by giving ~5 minutes deadline timer to click on the button “REMOVE VIRUSES” and warns that if the virus is not removed, it may corrupt the important files on your computer. This message should not be trusted and if you see it, you should immediately close your web browser. The complete message is the following:

Your system is heavily damaged by (4) virus!
{DATE}
We have detected that your Windows 7 is 28.1% DAMAGED because of (4) harmful viruses from recent
adult sites,
If you do not remove the virus now, it will cause permanent damage to your system, corrupt your photos,
data, applications, etc.
Here’s what you NEED to do (step by step):
Step 1: Tap the button and install PC SmartCIeanup for free now!
Step 2: Open the app to fix your system now!
3 minutes and 0 seconds
REMOVE VIRUSES>>

The version for smartphones is very similar, however it differs from the fact that it prompts to download a free app.

For MacBooks the message is rather the same, only it prompts to download the Mac version of the suspicious software:

In addition to simply aiming to display the message to you, the malicious web links to which you may be redirected contain completely random names, for example c38bd2xzdd.xys. They may also have tracking technologies embedded within them that may install various different tracking technologies on your computer as well, such as:

Cookies.
Pixels.
Tags.
LSOs (Local Shared Objects or Flash Cookies).

These tracking technologies may be used by the cyber-criminals to track your:

Location.
Language.
Browsing activity.
Online clicks on the page.

They may also be used from the website to which you are redirected when you try to download the suspicious software and they may even collect what you have typed on the site, like your name, address, credit card number, security code and other crucial information without malware actually being installed on your computer. Those cookies can only be removed via a specific anti-malware software which is designed to deal with threats like the (4) Four virus redirect intrusion.

How to Remove “Your system is heavily damaged by (4) Four virus!”

If you have encountered pop-ups like the ones above, we strongly urge you to immediately shut down your web browser and follow the removal instructions below. Since the “Your system is heavily damaged by (4) Four virus!” redirect can be seen on both smartphones and computer, you can follow the instructions which are specifically for your device below.

Since the “Your system is heavily damaged by (4) Four virus!” redirect may be caused by having a suspicious software installed on your computer, such as PUPs (Potentially Unwanted Programs), security experts strongly recommend that you scan your computer and remove any unwanted software automatically with a an advanced malware removal software.

PC Removal Instructions:

Manually delete Four (4) Virus from Windows and your browser

Note! Substantial notification about the Four (4) Virus threat: Manual removal of Four (4) Virus requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1.Remove or Uninstall Four (4) Virus in Windows

2.Remove Four (4) Virus from Your Browser

3.Fix registry entries created by Four (4) Virus on your PC

Automatically remove Four (4) Virus by downloading an advanced anti-malware program

1. Remove Four (4) Virus with SpyHunter Anti-Malware Tool

2. Back up your data to secure it against attacks related to Four (4) Virus in the future

Back up your data to secure it against attacks in the future

IMPORTANT! Before reading the Windows backup instructions, we highly recommend to back up your data automatically with cloud backup and insure it against any type of data loss on your device, even the most severe. We recommend reading more about and downloading SOS Online Backup .

1. For Windows 7 and earlier

1. For Windows 8, 8.1 and 10

1. Enabling the Windows Defense Feature (Previous Versions)

1-Click on Windows Start Menu

2-Type Backup And Restore
3-Open it and click on Set Up Backup

4-A window will appear asking you where to set up backup. You should have a flash drive or an external hard drive. Mark it by clicking on it with your mouse then click on Next.

5-On the next window, the system will ask you what do you want to backup. Choose the ‘Let Me Choose’ option and then click on Next.

6-Click on ‘Save settings and run backup’ on the next window in order to protect your files from possible attacks by Four (4) Virus.

1-Press Windows button + R

2-In the window type ‘filehistory’ and press Enter

3-A File History window will appear. Click on ‘Configure file history settings’

4-The configuration menu for File History will appear. Click on ‘Turn On’. After its on, click on Select Drive in order to select the backup drive. It is recommended to choose an external HDD, SSD or a USB stick whose memory capacity is corresponding to the size of the files you want to backup.

5-Select the drive then click on ‘Ok’ in order to set up file backup and protect yourself from Four (4) Virus.

1- Press Windows button + R keys.

2- A run windows should appear. In it type ‘sysdm.cpl’ and then click on Run.

3- A System Properties windows should appear. In it choose System Protection.

5- Click on Turn on system protection and select the size on the hard disk you want to utilize for system protection.
6- Click on Ok and you should see an indication in Protection settings that the protection from Four (4) Virus is on.

Restoring a file via Windows Defense feature:
1-Right-click on the encrypted file, then choose Properties.

2-Click on the Previous Versions tab and then mark the last version of the file.

3-Click on Apply and Ok and the file encrypted by Four (4) Virus should be restored.

Optional: Using Alternative Anti-Malware Tools

Smartphone and Tablet Removal Instructions:

1. Back up the data on your device

Back up the data on your phone

CAUTION! Before attempting any removals and drive formatting on your device, you should know that it is essential to save all your important contacts and files from your phone. There are several methods to backup your files:

Method I: Using online backup software or a memory card if the device supports it.

Method II: Connecting to another device and copying the data directly.

This is a bit risky option since the device may have malware on it. This is why, first you need to enter the device’s Safe Mode:

For RAZR Droid Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.

2.Switch the phone on.

3.You should see a Motorola Dual Core screen appearing. You should press and hold the Volume up, and Volume Down keys on the side of the smartphone. Hold them until the lock screen shows up with ‘Safe Mode’ written in the lower corner.

For HTC Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.

2.Turn on your phone while simultaneously holding down the Menu Button. When it starts, keep pressing the Menu Button until you see ‘Safe Mode’ menu appearing in the lower corner.

For Nexus devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.
2.Turn on the phone.
3.When the welcome Logo Screen shows up, hold the trackball while pressing it until a lock screen shows up, or you see ‘Safe Mode’ written in the bottom corner.

For Other Motorola Devices:

1.Switch off the smartphone and remove the battery for a few seconds then plug it back in.
2.Hold down the Menu Button after you press it while turning on the phone. When it boots, hold the button down upon seeing the lock screen or feeling the phone vibrate.

For Moto G Devices:
1.Press the Power Button and hold it on until the list with options pop-up.
2.Hold the Power off button and wait for a ‘Reboot to Safe Mode’ option to appear.
3.Tap it and let the phone reset.

For Samsung Galaxy Devices:

1.While the device is on, hold down the Power Button and wait for the Options List.
2.Wait for a ‘Restart to Safe Mode’ option to appear.
3.Choose this setting. The device will restart.

For Apple Devices:

1. While your device is locked, hold down the Power Button and the Home Button until you see a white Apple logo.
2. Once you see the logo, let go from those buttons and start holding the Volume Up button. (Give it a little time to boot up)
3. Now the phone should boot in Safe Mode without any third-parties running.

And now it is time to proceed by doing the actual backup:

Apple iOS

1. Connect your device and select it in iTunes.
2. From the Backups section go to Manually Back Up and Restore and tap on Back Up Now.

Android

1. Connect your device via USB to a computer and select Use as a Media Device. You may also see use as file transfer option.
2. Go to your phone from My Computer and copy all the files you need.
3. If the phone has an option to install its drivers onto your computer, select it and install them since this will simplify the process of copying your contact list on your computer.

2. Hard-reset your device and remove Four (4) Virus

Vencislav Krustev

Ventsislav has been covering the latest malware, software and newest tech developments at SensorsTechForum for 3 years now. He started out as a network administrator. Having graduated Marketing as well, Ventsislav also has passion for discovery of new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management and then Network Administration, he found his passion within cybersecrurity and is a strong believer in basic education of every user towards online safety.

2 Comments

Sandy April 4, 2018 at 2:44 pm
I don’t know HOW to uninstall the virus in windows, or HOW to remove from brower, or HOW to fix registry entries, or even WHERE that is. And I was timed out on this typing two times by CAPCHA, what is that?? This is a common problem for old people, young people and people that are new to this all, I wish I had full instuctions, its very frustrating. I don’t have time to search for all these.
Reply ↓
Vencislav Krustev (Post author)May 16, 2018 at 1:38 pm
Hello, Sandy
If you keep seeing redirects related to this virus on your computer, the situation may be more complicated than it seems. Since such viruses create objects on your computer that reside under random names, it is often recommended to scan for and remove those objects intelligently and automatically, as what most experts would recommend doing. Here is one such software that can do the job for you and clean your PC without you having to reinstall Windows: https://sensorstechforum.com/spyhunter-anti-malware-tool/
Reply ↓

Hey you,
BE IN THE KNOW!

What Is “Your system is heavily damaged by (4) Four virus!” (Remove It)

Threat Summary

How Does (4) Four Virus Spread

(4) Four Virus – Activity and Purpose

How to Remove “Your system is heavily damaged by (4) Four virus!”

Remove or Uninstall Four (4) Virus in Windows.

Step 1: Remove/Uninstall Four (4) Virus in Windows

Remove Four (4) Virus from Your Browser.

Fix registry entries created by Four (4) Virus on your PC.

Remove Four (4) Virus with SpyHunter Anti-Malware Tool

Back up your data to secure it against attacks in the future