New online scamming virus-like notifications have beug appearing in the Wild, very similar to the “Your system is heavily damaged by (4) virus!” scam. The messages have begun appearing as a resul of a web redired to a URL which displays a pop-up with them. The objective of those messages is to get victims to install a suspicious phone application which will install a software on the victim’s computer, known as PCSmartCleanup. The software has been reported to be suspicious and demand money to fix non-existent issues on your computer. This is the main reason why we strongly advise you to remove completely this scamming messages from your browser and PC by reading the following article.
|Type||Scam / Browser Redirect|
|Short Description||A browser redirect to a usually random URL which displays a tab locking message, asking victims to download a rogue antivirus program.|
|Symptoms||A new tab on your browser may display a message saying “Your Windows Is Infected With (2) Viruses”.|
|Distribution Method||Via Adware or advertising malware installed on your computer or by being redirected from a suspicious site.|
|Detection Tool|| See If Your System Has Been Affected by Winsecurity.info |
Malware Removal Tool
|User Experience||Join Our Forum to Discuss Winsecurity.info.|
How Does Winsecurity Virus Spread
In order to be widespread, the scam may take advantage of an ad-supported software, known as potentially unwanted programs on your computer. This software may cause multiple web browser redirects, among which may be the following scam. Such programs are often known as adware or browser hijackers and they may be installed via other adware on your PC or via software bundling. Bundling is an aggressive marketing trick to slither software such as the one causing the “Your Windows Is Infected With (2) Viruses” pop-ups to appear. This means that if you have downloaded a free program installer of your favorite media player or any other freeware, you may have also installed the Winsecurity scamming message program on your PC as well.
Other methods by which you can land on the Winsecurity web page is if you have visited suspicious website that has a script which causes the redirects or pop-ups of this scam to appear directly on your computer. Some suspicious websites have smart methods that bypass any ad-blockers or similar programs of such type.
Winsecurity Scam “Virus” – Activity and Purpose
The end goal of the Winsecurity scamming program is to show a fake message with instructions within it on how to download a fake antivirus program, also known as rogue antivirus. Such software performs a fake scan of your computer, shortly after which aims to convince you to pay money in order to perform the removal of those viruses. This scamming practice often results in victims paying the cyber-criminals online and even risking their financial details by exposing their credit card number, security code and other credentials.
The most often seen message of the Winsecurity scam appears in the following way:
It pretends to give victims a deadline which is couple of minutes and dispays a fake countdown timer in order to get victims to panic. However, when the timer runs out, nothing happens, it is only a scareware tactic. The message which tricks inexperienced victims into clicking the “REMOVE” button and downloading the fake removal software is the following:
Your Windows Windows 10 is infected with (2) Viruses!
25 September 2017
Your Windows Windows 10 is infected with (2) Viruses. The pre-scan found traces of (2) malware and (1)
phishing/spyware. System damage: 28.1% – Immediate removal required!
The removal of (2) Viruses is required immediately to prevent further system damage. loss of Apps. Photos
or other files.
Traces of (1) PhishingISpyware were found on your computer. Personal and banking information are at
2 minutes and 0 seconds
In addition to displaying this message, the web links which may be presented to you in correlation to this message may be malicious as well. Most of them usually have tracking technologies embedded directly within them, such as:
- Flash cookies (LSOs).
These technologies are not malicious by essence, but they may be authorized to collect different information from your computer and store it. Such info may be:
- Your location and language.
- Browsing history.
- Online clicks.
- Online search history.
In addition to this, the website Winsecurity.info itself may use those technolgoies when you purchase the fake antivirus software as well. This is likely done with the purpose to collect your personal and financial information.
Similar to many tech support scams, the “Your Windows Is Infected With (2) Viruses” scam may also display a fake telephone number which aims to get you to call a fake tech support agent. Beside the risk of the call subscribing your number to services that may ramp up your telephone bill, the person on the other side may want you information as well. This is why, it is strongly recommended not to call any number provided there and to immediately remove the “Your Windows Is Infected With (2) Viruses” scam with an anti-malware software which is specifically used to tackle low-level threats like this one as well as high end ones.
How to Remove “Your Windows Is Infected With (2) Viruses” Scam
Since this scam can appear both on your computer as well as mobile device, we have divided the removal instructions into removal for computers and mobile devices as well.
If you have started seeing pop-ups, just like or similar to the “Your Windows Is Infected With (2) Viruses” scam, you should immediately shut down your web browser and follow the instructions below to remove it and protect your PC in the future as well. Since manual removal may be a tricky process, experts strongly advise to use an advanced anti-malware software to get rid of the “Your Windows Is Infected With (2) Viruses” scam with an automatic scan of your computer by using an anti-malware software.
PC Removal Instructions:
Manually delete Winsecurity.info from Windows and your browser
Note! Substantial notification about the Winsecurity.info threat: Manual removal of Winsecurity.info requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.
Automatically remove Winsecurity.info by downloading an advanced anti-malware program
Smartphone and Tablet Removal Instructions: