Do not trust notification "Your PC is infected with 5 viruses"
Written by Tomas Meskauskas on
(updated)
"Your PC is infected with 5 viruses" removal instructions
What is "Your PC is infected with 5 viruses"?
This is a deceptive website disguised as the Update & Security settings in the Windows 10 operating system. The main purpose of this web page is to trick visitors into downloading and installing the OneSafe PC Cleaner program. We advise against installing software that is distributed through, or advertised on, unofficial and deceptive websites such as this. Do no trust any virus/error notifications (or others) displayed on sites of this kind - they are fake.
According to this deceptive website, the computer is infected with five viruses. It urges visitors to install an antivirus update immediately, otherwise the viruses will damage the operating system (cause loss of apps, photos and other files). Once the "Install Update" button is clicked, this page displays a pop-up disguised as a system window and states that the antivirus update is prepared and can be downloaded by clicking the "Download Update" button. This button leads to a download page of the OneSafe PC Cleaner program. This program is not a Windows Update or security suite. Do not trust this scam website or download anything from it. Programs that are promoted through deceptive wen pages such as this can never be trusted. Furthermore, it is possible that these sites might be used to proliferate malware.
People often arrive at deceptive, and other untrustworthy websites, due to potentially unwanted applications (PUAs) installed on the browser, or the computer opens them. There are also other problems with these apps. PUAs commonly gather information such as IP addresses, geolocations, addresses of visited pages, entered search queries, and other details relating to users' browsing habits. The developers usually share the data with third parties who might be cyber criminals and misuse it to generate revenue. PUAs often serve unwanted, deceptive ads. When clicked, these open dubious websites or run scripts designed to download or install unwanted, potentially malicious apps. Some examples of ads that PUAs display include coupons, banners, pop-ups and surveys.
| Name | "Your PC is infected with 5 viruses" virus |
| Threat Type | Phishing, Scam, Social Engineering, Fraud. |
| Fake Claim | This web page claims that the computer is infected with five viruses and urges people to update the antivirus suite. |
| Distributed Unwanted Apps | OneSafe PC Cleaner |
| Detection Names | Full List Of Detections (VirusTotal) |
| Serving IP Address | 46.4.35.14 |
| Symptoms | Fake error messages, fake system warnings, pop-up errors, hoax computer scan. |
| Distribution methods | Compromised websites, rogue online pop-up ads, potentially unwanted applications. |
| Damage | Loss of sensitive private information, monetary loss, identity theft, possible malware infections. |
| Malware Removal (Windows) | To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Malwarebytes. |
This is not the only rogue website used to advertise dubious software in a deceptive way. More examples are "E.tre456_worm_Windows", "VIRAL ALARM OF MICROSOFT" and "Windows is not activated". In most cases, scammers behind these pages attempt to trick people into installing dubious software, however, many similar pages are used to extort money from unsuspecting visitors by urging them to purchase software or pay for services. In any case, never trust websites of this kind and simply close them.
How did potentially unwanted applications install on my computer?
Most people download and install potentially unwanted apps unintentionally. Typically, this happens when the apps are included into the set-ups of other software. Offers to download and/or install them are usually hidden in "Custom", "Advanced" and other similar settings of the download and installation set-ups. This distribution method of unwanted apps is called "bundling", however, it works only when people leave all of the aforementioned settings unchanged - in this way, they inadvertently allow additional apps to be downloaded/installed with other software. Sometimes PUAs can be downloaded and/or installed through deceptive ads - the ads run certain scripts that download/install PUAs (but this can only happen if the ads are clicked).
How to avoid installation of potentially unwanted applications
Use only trustworthy and official websites when downloading software or files. Do not trust third party downloaders, installers, torrent clients, eMule and other Peer-to-Peer networks, unofficial websites, or other download or installation sources/tools. If a setup contains settings such as "Custom", "Advanced", they should be checked carefully. Decline any offers to download or install unwanted apps. Avoid clicking intrusive ads, especially if they are displayed on dubious sites. Frequently, these ads redirect users to other untrustworthy, malicious websites. In some cases, clicking them leads to unwanted downloads and installations. If unwanted ads appear, or unwanted redirects happen regularly, remove all unwanted plug-ins, add-ons and extensions that are installed on the browser, and programs of this kind that are installed on the computer. Check if this problem is then resolved. If your computer is already infected with PUAs, we recommend running a scan with Malwarebytes for Windows to automatically eliminate them.
Text presented in the fake system window, which is opened in a browser:
Antivirus Update
Update Status
Your PC is infected with 5 viruses. Urgent update is required for PC Cleaner to protect system from viruses and prevent additional system damage to y our personal data, such as loss of apps, photos or other files.
Install Update
Updates ara available:
2019-09 Cumulative Update for Windows Version 1703 for x64-based Systems (KB4025342)
2019-10 Cumulative Update for Windows Version 1703 for x64-based Systems (KB4022725)Advanced Options
Screenshot of a fake system pop-up window:
Text in this pop-up:
Antivirus Update is prepared
Click the button below to download update
Download Update
The appearance of "Your PC is infected with 5 viruses" pop-up (GIF):
Download page of OneSafe PC Cleaner:
OneSafe PC Cleaner installer:
OneSafe PC Cleaner application:
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Malwarebytes is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Malwarebytes
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Malwarebytes. 14 days free trial available.
Quick menu:
- What is "Your PC is infected with 5 viruses"?
- STEP 1. Uninstall deceptive applications using Control Panel.
- STEP 2. Remove adware from Internet Explorer.
- STEP 3. Remove rogue extensions from Google Chrome.
- STEP 4. Remove potentially unwanted plug-ins from Mozilla Firefox.
- STEP 5. Remove rogue extensions from Safari.
- STEP 6. Remove rogue plug-ins from Microsoft Edge.
Removal of potentially unwanted applications:
Windows 7 users:
Click Start (Windows Logo at the bottom left corner of your desktop), choose Control Panel. Locate Programs and click Uninstall a program.
Windows XP users:
Click Start, choose Settings and click Control Panel. Locate and click Add or Remove Programs.
Windows 10 and Windows 8 users:
Right-click in the lower left corner of the screen, in the Quick Access Menu select Control Panel. In the opened window choose Programs and Features.
Mac OSX users:
Click Finder, in the opened screen select Applications. Drag the app from the Applications folder to the Trash (located in your Dock), then right click the Trash icon and select Empty Trash.
In the uninstall programs window, look for any suspicious/recently-installed applications, select these entries and click "Uninstall" or "Remove".
After uninstalling the potentially unwanted application, scan your computer for any remaining unwanted components or possible malware infections. To scan your computer, use recommended malware removal software.
Remove rogue extensions from Internet browsers:
Video showing how to remove potentially unwanted browser add-ons:
Remove malicious add-ons from Internet Explorer:
Click the "gear" icon 
(at the top right corner of Internet Explorer), select "Manage Add-ons". Look for any recently-installed suspicious browser extensions, select these entries and click "Remove".
Optional method:
If you continue to have problems with removal of the "your pc is infected with 5 viruses" virus, reset your Internet Explorer settings to default.
Windows XP users: Click Start, click Run, in the opened window type inetcpl.cpl In the opened window click the Advanced tab, then click Reset.
Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type inetcpl.cpl and click enter. In the opened window click the Advanced tab, then click Reset.
Windows 8 users: Open Internet Explorer and click the gear icon. Select Internet Options.
In the opened window, select the Advanced tab.
Click the Reset button.
Confirm that you wish to reset Internet Explorer settings to default by clicking the Reset button.
Remove malicious extensions from Google Chrome:
Click the Chrome menu icon 
(at the top right corner of Google Chrome), select "More tools" and click "Extensions". Locate all recently-installed suspicious browser add-ons and remove them.
Optional method:
If you continue to have problems with removal of the "your pc is infected with 5 viruses" virus, reset your Google Chrome browser settings. Click the Chrome menu icon (at the top right corner of Google Chrome) and select Settings. Scroll down to the bottom of the screen. Click the Advanced… link.
After scrolling to the bottom of the screen, click the Reset (Restore settings to their original defaults) button.
In the opened window, confirm that you wish to reset Google Chrome settings to default by clicking the Reset button.
Remove malicious plug-ins from Mozilla Firefox:
Click the Firefox menu 
(at the top right corner of the main window), select "Add-ons". Click on "Extensions", in the opened window remove all recently-installed suspicious browser plug-ins.
Optional method:
Computer users who have problems with "your pc is infected with 5 viruses" virus removal can reset their Mozilla Firefox settings.
Open Mozilla Firefox, at the top right corner of the main window, click the Firefox menu, in the opened menu, click Help.
Select Troubleshooting Information.
In the opened window, click the Refresh Firefox button.
In the opened window, confirm that you wish to reset Mozilla Firefox settings to default by clicking the Refresh Firefox button.
Remove malicious extensions from Safari:
Make sure your Safari browser is active, click Safari menu, and select Preferences....
In the opened window click Extensions, locate any recently installed suspicious extension, select it and click Uninstall.
Optional method:
Make sure your Safari browser is active and click on Safari menu. From the drop down menu select Clear History and Website Data...
In the opened window select all history and click the Clear History button.
Remove malicious extensions from Microsoft Edge:
Click the Edge menu icon 
(at the upper-right corner of Microsoft Edge), select "Extensions". Locate all recently-installed suspicious browser add-ons and click "Remove" below their names.
Optional method:
If you continue to have problems with removal of the "your pc is infected with 5 viruses" virus, reset your Microsoft Edge browser settings. Click the Edge menu icon (at the top right corner of Microsoft Edge) and select Settings.
In the opened settings menu select Reset settings.
Select Restore settings to their default values. In the opened window, confirm that you wish to reset Microsoft Edge settings to default by clicking the Reset button.
- If this did not help, follow these alternative instructions explaining how to reset the Microsoft Edge browser.
Summary:
Commonly, adware or potentially unwanted applications infiltrate Internet browsers through free software downloads. Note that the safest source for downloading free software is via developers' websites only. To avoid installation of adware, be very attentive when downloading and installing free software. When installing previously-downloaded free programs, choose the custom or advanced installation options – this step will reveal any potentially unwanted applications listed for installation together with your chosen free program.
Removal assistance:
If you are experiencing problems while trying to remove "your pc is infected with 5 viruses" virus from your computer, please ask for assistance in our malware support forum.
Post a comment:
If you have additional information on "your pc is infected with 5 viruses" virus or it's removal please share your knowledge in the comments section below.
Outstanding!