Severity scale:  

Feb 2020 update for Four virus. Know the main versions

removal by Julie Splinters - - | Type: Adware

Four virus is a fake warning used to scare users to make them download useless software

Four virus scam
Four virus is the scam appearing in a form of unwanted pop-ups on smartphones and computer systems

Four virus is a scam stating that the user's computer system is heavily damaged. The deceptive message can appear on multiple platforms, including computers, smartphones, and tablets. Similarly to Android virus and iPhone virus, it displays questionable notifications with the help of adware installed on the system without the user's interaction. Adware, which is also considered the potentially unwanted program,[1] can equally hijack Safari, Chrome, Firefox and or another browser. As a result, the victim is redirected to scam websites shouting out: Your system is heavily damaged by (4) virus. 

By using malicious social engineering, the authors of Four virus scam are trying to make users install questionable software on their machines, pay for useless services, or disclose their sensitive information. As you can see, it is a highly dangerous warning that you should not interact with.

Name Four virus
Type Adware
Main dangers Installation of bogus software, stolen or uselessly spent money, injection of other PUPs or even malware, personal data disclosure
Symptoms Aggressive ads popping out of nowhere, redirects leading to questionable realms, propagation of bogus software installation, etc.
Distribution Software bundling
Extermination Automatic – using Reimage Reimage Cleaner Intego or manual – check instructions below

Regardless of the motive, the scam changes the frequency of its appearance, the browser it keeps reappearing and similar factors. The fraction of Four virus warning delivered by one of its versions reads the following:

Your system is heavily damaged by (4) virus!

We have detected that your Windows 7 is 28.1% DAMAGED because of (4) harmful viruses from recent
adult sites,
If you do not remove the virus now, it will cause permanent damage to your system, corrupt your photos,
data, applications, etc.
Here’s what you NEED to do (step by step):
Step 1: Tap the button and install PC SmartCIeanup for free now!
Step 2: Open the app to fix your system now!


Note that you should never trust the fake virus alert since it might trick you into downloading more potentially unwanted programs or even malware. Victims report being offered to get a “trustworthy” security software to get rid of (4) virus. However, this is the way how criminals promote less than reliable programs or distribute malware.

Additionally, there is a serious risk of being tricked into revealing your personal information, such as:

  • full name
  • home address
  • social security number
  • bank account details

Finally, you might be redirected to “Your system is heavily damaged by Four virus” warning by a suspicious website. Therefore, we strongly suggest you to avoid visiting shady pages since this is one of the ways how you might be tricked by hackers into manually infecting your system. Please, ignore this scam and remove Four virus from your system immediately. 

Four virus fake warning
Four virus operates as a deceptive message which offers to install an unreliable antivirus and supposedly protect from a non-existent malware

If you have encountered the Four virus warning on iPhone or computer, close the tab or window immediately. If you are blocked, cancel the browser's task and you should eliminate this warning. Note that this is only a temporary solution to get rid of the alert, although it will protect you from installing various other potentially unwanted programs or dangerous cyber threats on your system.

Later, you must remove Four virus by uninstalling the adware[2] program which is the cause why you keep receiving such fake alerts. Unfortunately, ad-supported software often has numerous extra components that are hidden deep inside your system. So, it might be challenging to identify and eliminate them all.

Likewise, we suggest you get a professional antivirus for Four virus removal. Either employ Reimage Reimage Cleaner Intego or another reliable security software to uninstall the adware for good. Additionally, you will find guidelines showing how to reset your browser settings to finish the removal procedure.

Numerous Four virus versions are spreading around

There are three different variants of Four virus. Each version differs very minimally, including the name, modifications in the message itself, as well as different logos and icons used (crooks are using branding of legitimate companies, such as Microsoft or Google). However, all of them have the same goal – to gain monetary benefit one way or another.

Your Computer is heavily damaged by (4) virus

This scam appears directly in the browser, with the tab name “VIRUS FOUND!” and Google logo present. Obviously, the URL is spewing out fakery, but the content of the message might get users confused. It warns that victims' machine is heavily damaged and needs to be repaired using PCKeeper or similar useless program. It also explains that users only have few minutes to do so – otherwise, photos, contacts and other data will get deleted.

That is not how malware works. Legitimate anti-virus software would immediately flag up the threat, but would not require you to download anything. What is more, the message would not randomly appear on your browser. Unfortunately, there quite a significant amount of individuals who are not familiar with virus operation, and might believe scams like this.

Four virus on Android and iPhone

Your system is heavily damaged by (4) virus!

Your system is heavily damaged by (4) virus! fake error message that users can encounter when they get rerouted from a questionable website, as well as adware, could be causing these redirects. The tab name shows “Windows” written on it, as well as displays the fake message. Additionally, users may sometimes encounter a pop-up accompanying the web page, which displays the exact copy of the original message. 

Users are then prompted to install suspicious software on their devices (accordingly, victims are urged to download apps from Google Play on their phones). In some cases, the virus picks up the information of the device (for example, Samsung Galaxy S6) to make the scam more believable. As usual, users should ignore this message and remove Your system is heavily damaged by (4) virus! fake alert from their systems.

Your Windows Computer Is Infected With (4) Viruses

Your Windows Computer Is Infected With (4) Viruses is targeting individuals who use Windows operating systems. This time, crooks use official Windows and Microsoft logos to convince users about message legitimacy. The questionable URL is displayed on a tab named “Scanner.” 

The fake alert informs users that “a pre-scan” found traces of malware, as well as phishing and spyware. It is ironic because the message itself is a phishing attack. As usual, crooks are trying to scare users into downloading questionable software by adding a timer, as well as using attributes of legitimate (security) companies – Microsoft, Norton, McAfee, etc. What is more, victims are more likely to proceed when they see that their passwords and other data might be stolen. 

Nevertheless, never believe any warnings that come from a browser, unless it is a legitimate one. To make sure it is real – check the URL of the tab, and it is usually all it takes to realize that the message is bogus. Beware that cybercriminals might create domain names which are very similar to original ones, for example, microsoft-[random word].com.

Four virus scam
Be warned of the fake messages online. They might look legitimate and believable

You can let PUPs inside your system during the installation of freeware

As we have already mentioned, “Your system is heavily damaged by (4) virus!” ads are delivered by an adware program. This software is one of the many that are classified as potentially unwanted programs and distributed via popular marketing technique called bundling. In other terms, it is stealthily installed on your computer during the installation procedure of free applications.

Note that such a distribution method is legal, yet unfair. If you pick Quick or Recommended settings during the process the information about adware will be hidden, and you will end up installing it on your system. For this reason, we suggest you protect your system by ALWAYS choosing the Advanced or Custom mode.

Once you proceed with the installation, attentively follow each step and search for any suspicious offers to install unknown programs. If you find any, de-select the checkmarks granting your permission to install them and check your system for PUPs with professional security software.

Four virus
Four virus is a type of scam which has been widely used to gain revenue by making users install fake software

Four virus removal from iPhone and Android

According to experts,[3] to remove Four virus from Android and iPhone, you should start by canceling the web browser completely. If the scam does not disappear from your browser, reset the Android device completely by following these guidelines:

  • Click the Settings icon on your device. You can find it among other apps;
  • Select Privacy (or Personal) and Factory reset (you can also find it as Factory data reset, Backup & reset, etc.);
  • We recommend selecting Back up my data to protect it from the loss;
  • Click Reset device to remove Four virus completely.

iPhone instructions to get rid of the fake pop-up message are provided below:

  • Go to Settings;
  • Navigate to General;
  • Tap on Erase All Contents option.

Do not deal with this scam! We guarantee you that you will either be tricked to download expensive and ineffective antivirus or even lured to infiltrate malware.

Removing Four virus from Windows and Mac

To ensure Four virus removal from Windows, download professional and expert-tested software. You can find our top picks listed down below. Automatic elimination requires merely to download the antivirus and let it scan your computer files thoroughly. Shortly after, you will no longer receive fake alerts during your browsing sessions.

Additionally, there is a way to get rid of Four virus by following the manual elimination guidelines given below. However, this method requires you to be an experienced computer user in order to complete the removal procedure correctly and avoid system damage. 

Four virus termination steps in video format

Our team is always looking for ways how to help users understand important virus elimination steps as clear as possible. This time, we added a short video to guide you through the entire removal process and help you delete Four virus from the affected operating system and hijacked browsers (Chrome, Firefox, Edge, Explorer, Safari).

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove Four virus, follow these steps:

Eliminate Four from Windows systems

If an adware program is present on your windows system, you must remove it together with additional components.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall Four and related programs
    Here, look for Four or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'

Remove Four from Mac OS X system

In case you encounter Four virus message on Mac, search for and uninstall the adware.

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for Four or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Uninstall Four from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for Four and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete Four removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Erase Four virus from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, Four should be removed from your Microsoft Edge browser.

Get rid of Four from Mozilla Firefox (FF)

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select Four and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete Four removal. Click on 'Reset Firefox' button for a couple of times

Delete Four from Google Chrome

You can fix Chrome by deleting suspicious plug-ins and extensions which are disrupting your browser's activity.

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select Four and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete Four removal. Click on 'Reset' button to complete your removal

Eliminate Four from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for Four or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete Four removal process. Select all options and click on 'Reset' button

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices. Avoid any unwanted government tracking or spying by going totally anonymous on the internet. 

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using Private Internet Access VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer various losses due to cyber infections or their own faulty doings. Software issues created by malware or direct data loss due to encryption can lead to problems with your device or permanent damage. When you have proper up-to-date backups, you can easily recover after such an incident and get back to work.

It is crucial to create updates to your backups after any changes on the device, so you can get back to the point you were working on when malware changes anything or issues with the device causes data or performance corruption. Rely on such behavior and make file backup your daily or weekly habit.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware occurs out of nowhere. Use Data Recovery Pro for the system restoring purpose.

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Julie Splinters
About the company Esolutions


Removal guides in other languages

Your opinion regarding Four virus