“Failed To Remove Viruses” Scam: A Detailed Guide to Protect Your Device

The “Failed To Remove Viruses” scam is a fraudulent pop-up that deceives users by falsely claiming their device is infected with 18 high-risk viruses. Its primary goal is to pressure victims into activating fake anti-virus software, which may lead to downloading malicious programs, exposing personal data, or incurring financial loss.

---

Threat Overview

Attribute	Details
Threat Name	“Failed To Remove Viruses” pop-up
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Eighteen viruses detected on the device.
Symptoms	Fake error messages, system warnings, pop-up hoaxes, fake system scans.
Damage	Identity theft, monetary loss, sensitive data exposure, malware infections.
Distribution Methods	Rogue websites, malicious pop-up ads, potentially unwanted applications (PUAs).
Detection Names	Forcepoint ThreatSeeker (Suspicious), VirusTotal detections, others.
Associated Domain	otirnalc[.]xyz
Serving IP Address	45.141.156.109
Danger Level	High

---

What Happens During the Scam?

When users visit a website hosting this scam, they encounter a fake system scan that claims to have detected 18 viruses on their device. The pop-up window typically displays the following message:

---

Text Presented in the Pop-up Window

Failed to remove viruses (18) !

IMMEDIATE ACTION IS REQUIRED!

Viruses found on this PC track internet activity to collect banking details and login credentials at the moment.

Please activate Antivirus to keep your PC protected.

ACTIVATE ANTIVIRUS
Ignore*

*Your PC will become 100% vulnerable to threats, which will entail unpredictable consequences

---

Consequences of Falling for the Scam

1. Malware Infections: Victims may unknowingly download adware, ransomware, browser hijackers, or PUAs.
2. Data Theft: Scammers can gain access to sensitive information like banking details, usernames, and passwords.
3. Phishing Risks: Users might be redirected to phishing pages disguised as legitimate services.
4. Financial Loss: Scammers may charge victims for fake or harmful software, stealing money in the process.

---

Removal Guide

If you've encountered the "Failed To Remove Viruses" scam, follow these steps to remove the threat:

Step 1: Download and Install SpyHunter

1. Download the anti-malware tool.
2. Install SpyHunter by following the on-screen instructions.

Step 2: Run a Full System Scan

1. Launch SpyHunter and initiate a full system scan.
2. Allow SpyHunter to identify malicious software, PUAs, or other threats linked to the scam.

Step 3: Review and Remove Threats

1. After the scan, review the list of detected items.
2. Select the "Remove" option to eliminate all malicious components.

Step 4: Restart Your Device

1. Reboot your system to complete the removal process.
2. Monitor your device for any unusual activity or symptoms.

---

Preventive Measures to Avoid Similar Scams

1. Avoid Clicking on Suspicious Links: Do not interact with unknown pop-ups, ads, or alerts.
2. Enable Pop-up Blockers: Use your browser’s pop-up blocker to reduce the risk of scams.
3. Install Reliable Security Software: Tools like SpyHunter can protect against phishing, adware, and PUAs.
4. Keep Software Updated: Regularly update your operating system and applications to fix security vulnerabilities.
5. Use Strong Passwords: Protect your accounts with complex, unique passwords, and enable two-factor authentication where possible.
6. Verify Legitimacy: Always check the URL and legitimacy of websites offering security alerts or software.