User getting "your system is heavily damaged by four virus!" messages

An acquaintance emailed me to say that she is getting a virus message when she 'attempts to go to Google' on her iPad. I pressed for more information and learned that she is opening Safari, navigating to Google, and then getting the following message (I attached the screenshot, at the bottom of the post):


Your system is heavily damaged by Four virus!

We detect that your Apple iPad is 28.1% DAMAGED because of four harmful viruses from recent adult sites. Soon it will damage your phone's SIM card and will corrupt your contacts, photos, data, applications, etc.

If you do not remove the virus now , it will cause severe damage to your phone . Here's what you NEED to do (step by step ):

...

Install Applock for free on Google Play!


This friend is a senior citizen ... and is someone who definitely would not purposely browse to adult sites. I suggested she ignore the message, cycle the power, and see if the message goes away. So far, it hasn't re-appeared.


This is obviously a scam, designed to get users to install the Applock application. I Google'd the message and learned that this is a common issue on Android devices; however, I'm confused why and how it appeared on this person's iPad. Any thoughts? Should I have her perform any further diagnostics?



User uploaded file

iPad 2 Wi-Fi, iOS 10.3.2, null

Posted on May 22, 2017 7:30 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 24, 2017 1:15 PM

I believe this is being generated by malicious code running in an ad on the site being accessed.


Close Safari (or whatever browser), double press the home button, swipe on the browser to terminate the app and reload by reopening the browser. That will clear the message until the next time you run into another compromised ad.


Rinse and repeat when that happens.

27 replies
Question marked as Top-ranking reply

Oct 24, 2017 1:15 PM in response to cgwaters

I believe this is being generated by malicious code running in an ad on the site being accessed.


Close Safari (or whatever browser), double press the home button, swipe on the browser to terminate the app and reload by reopening the browser. That will clear the message until the next time you run into another compromised ad.


Rinse and repeat when that happens.

Jul 31, 2017 5:45 AM in response to ShagCA

I have the same problem, but none of the solutions suggested so far have worked. I'm using an iPad Air 2. iOS 10.3.3


I'm struggling to put an end to the "Your System is Heavily Damaged by the Four Virus" pop-up on Safari. It appears regularly when I am reading articles on thehill.com, a reputable news website. It does not always appear, but comes fairly consistently. I do not recall it ever appearing on any other website. Here's are two screenshots:


User uploaded file


User uploaded file

I of course close the window every time it pops up, and do not follow any of the links.


In Safari preferences, I have taken all of the following steps:


(1) Cleared history and website data

(2) Under "Advanced" I removed all website data again; however, there was still a lengthy list of websites shown in this window. I went through and individually selected each and deleted it.

(3) Blocked cookies from all websites

(4) Set the "block pop-up" to on.


After all that, I returned to the website and the pop-up appeared again.


I do not have an ad-blocking extension installed. I have not "jail broken" my iPad (at least not knowingly). I have not installed any apps that were not from the Apple app store. However, I have certainly transferred files (not apps) of unknown provenance from my mac.


My hunch is that this is somehow associated with the website, not my browser. But (a) that seems odd since it is a reputable website, and (b) I want to be certain.


I have seen mentioned on another forum that the firmware on my modem/router may be infected? Is that really a thing? Can it be fixed? Any guidance on that? What information do I need and where do I share it?

Sep 23, 2017 1:53 AM in response to King_Penguin

this same thing is happening on my SE, not an iPad, and it's while playing solitaire (on an app, not in safari, but it opens safari to show me the 'virus alert') - it was popping up every couple minutes tonite driving me crazy. I don't know what you mean by closing via taskbar - does that work on an iPhone too? What I was doing was double clicking the home button so I could slide safari up off the screen. Then i turned the phone off and back on, but it didn't help. Is there something with the Solitaire Deluxe app that could be causing it?? I didn't even have Safari open at the time.

Oct 16, 2017 11:02 PM in response to macjack

I have the same problem it just popped out that I have four viruses on my phone because of the recent adult sites and the fact that I didn’t know what to do Since I’m just a 13 years old i randomly clicked OK and I was trying hard to follow the instructions written there but I doesn’t work I couldn’t download what they ate telling me what to do so i just searched in safari about how to get rid of that virus and when I read your comments to not click ok and it was a scam I was relieved but the thing is I clicked OK.Is that a problem???? Or do I just leave it and not think about it???

May 22, 2017 9:21 AM in response to cgwaters

If the only web page open in Safari when that pop-up appears is Google, and there definitely aren't other pages open in other "tabs," this is most likely a network problem. The network hardware may have been compromised.


Another alternative is iOS adware, which is pretty uncommon and generally requires that you jailbreak your device. I'm guessing your friend would not have done such a thing, though you never know.

May 22, 2017 9:29 AM in response to cgwaters

cgwaters wrote:


What would cause the message to appear within Safari when simply browsing to Google.com (as the background of the screenshot indicates)?

Advertisement. Google can't guarantee there are no malicious ads on their website. Every now and then there are a few bad ads such as the one you saw. Clear Safari history and website data. That's all you have to do.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

User getting "your system is heavily damaged by four virus!" messages

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.