There are several variations on this type of malware. It is downloaded without the users consent when they visit a attacker website. These programs disguise themselves as A/V programs and advise you that you have a virus and should go to there site and purchase a download to fix it, but all they are doing is stealing your cc info. Most current A/V programs should be able to detect and remove it.

http://www.bathandbodyworks.com/home/index.jsp comes up when I typed bbw.com

PAV- Personal AntiVirus, another rogue software, how to remove/get rid of it:

I recently got word that the site antispywarepcscanner.com was spreading a new fake/rogue anti virus application. I have blogged about this annoying type of threat previously (anti-virus-1 and Anti virus 360 being two examples)

I decided to investigate this threat further.

The website antispywarepcscanner.com triggers a fake scanning page if the user vists via a specially crafted link placed on genuine, but hacked sites.

A convincing fake scan window is displayed, like the one below:

Fake scan window

If a user clicks remove all an installer file is downloaded

Fake remove now window

If the installer file is launched/run, it will initiate connections to a number of other sites to download the main infection.

Once the installer finishes downloading the infection, the malware file wincontrol.dll will be dropped into C:\Windows\System32\wincontrol.dll (newer versions drop winexplorer.dll) and the main infection dropped into C:\program files\PAV\pav.exe

It will then proceed to issue (fake) scary warnings of impending doom and inform the user that their computer is infected with many serious viruses (which is not true, the only virus being Personal AntiVirus itself), with screens such as the ones below displayed in order to frighten the user into buying into the scam:

Scary fake scan

The main interface of personal antivirus

Scary baloon tooltip

Of course, to remove all of the scary infections it claims to have found, personal antivirus will require you to “register”…which means handing over your hard earned cash to a bunch of scammers….

Here's the catch

Now, lets get on to how to remove this scum from your computer:

There are two tools that I know definitely do detect and remove this infection, the first one being the well known Malwarebytes Anti-Malware…. this tool is FREE to use for detection and removal, but the realtime protection that will prevent such an infection in the first place will require a license. Download it from their website-

http://www.malwarebytes.org/mbam.php , install it, remember to update it first and then perform a scan which will find and remove this nasty.

If Malwarebytes Anti-Malware has helped you remove personal anti virus, please consider buying a license to say thanks and support their fight against malware- you can securely purchase a license by clicking here:
https://store.malwarebytes.org/342/?affiliate=4568&cart=29945&scope=cart - please note that this is completely optional and not a requirement for it to scan and remove personal anti virus, but you will benefit in future from real time protection that will prevent infections like this and many others installing themselves on your system!

The other tool is from a well known anti virus vendor, Kaspersky Lab- It is called AVPTool and is a free virus removal utility. You can download and run it from their website, and it will scan your computer for any threats that MBAM missed and remove them free of charge. Get it here:

ftp://ftp.kaspersky.com/devbuilds/AVPTool/index.html

My humblest apology...

I posted to a bunch of forums the problem with a malware program ending up on my Moms computers...
I didn't observe the forum guidelines and posted quickly and without regard to them.

I was absolutely concerned. Here's why...

Mom just lost my stepdad recently. She's been doing all kinds of banking crap online. The malware was one that retained passwords, therefore, with her income being dwindled, if someone were to get into her bank accounts, she'd be wiped out...

I pictured some women here possibly being in the same boat (BBW seeking friendship, whatever) without someone to help or prevent the situation from avalanching...

The program was not picked up by Norton as it was designed to only achieve or attain the true malware part by being activated (via clicking the activate button on the menu for the program, thus downloading at that point which if an AV program wasn't running in the background, would have enabled the malware). The program constantly uses popups saying the computer is infected with such and such trojan, so the user eventually panics and opens the PAV (personalantivirus) and clicks it to activate it.

The website is BBWPersonalsPlus.com if any of you visit or know of anyone who might...

To those who reported me for the multiple postings, no harsh feelings, you did what you felt was necessary...

ThomasJB, thanks for the help.
It torques me that this thing has been around for over a year, over a quarter billion hits and damned Norton didn't pick it up. My mother's husband paid good money for a three pack and it was basically worthless or, possibly she downloaded it without thinking by clicking ok to the popup bar at the top of the browser.
I appreciate your advice.
I've sat her down, shown her what to do and not to do, what to allow and not allow. Have set her browser so it won't download without her consent. A near 70 old shouldn't have to be worried about crap like that...
Again, thanks.
I hope I can return the favor some day...

Thanks to Markecephus and Don for understanding my panic and having cool heads...
FandL, yep, I even showed her about the task manager so she can get an idea of what's happening if it starts acting funny or slow and be able to tell me what's happening...

Later all and thanks...