The essence of the problem
Most likely, there is a “Trojan” on your PC, the purpose of which is to lure more money from naive users. This is what a pseudo-blocking page might look like:
Common situation?
I would like to note right away that there is no need to send any SMS. The solution to the problem is completely free. You will soon see this for yourself.
VKontakte virus and ways to combat it
If your computer is infected
The VKontakte network is quite popular among users. Therefore, new viruses appear that block the entrance, preventing you from going to your personal page. They steal credentials and send spam. The number of such malware is constantly growing, and not everyone knows how to deal with it. Many people are interested in how they can unblock their page, eliminate the VKontakte virus, and regain access to it. Some people are faced with a situation where, when logging into a social network, a message appears asking them to send an SMS. This is one of the signs that the VKontakte virus has appeared. To be more precise, there is a virus on your computer that does not allow you to access your page. The SMS will be paid, don’t rush to send it, don’t help scammers make money.
What happens when you become infected with a virus?
To remove the VKontakte virus, you need to understand how such an infection occurs. Such viruses enter the user’s computer through programs that have been installed, or when entering a site with a virus. After an infection has occurred, users often only see the activation page, but are unable to log in. Remember, the VKontakte administration assures that it never asks you to send SMS in order to enter the network. As a rule, someone asks to send a not very expensive message to log into a social network. This is a lie. There are cases when, after sending such messages to users who had less than one hundred rubles in their account, they received a notification that there were not enough funds to send such a message, which indicates that the SMS costs more.
Why shouldn't you send paid SMS when logging into a social network?
Some users get lost, especially since it often happens that a person sits down to chat online after a hard day at work, and then a VKontakte virus awaits, requiring him to send a paid message. People with large balances on their phone accounts do as they are asked, lose money, and still cannot access the social network. Usually the virus writes a message that indicates the administration’s request for SMS activation due to the growth of spam and dummy accounts. It is reported that this needs to be done only once, and in response a code should be sent, which must be entered in the appropriate field. Everything will be formulated beautifully and competently. At the end there will be a note that the administration of the social network cares about the safety of its clients.
What could be the consequences?
VKontakte viruses are not a rare phenomenon; many have heard about them, but not everyone knows how to deal with them. All users need to remember one thing - do not enter your cell number everywhere. At best, they will steal your credentials and withdraw a one-time amount from your phone account. And it happens that when sending an SMS message, a person signs up for some paid services, then money will be debited from the phone at a certain frequency. Do you need such problems?
How to remove the VKontakte virus, what steps need to be taken to eliminate it?
- Click Start, then Run, and type %SYSTEMROOT%\system32\drivers\etc\hosts. Then you need to select “Notepad” to open the file.
- See if there are lines in the document that mention vkontakte.ru; they need to be removed.
- Next, you need to open “Search”, type vkontakte.exe, indicating the need to search in system files, as well as in hidden files and folders. Delete this file.
- Update your antivirus and scan your entire system.
- If in the first step you were unable to open the hosts document, turn off your computer, go into safe mode and repeat all the steps from the beginning.
Another way
There is an alternative method that has been found by enterprising people. It is used if the first method could not be implemented. Users move the contents of the etc folder to another (created) folder (not copy, but move).
Blocked on VKontakte? We treat redirection, white screen, etc.
If, when you enter the social network VKontakte (or anywhere else in general), you are redirected to other sites or some kind of heresy opens up like advertising, strange messages, etc., etc., then we do everything the same, namely:
- Launch AVZ;
- Click “File” - “System Restore”, mark item number 13 and click “Perform selected operations”;
- Let's close. Let's see.
If you still don’t have access, then read and follow all the methods described below.
Lately, people have been seeing all sorts of bullshit like:
“Hi, I'm a virus. A virus that you picked up while surfing or surfing the Internet. I am not just a virus, I openly declare myself. I won’t format your hard drive or kill your computer, I just want you to open your eyes to this wonderful world! For this purpose, I, my dear friend or girlfriend, blocked all sites for access. And wherever you try, try to go, I will pursue you everywhere.
Why is all this? But why. You sit on VKontakte all day long, and for you there is no other world. People closed their eyes. VKontakte destroys your brain from the inside. Therefore, in order to open your eyes to this, I will appear everywhere except contact, most likely VKontakte, will help you fight me, but initially I will complete my mission. NO VKONTAKT!
Now just sit on VKontakte and think about whether you are a person or a puppet?
https://vk.com/"
Treat in the same way as described above. If this does not help, then read and move on.
VKontakte Antivirus (Cezurity Scanner)
Cloud service for checking and treating your computer. Cezurity Anti-Virus Scanner will check your computer for free for malware - viruses, Trojans, spyware, rootkits (hidden programs). In case of infection, the anti-virus scanner will cure your computer.
- A quick check will only take a few minutes.
- The scanner will help detect and neutralize threats missed by other antiviruses.
- Compatible with other installed antiviruses.
- It is easy and quick to install and does not require constant updates of anti-virus databases.
The download menu looks like launching a regular application on a social network:
After clicking on the “Install Scanner” button, you should see a window that will offer installation options. Where in the first case the program is installed with the recommended settings, and in the second case you can disable actions that you do not need. Made your choice and clicked the “accept and install” button
Now we see a proposal to save the file
After saving, run the file and the installation of “VKontakte antivirus” begins
And at the end the main menu of the program opens in front of you
This application is not the main protection of your computer from viruses - it is only a professional tool for protecting a VK page. I repeat once again, it is not a general antivirus for the entire system.
How to remove or remove a virus blocking “Contact”
- The first way is to go through “start” – “run” and after entering %SYSTEMROOT%\system32\drivers\etc\hosts, select “notepad”. After that, find references to the VKontakte network (for example, vkontakte.exe) and delete unnecessary files.
- The second method is to move (do not copy!) the contents of the %SYSTEMROOT%\system32\drivers\etc folder to another folder.
If a virus has blocked “Contact”, you don’t know what to do and how to remove the Trojan virus in order to cure the system from damage - we will help you!
Call us now and get a discount:
- Saint Petersburg 8
How to protect yourself from a ransomware virus
So, we have already understood that ransomware can cause devastating effects and is therefore a costly risk. Therefore, a logical question arises: how to keep the system safe?
Invest in protection (staff training)
The vast majority of ransomware attacks are aimed at tricking someone, so you can reduce the risks by making ransomware information part of your IT security training.
Ensure that any employee who uses a computer is properly alerted to suspicious attachments and links in email. Make sure people working for your company are aware of the dangers of spam and unfamiliar emails, especially phishing emails specifically targeting businesses or individuals.
Ironically, high-tech business owners are sometimes the most vulnerable. Perhaps because they think the security information is too obvious. Don't assume that what is obvious to you is obvious to everyone in the office - scammers are upping the ante in their attacks.
You can simply give each employee the appropriate document and force them to sign on it. But it's the same as nothing. It is much more effective to talk to employees and make sure that they truly understand the danger and understand how to prevent it.
Keep your software updated
2021 saw some of the most catastrophic hacking attacks, with the WannaCry and NotPetya viruses exploiting the same vulnerability in the Windows operating system. This vulnerability was patched by Microsoft in March - well before these attacks began (in May and June). This means that billions of dollars that businesses lost could have been saved through simple actions.
In a home office situation, the easiest way to keep your operating system patched is to simply leave automatic updates running. Yes, those messages about rebooting your computer are very annoying, but it's not as bad as losing all your work.
Another problem with software that many people do not know about is infection of the router with a virus. If the hacker controls it, he can redirect the web browser to a virus page. Guidelines for updating the firmware are contained in the instructions for the router.
Make sure you have backups
Nothing will force you to pay money to the ransomware if you have a backup copy with all your vital information. It is clear that you will still not be able to drag all the information onto the disk and what will always remain is what has real value. Therefore, you should not skimp on staff training just because you have backups. But this will allow you to minimize problems.
For freelancers, consultants, and people tied to a home office, paid cloud storage will be enough to store files. This way, you simply save all your important work documents in a folder that syncs with the cloud.
Control network access
When there is more than one computer in an office, a key factor that determines how hard it is to harm you is the amount of information that can be encrypted. The more files and hard drives the ransomware affects, the longer it will take to restore data from backups and the longer the business will be idle.
Employees don't need an account with access to all information. All they need is an account that allows them to do their job.
Blocked on VKontakte? Let's remove viruses first
To begin with, as a rule, if VKontakte is blocked, we need to get rid of the virus itself, otherwise it will be impossible to restore access, because the virus will still nullify all your efforts, blocking the work of the social network.
And therefore, in order to defeat this nasty thing, we are scanned, what is called “to the victory” ©, using the methods described here:
- How to quickly kill viruses and other nasty things. Part 1 [AVZ].
- How to remove SpyWare and what it is. Part 2. [Spybot]
- How to remove viruses. Part 4. [dr.web cureIT]
If you do not do these things, then do not hope (although there are chances) that the methods below will help you in any way. Done? Then let's go fix it.
VKontakte blocked due to deti.scr virus
At one time there was a virus that sent out offers to visit a link.
The link leads to a picture in jpeg format, leading to the attacker’s resource (https://******.misecure.com/deti.jpg). In reality, the server sends the executable file deti.scr via this link, which is directly a network worm.
Having copied itself to the folder C:\Documents and Settings\*UserDir*\Application Data\Vkontakte\ under the name svc.exe, the worm is installed on the system as the Durov VKontakte Service and looks for the password to access Vkontakte.Ru in cookies, used by the browser. If the password is found, then the worm gains access to all contacts of its victim in this network and sends the same link to these contacts. At the same time, deleting all files from the C: drive will begin.
If the user reads this text long enough and indulges in thoughts about its content, he risks losing not only all system files, but also his data files - documents, photographs, emails and much more. Therefore, the best action when such a message appears is to immediately turn off the computer’s power, which will at least allow you to save, if not all the data, then at least part of it.
If you received such a link in a personal message from a friend who previously clicked on a similar link, despite all the warnings and warnings of his own browser, and became infected with this virus, then please inform him about it and advise him to update his antivirus.
At the moment, Dr.Web already knows how to rid computers of this virus.
To quickly neutralize a virus process manually:
- Open the task manager (Ctrl+Alt+Del), find the svc.exe process, right-click on it -> End process.
- Start - Run - msconfig - on the services tab, look for Durov Service and uncheck it.
- Then we launch My Computer, click on Search and find svc.exe and deti.scr on the hard drive and delete them into the trash, and then from the trash.
It should help.
VKontakte virus, how does infection occur?
It’s very simple: you installed an unknown program, used an infected flash card, visited sites without turning on anti-virus protection - any of these methods can introduce a virus into your computer that blocks VKontakte. A very popular method of infection is through special software that users voluntarily download to their computer. For example, a program for getting likes, votes, or viewing guests on a page can lead to blocking of a social network. Even if you see a program on a third-party site that offers “Download VKontakte voices without viruses,” you should not install it.