The essence of the problem
Most likely, there is a “Trojan” on your PC, the purpose of which is to lure more money from naive users. This is what a pseudo-blocking page might look like:
Common situation?
I would like to note right away that there is no need to send any SMS. The solution to the problem is completely free. You will soon see this for yourself.
Hacking VKontakte. How to remove the VKontakte virus. Treatment methods
Have you already been visited by the VKontakte virus? Regardless of the answer, I recommend that you find out in advance how to remove the virus and prevent it from appearing on your computer. To do this, it is enough to take precautions and not panic the first time you encounter a malicious program. I will talk about some of the reasons for the appearance of a virus that blocks VKontakte, as well as ways to remove it.
In the first case , you may encounter conflicts with programs, for example, the Mozilla Firefox browser and various utilities for working with a social network : downloading videos, music, increasing ratings (VKSaver, etc.). In this situation, the browser crashes with an error message; to solve it, just remove the malicious utility.
In the second, the browser may show a blank page or display a loading error message. The reason may be the system hosts file modified by the virus, located at the address “C: Windows System32 drivers etc”. (It can also be hidden; to display hidden files, find the corresponding line in “Tools” - “Folder Option” - “View”; if you don’t see the first item, press “Alt”). Next, just open it with notepad, selecting the last one manually from the list, and delete all lines except
“127.0.0.1 localhost” (not counting lines starting with hash marks)
After the completed operation, you need to reboot.
On a note, I want to say that Dr. can also help Web CureIt, after checking it itself will offer you to replace the file. It is also one of the leaders in cleaning files and removing all popular threats, while working at high speed. Just if your PC is still infected with viruses and the site requires you to activate SMS , then you can immediately resort to Dr. Web CureIt, Kaspersky Virus Removal Tool or any other available anti-virus scanner if the standard anti-virus is powerless.
As a rule, any viruses or file changes do not occur every second and without your knowledge. If an antivirus is installed on your PC, it means that it simply missed the malicious file, and you most likely became a victim of scammers.
Also, if instead of the site a message with a code or any other information appears, a replacement may have occurred, the elimination of which has already been described above.
Small consequences of viruses are also possible, there are four of them, when the browser refuses to access the site using your username and password:
- Problems with Cookies. You need to clear them using standard browser tools;
- There is a problem with the cache; it also needs to be cleared using the browser;
- The page was hacked after you entered data on a fake site;
- Was banned by the network administration for any methods of boosting ratings, SPAM, etc. (usually related to point 3);
If the listed methods for removing the VKonakte virus did not help, we will definitely try to answer your questions in the comments.
How to get in touch if it is blocked by a virus.
Very often, a virus in Contact changes the contents of the hosts file. To access the sites, open the folder C:\WINDOWS\system32\drivers\etc\
and find the
hosts
(without extension).
Please note that it may be hidden, in which case it will not appear in Windows Explorer. Then you will need to enable the display of hidden files in the system settings. First of all, you need to check the file attributes. If the “ Read Only
” attribute is set in its properties, it will need to be removed. Now open it using any text editor, and feel free to delete all lines except this one:
127.0.0.1 localhost
Access to the file may be blocked by a virus in Contact; in this case, it makes sense to follow the steps described above by booting from a Live-CD. Instead of editing the file, you can simply delete it. The changes take effect without rebooting, you can immediately try logging into vkontakte.ru
and to other sites.
The virus in contact can act in another way. If the hosts
was empty, it is worth checking whether a proxy is registered in the browser settings.
To do this, in Internet Explorer, open the Tools Options Connections Network settings
.
If
something is written Address If the steps described above did not help, you have encountered a rarer and, most likely, smarter virus in contact. To remove it, you may need the help of specialists.
VKontakte virus and ways to combat it
If your computer is infected
The VKontakte network is quite popular among users. Therefore, new viruses appear that block the entrance, preventing you from going to your personal page. They steal credentials and send spam. The number of such malware is constantly growing, and not everyone knows how to deal with it. Many people are interested in how they can unblock their page, eliminate the VKontakte virus, and regain access to it. Some people are faced with a situation where, when logging into a social network, a message appears asking them to send an SMS. This is one of the signs that the VKontakte virus has appeared. To be more precise, there is a virus on your computer that does not allow you to access your page. The SMS will be paid, don’t rush to send it, don’t help scammers make money.
What happens when you become infected with a virus?
To remove the VKontakte virus, you need to understand how such an infection occurs. Such viruses enter the user’s computer through programs that have been installed, or when entering a site with a virus. After an infection has occurred, users often only see the activation page, but are unable to log in. Remember, the VKontakte administration assures that it never asks you to send SMS in order to enter the network. As a rule, someone asks to send a not very expensive message to log into a social network. This is a lie. There are cases when, after sending such messages to users who had less than one hundred rubles in their account, they received a notification that there were not enough funds to send such a message, which indicates that the SMS costs more.
Why shouldn't you send paid SMS when logging into a social network?
Some users get lost, especially since it often happens that a person sits down to chat online after a hard day at work, and then a VKontakte virus awaits, requiring him to send a paid message. People with large balances on their phone accounts do as they are asked, lose money, and still cannot access the social network. Usually the virus writes a message that indicates the administration’s request for SMS activation due to the growth of spam and dummy accounts. It is reported that this needs to be done only once, and in response a code should be sent, which must be entered in the appropriate field. Everything will be formulated beautifully and competently. At the end there will be a note that the administration of the social network cares about the safety of its clients.
What could be the consequences?
VKontakte viruses are not a rare phenomenon; many have heard about them, but not everyone knows how to deal with them. All users need to remember one thing - do not enter your cell number everywhere. At best, they will steal your credentials and withdraw a one-time amount from your phone account. And it happens that when sending an SMS message, a person signs up for some paid services, then money will be debited from the phone at a certain frequency. Do you need such problems?
How to remove the VKontakte virus, what steps need to be taken to eliminate it?
- Click Start, then Run, and type %SYSTEMROOT%\system32\drivers\etc\hosts. Then you need to select “Notepad” to open the file.
- See if there are lines in the document that mention vkontakte.ru; they need to be removed.
- Next, you need to open “Search”, type vkontakte.exe, indicating the need to search in system files, as well as in hidden files and folders. Delete this file.
- Update your antivirus and scan your entire system.
- If in the first step you were unable to open the hosts document, turn off your computer, go into safe mode and repeat all the steps from the beginning.
Another way
There is an alternative method that has been found by enterprising people. It is used if the first method could not be implemented. Users move the contents of the etc folder to another (created) folder (not copy, but move).
What to do if it asks you to send an SMS
The essence of the virus:
It is blocked on VKontakte and when entering the page it requires for various reasons (activation via SMS, paid entry via SMS and other heresy). It usually looks and says something like this:
Due to numerous registrations of anonymous profiles and an increase in the level of spam mailings on the site, now each profile is subject to mandatory activation. To activate your profile, send an SMS
with the text
bb2 t3155
to one of the following numbers: ****** ****** ****** The cost of
SMS
is equal to the nominal cost set by your operator.
Either this:
Do you want to know and be able to do more yourself?
We offer you training in the following areas: computers, programs, administration, servers, networks, website building, SEO and more. Find out the details now!
To combat spammers and dummy accounts, we have introduced a new protection system. Now each account is subject to mandatory SMS activation. This procedure is one-time only. To activate your account, please send an SMS with the text “799832” (without quotes) to the number ****. You will receive a code in response via SMS, which you must enter in the field and click the Activate account
. VKontakte always cares about your safety and if your account is blocked, VKontakte will be unblocked!
Or something else of a similar nature (variations in messages are not so important, because the solution is usually the same).
Important:
do not
send any SMS any
circumstances
Let's start solving the problem:
- Download the antivirus utility. We unpack the archive with it somewhere convenient for you.
- Run avz.exe
in the folder where you unpacked it. - In the program window, click “ File
” - “
System Restore
”, mark item number
13
and click on “” - Let's close. Let's see.
If you still don’t have access, then read and follow all the methods described below.
Tricky VK hack, download free program without viruses
Most often, a virus appears on a computer when downloading free programs. For example, you wanted to find out the secrets of a friend or girlfriend, look into the correspondence of your wife or husband, or monitor your child. For these purposes, we downloaded a program online to hack a VKontakte account. Trying to penetrate someone else’s profile, even with good intentions, they themselves fell for the bait of scammers.
In 90% of cases, programs for hacking pages on social networks that are publicly available are infected with viruses. Without suspecting anything, when downloading you become a victim of scammers. Your personal data is stolen, and you provide it yourself. Changes occur in the files; instead of the official VKontakte page, a copy opens, which is not easy to distinguish from the original. By entering your data into the form, you are sending it directly to scammers.
Before downloading anything online, check the file with an antivirus program. It must be installed on your computer to protect it from viruses.
If the computer is already infected, proceed as follows: go to “Start”, click “Run”, write %SYSTEMROOT%\system32\drivers\etc\hosts in the window, select “Notepad”. If the document contains references to VKontakte, they should be removed. In “Search”, enter vkontakte.exe, check the “Search in hidden files and folders” options on all drives. Delete the found vkontakte.exe file. Update your antivirus and check your computer.
There are situations when the problem occurs in the first step and the %SYSTEMROOT%\system32\drivers\etc\hosts document does not open. If this is your case, turn off and on your computer in safe mode, now repeat the steps in the instructions. Good luck in the fight against viruses!
The essence of the virus: when you access a page for various reasons, it requires you to send an SMS (activation via SMS, paid entry via SMS and other heresy).
Important: neither
Do not
send any SMS under any circumstances
- Download the AVZ
- Run avz.exe
in the folder where you unpacked it. - In the program window, click “ File
” – “
System Restore
”, mark item number
13
and click on ““ - Let's close. Let's see.
If you still don’t have access, then read and follow all the methods described below.
A virus with other heresies that blocks access to VKontakte
Lately, people have been seeing all sorts of bullshit like:
“Hi, I'm a virus. A virus that you picked up while surfing or surfing the Internet. I am not just a virus, I openly declare myself. I won’t format your hard drive or kill your computer, I just want you to open your eyes to this wonderful world! For this purpose, I, my dear friend or girlfriend, blocked all sites for access. And wherever you try, try to go, I will pursue you everywhere.
Why is all this? But why. You sit on VKontakte all day long, and for you there is no other world. People closed their eyes. VKontakte destroys your brain from the inside. Therefore, in order to open your eyes to this, I will appear everywhere except in contact, most likely VKontakte, will help you fight me, but initially I will complete my mission. NO VKONTAKT!
Now just sit on VKontakte and think about whether you are a person or a puppet?
https://vkontakte.ru”
Treat in the same way as described above. If this does not help, then read and move on.
If nothing else helps.
If it doesn’t work, then let’s try to act on a larger scale, namely:
- Launch AVZ
(if you don’t have it, then you apparently haven’t read everything described above). We unpack the archive with it somewhere convenient for you. - Run avz.exe
in the folder where you unpacked it. - In the program window “ File
” - “
System Restore
”.
In the window that appears, check off items 6, 8, 9, 13, 14, 15 and 20, 21
(20 and 21 may not be in the old version of AVZ - then without them).
Next, click “ Perform marked operations
”. - Once completed, close AVZ
and DO NOT start the Internet for now. - Next we do: Start
-
run
-
cmd
-
ok
. In the console that appears, write: - Press enter
. Then enter: - Press enter
Restart your computer, connect to the Internet, and try logging in.
If the password does not match or a message appears stating that you are sending spam and you have been blocked.
Follow the above steps. If they did not help, then check whether your page is accessible from other computers. If the problem for your account is also relevant on other computers, then contact the support service in contact.
Virus deti.scr [outdated, but sometimes relevant].
The link leads to a picture in jpeg format, leading to the attacker’s resource (https://******.misecure.com/deti.jpg). In reality, the server sends the executable file deti.scr via this link, which is directly a network worm.
Copying yourself to the folder C:\Documents and Settings\*UserDir*\Application Data\Vkontakte\
under the name
svc.exe
, the worm is installed on the system as the
Durov VKontakte Service
and looks for the password to access “
Vkontakte.Ru
” in
the cookies
used by the browser. If the password is found, then the worm gains access to all contacts of its victim in this network and sends the same link to these contacts. At the same time, deleting all files from the C: drive will begin. If the user reads this text long enough and indulges in thoughts about its contents, he risks losing not only all system files, but also his data files - documents, photographs, emails and much more. Therefore, the best action when such a message appears is to immediately turn off the computer’s power, which will at least allow you to save, if not all the data, then at least part of it.
If you received such a link in a personal message from a friend who previously clicked on a similar link, despite all the warnings and warnings of his own browser, and became infected with this virus, then please inform him about it and advise him to update his antivirus.
Currently Dr.Web
already knows how to rid computers of this virus.
To quickly neutralize the virus process manually
:
- Open the task manager ( Ctrl+Alt+Del
), find the
svc.exe
, right-click on it -> End process. - Start
-
Run
-
msconfig
- on the services tab, look for
Durov Service
and uncheck it. - Then we launch My Computer, click on Search and find svc.exe and deti.scr
and delete them into the trash, and then from the trash.
Sometimes it happens that when you try to access your VKontakte page, a virus blocks the entrance or requires you to send a paid SMS message to some number. We want to warn you right away - do not fall for provocations and do not send paid messages. Today we will explain to you in detail how to act if the virus does not allow you to contact.
How to fix the problem
Today we will look at several options on how to eliminate a similar virus on the social network Contact that extorts money:
- If you already have an antivirus program installed on your PC with an updated signature database, but a malicious file still appears on your computer, then you should completely scan your PC.
- But not every antivirus program will detect a virus in Contact, so you will have to look for an alternative. Another method for removing such viruses is to use a Live CD. This is an emergency system recovery disk with which you can clean your PC from malicious files and cure infected objects. You can download it on the Internet.
- There is another emergency system recovery disk called Kaspersky Rescue Disk. It will help you if a malicious program does not allow you to connect to Contact.
- First you should restart your computer, then set the boot priority in the BIOS. Insert a Live CD or press F8 on your keyboard while your computer is booting so that the system allows you to select the source from which the PC will boot.
- After the system boots, you need to get into its registry. To do this, click “Start” - “Run”. In the new window you need to type “regedit”. If you have Windows 7 installed, then when you click the “Start” button, this line will immediately appear.
- In the new window, select HKEY_USERS, then click on “File” - “Load hive” and go to the disk on which the operating system is installed.
- We use the HKEY_USERS registry key as an example. Another partition may also become infected with the virus. But the point of this method is to find registry entries that have changed and restore them.
- If the value parameters have a different form, they must be changed to the correct ones and saved.
- After this, you need to click “File” - “Unload hive” and restart the PC.
All of the above steps should help you eliminate the malware. Therefore, do not panic if you find a virus in VK that blocks you from entering your page, but simply perform this operation and you will be able to access Contact again.
