The Internet is large, and there is a lot of bad, however, like good. One of the most unpleasant phenomena is all kinds of viruses. If you are "lucky" to pick up something serious, then considerable problems can arise: up to the loss of important personal information, as well as system data and the fall of the OS. This time, one of the "geniuses of computer parasitism" invented and launched a virus blocking social networks on the World Wide Web. How does it work and is there a “cure” for it? We will try to describe this in detail in this article.
Unexpected turn
It manifests itself very curiously. When you try to enter your account, the user receives a message with the following meaning: "Your page was hacked and spam is sent from it." At the same time, to unlock, you need to enter your mobile number for SMS activation or, even more interesting, pay for access to your social account. network. VKontakte, Odnoklassniki, Facebook and some other resources have already fully experienced the fun of this virus.
Description of the virus program
In fact, there was probably no hacking. The fact is that a virus blocking social networks only mimics the addresses of these sites, redirecting users from real resources to web pages with the corresponding warning message.
It should be noted that the Trojan works very cunningly, or rather, cunningly. A program created by attackers intercepts the DNS signal in popular browsers and gives an answer in the form of an incorrect IP address of the resource. Thus, trying to go to your page in the social. network, the user ends up in a completely different place. But at the same time he sees the correct URL in the address bar . Surprisingly, the virus blocking social networks also blocks access to most of the websites of anti-virus companies. In addition, many cannot even access the Microsoft server. In general, the functionality of this trojan is still the same.
How does the virus "work"?
The Trojan program runs on the infected computer and hides its copy, encrypted as a file with an arbitrary extension and name, in one of the system folders. Then it disables the protection of the Windows OS and performs a number of other actions (modifies the dll library, drivers, etc.) in order to increase its privileges in your operating system.
Fight method
In general, the virus is very smart. But are there any means against him? Is it possible to remove the virus "In Contact", "Classmates" and other resources on their own?
Yes, you can do something. Here is an instruction on the actions to be taken.
- In the Windows system folder (drive C) we find the driver package and open the Hosts file using notepad.
- You will see the text contained in the file. Scroll to the bottom. His last line should end with the word "localhost". Delete all entries below it (they may contain references to social networks known to us).
- Now restart your computer and scan the C drive with antivirus.
That's all, the virus blocking social networks is defeated. Now try again logging into your account: the page should open correctly, and all the data on it will be in the state in which it was before the “attack” of the cunning “social” parasite.