As today people just do not try to make money, and even more, forgetting that human that the Lord has put in us. It is simply surprising how much people lose by deceiving and robbing others. After all, the Law of our world, which says: "What a man sows, so he will reap" has not yet been canceled. And after a while the questions arise: "For what?".
In this article, dear readers, I will tell you about one of the fraudulent actions aimed at robbing your pockets - when a computer is attacked by a virus released by "smart" people that blocks Windows OS, and it does not matter what version of your operating system is XP, 7, 8, 10 or others. Surely you know what I mean, don't you, at least I think that many of you have faced such a nuisance? Yes yes i say about ransomware banner, which appears immediately after turning on the computer and blocks Windows. This banner may say that you have watched some forbidden video, and now you need to urgently send money to someone, for example via Webmoney, and receive an SMS in return with the operating system unlock code.
Do not even try to pay anything to anyone, tk. no SMS with the unlock code will be sent to you. Let the Lord understands these intruders better, and in the meantime I will try to help you unlock your computer.
1. Banner Ransomware virus can get on your computer along with free programs or games downloaded from questionable sources.
2. If you download photos, music, videos, etc. from the Internet, and these files have the extension.exe (filename.exe), instead of the corresponding .jpg, .mp3, .avi, .mkv (filename .jpg).
3. If on some sites you see a banner that says that you need to update or reinstall something, and by clicking on which you go not to the official sites of your programs, but to their clones.
4. If an antivirus is not installed on the computer / laptop, then the virus can penetrate the computer simply from the pages of various sites.
Unblock Windows i.e. You can remove the ransomware banner, due to which the computer is locked, in the following ways:
1. Reinstall Windows.
2. Clean up the Windows registry, i.e. remove the banner from the system startup.
3. Using a boot disk with special anti-virus software (programs) to remove viruses from the system.
In today's post we will talk about the second method - remove the ransomware banner from the operating system startup.
As complicated as it sounds, it's actually simple. Just follow the instructions below and be careful.
1. We go into the safe mode of operation of Windows. To do this, after turning on the PC, while loading the operating system, press the key "F8"... A black screen should appear where you can select your system boot options. Choose "Safe mode".
2. When Windows boots up, press the keyboard shortcut "Win + R"... Or "Start - Run".
3. In the window that appears, enter: regedit
Important! If the ransomware banner also appears in "Safe Mode", then restart your PC again and through "F8", select "Safe Mode with Command Prompt" from the menu. When the PC boots up and a black screen with a blinking cursor appears, type also "regedit" and press "Enter". The same registry window will appear.
4. Go to the address: HKEY_LOCAL_MACHINE \ Software \ Microsoft \ WinNT \ CurrentVersion \ Winlogon, and check that the following values have the following settings:
Shell- on the contrary there should be only "explorer.exe".
Userinit- opposite should only be "C: \ Windows \ system32 \ userinit.exe,". If Windows is not installed on the C: drive, then the letter will be different here.
If the values are different, then correct it so that it turns out as I wrote above. To do this, right-click on the line in which you want to change the value, and select "Change".
5. Go to the address: HKEY_CURRENT_USER \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon. Make sure that there are no "Shell" and "Userinit" entries here. If so, delete them.
6. Check the following addresses for suspicious entries, such as - fgkthsinlr.exe to be removed:
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunOnce
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ RunOnce
If you are not sure that the entry that you found is a virus, then right-click on it and select "Change". Set the value to "1". This way, you disable this recording, and if something goes wrong, you can fix it.
7. Restart your computer and rejoice! Windows should already be unlocked.
If it was difficult for you to figure out how to unlock your computer by cleaning the Windows registry, then you can try using special anti-virus utilities (programs), with which you can do this in just a few clicks.
— AntiWinLocker LiveCD http://www.antiwinlocker.ru/download.html
— Kaspersky Rescue Disk: You can download this link: http://sms.kaspersky.com/
— Dr.Web LiveDisk http://www.freedrweb.com/livedisk/
- utility AVZ... You can download this link: http://www.z-oleg.com/secur/avz/download.php
Basically, the procedure for unlocking a computer using utilities boils down to writing their images to a flash drive (USB drive), enable booting the computer from USB, and in the pop-up windows, just click "Start", "Anti SMS", "Clear", etc. ...
I will write more about these programs later, but that's all for today. If something didn't work out for you, write in the comments, we'll try to figure it out together.
Sometimes a situation arises when the computer is locked, and the user cannot find the password for the account. This state of affairs is rare, but memory is unpredictable, and the operating system cannot tell us directly (except for a user prompt, if one was created in advance).
Naturally, to enter the system, you will need to reset or change the account password, since it is not possible to remember! For the description, let's take the average case when actions are not impeded by other reasons, and the standard Windows installation favors a successful outcome.
Or just "accounting", quite a useful thing, but having forgotten or lost the coveted combination, it is impossible to enter the system, both for outsiders and for you personally. Well, if no changes were made to the accounts, then it will take a few minutes to restore the login.
Note! If your profile is the only account, then the above actions will be powerless. But there is always another solution, for example, try it, this method was discussed earlier and will require a Windows boot disk.
Surely, every fourth user of a personal computer has encountered various fraudulent activities on the Internet. One of the types of deception is a banner that blocks Windows and requires you to send SMS to a paid number or requires cryptocurrency. In fact, it is just a virus.
To fight a ransomware banner, you need to understand what it is and how it gets into your computer. Usually a banner looks like this:
But there may be all sorts of other variations, but the essence is the same - the crooks want to make money on you.
The first variant of "infection" is pirated applications, utilities, games. Of course, Internet users are accustomed to getting most of what they want on the network "for free", but when downloading pirated software, games, various activators and other things from suspicious sites, we run the risk of getting infected with viruses. In this situation, it usually helps.
Windows may be blocked due to a downloaded file with the extension " .exe". This does not mean that you need to refuse to download files with this extension. Just remember that “ .exe"Can only apply to games and programs. If you download a video, song, document or picture, and its name contains ".exe" at the end, then the chance of the ransomware banner appearing sharply increases to 99.999%!
There is also a tricky move with, allegedly, the need to update the Flash player or browser. It may be that you will work on the Internet, go from page to page and one day you will find the inscription that "your Flash player is outdated, please update." If you click on this banner and it does not lead you to the official website adobe.com, then it is 100% virus. Therefore, check before clicking on the "Update" button. The best option would be to ignore such messages altogether.
Last but not least, outdated Windows updates weaken the protection of the system. To keep your computer protected, try to install updates on time. This function can be configured in Control Panels -> Windows Update to automatic mode so as not to be distracted.
One of the simplest options to remove ransomware banner is. It helps 100%, but it makes sense to reinstall Windows when you do not have important data on the "C" drive that you did not have time to save. When you reinstall the system, all files will be deleted from the system disk. Therefore, if you have no desire to reinstall software and games, then you can use other methods.
After disinfection and successful launch of the system without the ransomware banner, you need to take additional steps, otherwise the virus may emerge again, or there will simply be some problems with the system. All this is at the end of the article. All information is verified by me personally! So, let's begin!
We will use a specially designed operating system. The whole difficulty is that on a working computer you need to download an image and or (scroll through the articles, there is).
When it's ready, you need it. At the time of launch, a small message will appear, such as "Press any key to boot from CD or DVD". Here you need to press any button on the keyboard, otherwise the infected Windows will start.
When loading, press any button, then select the language - "Russian", accept the license agreement using the "1" button and use the launch mode - "Graphic". After launching the operating system of Kaspersky, do not pay attention to the automatically launched scanner, but go to the "Start" menu and launch "Terminal"
A black window will open, where we write the command:
windowsunlocker
A small menu will open:
Select "Unblock Windows" with the "1" button. The program will check and fix everything itself. Now you can close the window and check, with the already running scanner, the entire computer. In the window, put a check mark on the disk with Windows OS and click "Run object scan"
We are waiting for the end of the check (it may be a long time) and, finally, we reboot.
If you have a laptop without a mouse, and the touchpad does not work, then I suggest using the text mode of the Kaspersky disk. In this case, after starting the operating system, you must first close the menu that opens with the "F10" button, then enter the same command in the command line: windowsunlocker
Today, viruses like Winlocker have grown wiser and block, so most likely you will not succeed, but if there is no image, then try it. Viruses are different and all can work in different ways, but the principle is the same.
We reboot the computer. During boot, you need to press the F8 key until the Windows Advanced Startup Options menu appears. We need to use the "down" arrows to select from the list an item called "Safe Mode with Command Line Support".
This is where we need to go and select the required line:
Further, if all goes well, the computer will boot up and we will see the desktop. Excellent! But this does not mean that everything works now. If you don't remove the virus and just reboot in normal mode, the banner will pop up again!
It is necessary to restore the system when there was no blocker banner yet. Read the article carefully and do everything that is written there. There is a video under the article.
If it doesn't help, then press the "Win + R" buttons and write the command in the window to open the registry editor:
regedit
If, instead of the desktop, a black command line is launched, then simply enter the "regedit" command and press "Enter". We have to check some registry keys for virus programs, or to be more precise, for malicious code. To start this operation, follow this path:
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ WinNT \ CurrentVersion \ Winlogon
Now, in order, we check the following values:
If the OS is installed on a different drive than C :, then the letter there will be different accordingly. To change the wrong values, right-click on the line you want to edit and select "change":
Then we check:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon
There shouldn't be any Shell and Userinit keys here at all, if there are, we delete them.
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunOnce
And also be sure:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ RunOnce
If you are not sure whether it is necessary to delete the key, you can simply add one “1” to the parameter first. The path will fail, and this program simply won't start. Then it will be possible to return it as it was.
Now you need to run the built-in system cleaning utility, we do it in the same way as we started the registry editor "regedit", but write:
cleanmgr
We select the disk with the operating system (by default C :) and after scanning we mark all the checkboxes, except for "Files of the backup copy of the service pack"
And we press "OK". By this action, we may have disabled the autostart of the virus, and then we need to clean up the traces of its presence in the system, and read about this at the end of the article.
It lies in the fact that in safe mode we will run the well-known antivirus utility AVZ. In addition to scanning for viruses, the program has just a lot of functions for correcting system problems. This method repeats the steps to patch up holes in the system after the virus, incl. to get acquainted with it, go to the next item.
Congratulations! If you are reading this, then the system started without a banner. Now you need to check the whole system with them. If you used the Kaspersky rescue disk and checked it there, then you can skip this item.
There may also be another nuisance associated with the villain's activities - a virus can encrypt your files. And even after removing it completely, you simply won't be able to use your files. To decrypt them, you need to use programs from the Kaspersky website: XoristDecryptor and RectorDecryptor. There is also an instruction for use.
But that's not all, because the winlocker most likely messed with the system, and various glitches and problems will be observed. For example, Registry Editor and Task Manager will not start. To treat the system, we will use the AVZ program.
When downloading using Google Chrome, there may be a problem, because this browser considers the program to be malicious and will not let you download it! This issue has already been raised on the official Google forum, and at the time of this writing, everything already ok.
To still download the archive with the program, you need to go to "Downloads" and there click "Download malicious file" 🙂 Yes, I understand that it looks a little silly, but apparently chrome thinks that the program can harm an ordinary user. And it's true if you poke there wherever you hit! Therefore, we strictly follow the instructions!
We unpack the archive with the program, write it to external media and run it on the infected computer. Go to the menu "File -> System Restore", mark the checkboxes as in the picture and perform the operations:
Now we go along the following path: "File -> Troubleshooting Wizard", then go to "System problems -> All problems" and click on the "Start" button. The program will scan the system, and then in the window that appears, set all the checkboxes except "Disable operating system updates in automatic mode" and those that begin with the phrase "Allowed autorun from ...".
We click on the button "Fix the marked problems". After successful completion, go to: "Browser settings and tweaks -> All problems", here we set all the checkboxes and in the same way click on the "Fix the marked problems" button.
We do the same with "Privacy", but here do not check the boxes that are responsible for cleaning bookmarks in browsers and what else you think you need. We finish checking in the sections "Cleaning the system" and "Adware / Toolbar / Browser Hijacker Removal".
Finally, close the window without leaving AVZ. In the program we find "Tools -> Explorer Extension Editor" and remove the check marks from those items that are marked in black. Now go to: "Tools -> Internet Explorer Extension Manager" and completely erase all lines in the window that appears.
Above, I have already said that this section of the article is also one of the ways to treat Windows from the ransomware banner. So, in this case, you need to download the program on a working computer and then write it to a USB flash drive or disk. We carry out all actions in a safe mode. But there is another option to launch AVZ, even if Safe Mode does not work. You need to start from the same menu when the system boots, in the "Troubleshoot computer" mode
If you have it installed, it will be displayed at the very top of the menu. If it is not there, then try to start Windows before the banner appears and turn off the computer from the outlet. Then turn it on - a new startup mode may be offered.
Another surefire way is to boot from any Windows 7-10 installation disk and select there not "Installation", but "System Restore"... When the troubleshooter is running:
Refers to cases when, for some reason, you cannot boot from a USB flash drive with a recorded image of Kaspersky or the AVZ program. You just have to get the hard drive out of the computer and connect it with the second drive to the working computer. Then boot from an NON-INFECTED hard disk and scan YOUR disk with a Kaspersky scanner.
Never send SMS messages requested by scammers. Whatever the text, don't send messages! Try to avoid suspicious sites and files, and generally read. Follow the instructions and then your computer will be safe. And don't forget about antivirus and regular operating system updates!
Here is a video where everything can be seen with an example. The playlist consists of three lessons:
PS: which way helped you? Write about it in the comments below.
Surely, you have heard, and maybe even got into a situation when after downloading a file or visiting a dubious site on the Internet.
The PC suddenly became uncontrollable and a banner appeared with the requirement to enter a code in order to unlock the computer, which can be obtained by sending an SMS or replenishing the account of the specified phone for a certain amount.
What to do in this case? To obey the extortionists or is there still a chance to somehow unlock the computer without SMS? Let's take a look at several options for our actions in order not to become a "cash cow" for swindlers.
After all, after replenishing the account, they will already know your phone and most likely will be able to log in to your mobile operator. This means that it will not be difficult for them to withdraw money from your phone. But let's not despair and first try to cope with the problem on our own. So how?
This is one of the simplest methods. Who knows, maybe the scammers are not that smart and are just bluffing? So, we call the task manager and remove the task performed by our browser. To do this, press simultaneously the Ctrl + Alt + Del keys (of course, do not press the plus signs). Then, in the window that opens, click "Start Dispatcher":
This window may look different depending on the operating system, but I hope the essence is clear. Next comes the task manager. This is where we have to remove the task of our browser. Click on the line with the browser and then on the "End task" button:
By the way, this method is applicable to both this and any other task. To close a frozen program, for example. I must say, it is not always possible to do this on the first try, sometimes the Task Manager window blinks and disappears again.
In such cases, it happens that repeated pressing helps. Ctrl + Alt + Del and repeated, and up to 10 times in a row! It probably doesn't make sense anymore. It turned out - good. No - let's move on.
Now we are trying the next option - more difficult. Place the cursor in the code entry field, press Ctrl + Alt + Del and carefully look at the banner.
He, of course, will not necessarily be the same as mine, but the offer to send an SMS or replenish the number and the line for entering the code or password must be present. If, as a result of our actions, the cursor disappeared, then the attention of the keyboard switched to the task manager:
Now you can press Tab, and then Enter, and an empty desktop should open in front of you, most likely, even without "Start". If this happened, now in order to “unblock our prisoner” you need to go to the registry, since viruses are usually registered there.
Push Ctrl + Alt + Del. Then “Start Task Manager”. In a new window that appears - "File", then in the drop-down menu "New task (Run ...)":
In the next one we write the command “regedit” and then click “OK”:
The "Run" command can be called and easier if, of course, it works - by pressing the Win + R buttons on the keyboard. Who does not know, Win is a key with a Windows picture, usually at the bottom at the left end of the keyboard.
If everything worked out, we will find ourselves in the registry editor. Here, be very careful and careful. Don't touch anything superfluous. Because wrong actions can lead to unpleasant, and sometimes unpredictable consequences in the computer.
So we need to get here: HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Winlogon... I will show you two windows to make it clear where and what to press to implement this venture.
In the first window, find the line labeled “HKEY_LOCAL_MACHINE” and click on the triangle to the left of it:
The list under this line will expand. There you need to find the line “SOFTWARE” and also click on the triangle:
Do not be alarmed by the lists there are very large, do not forget about the lower slider - move it to see the inscriptions in full.
When you get to Winlogon in this way, click not on the triangle on the left, but on the word “Winlogon” itself. Then move your gaze to the right panel, where you will need to check the parameters: “Shell” and “Userinit” (If it is hard to see, click on the picture - it will increase):
We look at the Shell parameter - its value is only "explorer.exe". Userinit "should look like this:" C: \ WINDOW \ Ssystem32 \ userinit.exe, ".
Note that there is a comma at the end after the “exe”! If there are any other values, then we correct them to the ones indicated above. To do this, just click on "Shell" or "Userinit" with the right mouse button, click "Change", write the desired value in the pop-up window.
This, I think, will not cause you any particular difficulty.
In some cases, it happens that these parameters are in order. Then we find the following section: HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Image File Execution Options and deploy it. If there is a subsection explorer.exe, delete it without regret. Well, we did everything to unblock our “prisoner”.
Now you can restart your computer. Unless the virus is more insidious, everything should be back in place. If so, then we can laugh at the grief - SMS - extortionists. And of course, after all the work done, be sure to perform a full scan with an antivirus program. Yes, and a cleaner before that does not hurt to walk - like CCleaner.
If all else fails or you do not dare to do the steps described above, contact a specialist. But don't send SMS anyway. You can also familiarize yourself with other methods of unblocking from Trojan Winlock Virus on the VirusStop website or on the Kaspersky website.
That's all. Now you know how to unlock your computer without SMS. But it would be better if you never needed to do this, at least on your computer.
Any user of a personal computer will not hurt to know how to unlock a computer if he has forgotten access passwords.
No special knowledge is required. After completing a simple algorithm of actions, in a few minutes you will be able to work on your PC.
The password is required to protect private information from unauthorized persons. It does not allow you to log in by simply turning it on. However, if the code is lost or the system has been updated, then access to the data becomes impossible. Operation is different for each version of Windows.
The Windows 7 operating system is the most popular among the rest. It is very easy to use. And the process of gaining access to your account is pretty simple too.
But if the user is unable to log in to his account, then a series of steps should be taken as follows:
The G8 is just gaining its popularity. First, it is important to make sure that the computer is connected to the network, and it is not recommended to unplug the plug from the outlet during the whole process.
To resume working on it with a lost password, you need to do the following.
A flash drive will help you quickly access your computer. The main thing is to pre-write the file to the memory card and do several tasks:
Then you can log in with the new password.
To have such a USB flash drive at hand, you need:
A flash card isn't the only way to fix problems. The file can be copied to your hard drive.
It is important to be especially careful when performing these steps.
By following these instructions, it is easy to achieve the desired result.
Today we will learn how to remove the lock from the Windows operating system.
One of the frequent problems of PC owners is the infection of their equipment with various kinds of viruses.
Today we will be working with a ransomware virus.
This virus blocks Windows for financial gain.
1. The result of the activity of this virus is the appearance of a dialog box, which informs us that Windows is blocked due to illegal actions of the owner of the PC on the Internet.
Attackers indicate the mobile operator number, mobile phone number and the amount, by paying which, you supposedly receive a "magic" code that will unlock your operating system.
Most importantly, DO NOT SEND MONEY into the hands of scammers. They cannot take possession, let alone delete, existing files.
Now we will tell you how to remove the lock in order to gain access to the OP and data stored on the PC.
We will perform this procedure without formatting and reinstalling Windows.
2. So, let's get started, you turned on the PC and the lock window immediately appeared.
The movement of the mouse cursor is limited to the code input area.
Accordingly, the cursor is completely useless.
We will act with hot keys.
Press ctrl + alt + delete.
The system exits to the menu, but the cursor is again completely useless.
3. From the five menu items, select log out.
We are logged out, the mouse arrow now moves across the entire area of the screen.
4. Now our task is to create a new account.
We reboot the PC and press the F8 key when the system boots.
We are now offered download options.
We choose safe mode with command line support.
5. Now we need to access the control panel to create a new account.
The system has booted and the command line is available to us.
In the window, type Control Panel and press the Enter key.
6. Now the control panel is available to us.
7. Create a new account with administrator rights and call it Admin.
Of course, by creating a new account, we do not solve the problem of locking the PC, we just get an alternative access to the system.
Reboot the PC, also using the F8 key.
We boot the PC as usual.
8. There are now two accounts in the dialog box, we log in using the Admin account.
9. We got access to the operating system, files.
Now we need to install a free antivirus program (we install Avast), which will detect infected files and safely cure them.
10. We also download the CCleaner program, it will remove garbage from the PC and bring a trivial order.
Launch and install the downloaded antivirus program and the CCleaner program.
We check the laptop and cure it of infected files.
After that, we will restart the laptop, log into the first account.
And we can delete the Admin account, it will no longer be useful to you.
For other ways to cure your PC from ransomware viruses, see the following videos.
You will receive more detailed instructions in the video instructions below:
Sometimes a situation arises when the computer is locked, and the user cannot find the password for the account. This state of affairs is rare, but memory is unpredictable, and the operating system cannot tell us directly (except for a user prompt, if one was created in advance).
Naturally, to enter the system, you will need to reset or change the account password, since it is not possible to remember! For the description, let's take the average case when actions are not impeded by other reasons, and the standard Windows installation favors a successful outcome.
Or just "accounting", quite a useful thing, but having forgotten or lost the coveted combination, it is impossible to enter the system, both for outsiders and for you personally. Well, if no changes were made to the accounts, then it will take a few minutes to restore the login.
Note! If your profile is the only account, then the above actions will be powerless. But there is always another solution, for example, try it, this method was discussed earlier and will require a Windows boot disk.
As you understand, a trivial case will require a minimum investment of time, but there is a way out for solving non-standard situations. So don't go to extremes and try to avoid making changes to the accounts section.
Quite often, the user is faced with the problem of freezing and stopping the computer from viruses? In order to unlock your computer from a virus, you need to send an SMS message with the text XXX to the UUU number.
Since 2009, such messages have increasingly persecuted Russian Internet users. As a result, many are thinking about how to unlock a computer without SMS and is it real?
How can such viruses infect a computer? The computer becomes infected with an SMS virus via the global Internet and, in most cases, through the fault of the users themselves. Basically, computer infection occurs under the guise of installing certain software or opening a picture. For example, the attacker's website has a video that can be viewed by downloading codecs from this website. After launching the codec, the computer is infected. As a result, once it gets to the user's computer, the SMS virus blocks it and displays the following types of messages:
The Windows operating system is locked. In order to remove the blocking, you need to send an SMS with the text XXX to the UUU number;
Send a message to the UUU number with the text XXX, otherwise Windows will be deleted;
To restore the correct functioning of the computer, send a message to the UUU number with the text XXX.
Finally, the virus asks to send a message to a short paid number. The cost of such a message can be very different, usually the size varies from 10 to 200 rubles. However, you shouldn't trust the intruder. In reality, a person will give a much larger amount for a message than is indicated on the screen. Here are the most common short numbers to which an attacker asks to send a message: 1350, 3649, 4460, 9691, 9800, and many others.
Since November 2009, new versions of SMS viruses have appeared on the Internet almost every day. The most interesting thing is that even those users who have any types of antiviruses with fresh update databases on their computers cannot resist such viruses: Kaspersky Anti-Virus, Dr.Web, Avast, Nod32 and others. Still, how do you unlock your computer? Only special services for unlocking your computer, which are updated every day, can help in these situations. Despite the fact that SMS viruses are so widespread, the epidemic is becoming localized. In other words, in America, China or other European countries, users are not aware of this problem. The main reason is that any person in our country can buy short SMS numbers. Why are short-haul operators not doing anything against ransomware? According to these people, they have absolutely no control over the final collectors of SMS bribes. Operators sell such a service as a "short number" through affiliated structures, and are not responsible for anything else.
For SMS virus, it is not enough to simply block the Windows operating system. He also needs to get frightened users to send a message to a certain short number, and in this case, a variety of methods are used.
The first method is the most "arrogant". The user is informed directly that his computer is infected with a virus. For maximum effect, the creator of the virus starts a countdown timer, giving the person only a certain amount of time to think, that is, creating some pressure. You can unblock a personal computer while removing a virus by sending a message somewhere in the air. The method is the most straightforward.
Most likely, the first method of extorting money is not profitable enough, so the attacker is actively using a creative approach. Another method of extortion is already putting pressure on the computer user's guilt. That is, a person does not feel like a victim of the situation, but he himself is to blame for his theft. Such a virus can scare the user with the following message content: “Your operating system is locked because you are using unlicensed software on your computer” or “An unlicensed version of Windows is installed on this computer. The computer is locked. In order to unlock the computer, you should send an SMS to a specific number. " For greater effect, there is a message at the bottom of the screen that the computer is locked on the initiative of Microsoft.
Of course, an experienced computer user is unlikely to believe that a pirated version of Windows can be unlocked for 150 rubles, while a licensed version costs 100 dollars. However, what should novice users do? These people generally choose the easier way, that is, they pay for an SMS message. Sometimes the message indicates that it is possible to unlock the computer through the terminal.
So how do you unlock your computer without paying? Today, you can remove an SMS virus very quickly. For example, you can completely rewrite the text of the enemy message with the number to which it should be sent. The next step is to enter the Internet with the help of a friend's computer, namely to a special Kaspersky service and get an unlock code from them. By the way, unlocking is absolutely free. How else to unlock the computer from the banner? You can ask a friend over the phone to log into the Kaspersky service and send you a code that you enter directly on your computer. This method will take no more than five minutes.
What are free services for unlocking computers from viruses? The most common service is Kaspersky Anti-Virus. You need to enter the following page: http://support.kaspersky.com/viruses/deblocker. Then you should enter the phone number that is indicated in the enemy message and the text of the message itself. Then you need to click "Get the unlock code" and get the code itself.
If you fail with the Kaspersky service, you can always use the free Dr.Web service. Here, in the same way, you need to go to a specific wanderer of the site: http://www.drweb.com/unlocker/index and decide which unlock mechanism to use. In total, Dr.Web offers three different methods for unlocking your computer.
It should be remembered that no matter how fast viruses spread, the main protection against them is the installation of antivirus. If the computer does not have an antivirus, then there is always a threat of infection. Now you don't have to buy an antivirus, there are tons of free antiviruses that you can download absolutely free of charge.
Now there are a huge number of blocking banners, some of which virus computer blocked top up MTS account... Plus, new types of computer blocking appear every day, the damage from them is estimated in the millions. Most of the modifications have become more difficult to deactivate and do not contain the correct PC unlock code at all.
The computer is blocked by a virus, what to do? Unfortunately, none of us is 100% safe from this. Such a curiosity often happens not only for you, it can happen to anyone. The situation is not pleasant when the window appears your computer is blocked for viewing or copying video materials containing scenes of pedophilia and violence... And in case of not paying a fine of 1000, 2000 rubles, or even more, all data will be deleted.
Virus blue screen computer blocked for watching porn is not displayed in the background, is not removed by antivirus, and loading in safe mode does not give results. Because of blocked the computer, asked to send an SMS, many programs do not start - nothing can be done except how to enter the code to pay the fine, but for this you need to send an SMS or replenish the account of Beeline, MTS.
For maximum convenience, hackers describe in more detail the scheme for paying the fine to get the computer unlock code on the splash screen. The amount of the fine is sometimes very different, SMS messages for unlocking have significantly risen in price up to 3000 rubles. At one time it was money transfer via WebMoney or Yandex Money... Where, having filled in the current account indicated on the screen, you had to go to the nearest terminal and transfer money to the scammers from your card, and now the scammers have a softer scheme - this is top up mobile phone numbers in. However, even after such an operation, there is no guarantee that the numbed computer will be unlocked. As a result, a frustrated user has no choice but to contact a computer service and call a computer wizard at home.
If a locked computer was unblocked thanks to an SMS payment, then you are very lucky, as a rule, this does not lead to the desired effect. DO NOT TRANSFER MONEY TO VIRUS DEVELOPERS: THE SERVICES THAT THEY OFFER ARE 99% FRAUD.
As soon as the locked computer MTS number starts to turn on, press the key with a frequency of two presses per second. Select the boot option we need, namely [Safe Mode].
After that, the computer starts downloading only the basic drivers necessary to start the operating system, it does not download anything more superfluous, so the download can go through and without turning on the banner the computer is locked send an SMS. Choose your account or administrator. A window pops up where Windows offers to enable system restore immediately. To enable, click - [No], and the restoration of the earlier state of the computer will start automatically. Click [Next>]. If, for some reason, the recovery did not start, you can start it using: [Start] -> [All Programs] -> [Accessories] -> [System Tools] -> [System Restore]. You need to select the day when the system made a copy of itself, usually this day is in bold.
When the day is selected, you also need to select a restore point in the list, so click - [System checkpoint]. Click [Next>]. We confirm the choice of the control point by clicking [Next>]. It turns out that the computer boots the OS in the configuration it was a few days ago before the banner hit it and blocked the computer. Consequently, the OS should start without a banner, although the computer virus itself is blocked by the beeline may be present on the PC.
If you succeed in this option and after the work done, the computer will turn on normally, that is, without a banner. Then you just need to immediately launch the antivirus, update it and check the entire system completely.
HERE IS AN IMPORTANT NUANCE: some banners can be obtained through a browser window - an Internet browser. Therefore, when you turn on the PC after the update, if your favorite browser prompts you to update the session, then in no case restore the session. There are viruses, after which it is necessary to unblock sites on the computer.
To enter BIOS Setup, use the method that your computer assumes. Usually the keys are (for laptops) and (for stationary PCs). But there are exceptions, for some motherboards there may be keys:, as well as a key combination:,. For Samsung laptop models, usually. As soon as you entered the BIOS, you should go to the tab that interests us exactly.
On the start page, the first to be shown: System Time(system time) and System Data(system date). To navigate the BIOS, use the cursor keys. If you look at the bottom of the screen, you will see a small hint indicating which keys you can use. So, in the menu, by placing the cursor in the desired position using the [+/-] keys, we change the system date, for example, a month ago (you can try a month ahead). In general, you need to select a date before the inscription appears computer locked 1000 rubles. We exit the BIOS, having previously saved the changes made by pressing the button. If the key does not work, go to the tab, select the position, highlight and confirm the exit by pressing the key. The computer restarts automatically, the blocked PC banner should disappear.
If this method does not work, then your computer is blocked with a new modification of the virus. Try the unlock code from the banner using the computer unlock services Kaspersky, Doctor Web and NOD32. And the method of how to unblock VKontakte on a computer is described.
Any user of a personal computer will not hurt to know how to unlock a computer if he has forgotten access passwords. No special knowledge is required. Having followed a simple algorithm of actions, already ...
Any user of a personal computer will not hurt to know how to unlock a computer if he has forgotten access passwords. No special knowledge is required. Having followed a simple algorithm of actions, already ...
