Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Friday, 22 March 2013

This website has been blocked for you! removal instructions

Posted on 10:07 by Unknown
This website has been blocked for you! - if your web browser is driving your crazy with this fake warning then your computer is certainly infected with a Windows Hosts file hijacker. After installing a few Trojan horses on my test machine I noticed this fake notification of possible spam bot activity. So, at least in my case, this infections was dropped by a Trojan horse. However, it could be that you got infected in completely different, though, very unlikely.

The fake notification says:

This website has been blocked because of your recent activity. Your actions have been marked as spam bot like, to visit this website again follow instructions on the left. This is made for security reasons. Please take your time to go through the verification process to restore you access to blocked websites, thank you for your time!

Click here to unblock



Once installed, a Trojan horse modifies Windows Hosts file by adding at least 300 new lines. All pointing to scammers' web server instead of Youtube, Google, Facebook, Paypal, Wikipedia and many others. It may even lock the file, so that you couldn't easily change these modifications. The modified Hosts file with newly added values may look like this:



As you can see, whenever you try to access some popular websites you will get this fake error message because your web browser loads content from scammers' web server instead of Google's, Amazon's, etc. Basically, it will block each website that were added to Windows Hosts file. The list may be slightly different of course.

This website has been blocked for you! scam message will ask you to verify that you are a human and not a computer by filling in the survey. DON'T! It will show you a survey where you have to enter your phone number and by completing the survey you automatically agree that you will pay $5 a week for a service you definitely do not need. I'm sure that there are even more expensive surveys, so please DO NOT fill any surveys!

Here's the bottom line, if you want to get rid of this annoying "This website has been blocked for you!" scam message, you must to recreate Windows Hosts file using Microsoft' Fix it tool (download link is given below) or edit it manually. Basically, you need to remove all these lines created by a Trojan. Finally, you MUST scan your computer with recommended anti-malware software to remove the culprit of this infection. If you won't the fake message may appear on your computer screen once again. To remove this malware from your computer, please follow the removal instructions below.

Do you have something to say about removing the This website has been blocked for you! scam message? Post your comment or question below. Good luck and be safe online!

Written by Michael Kaur, http://deletemalware.blogspot.com



This website has been blocked for you! removal instructions:

1. Download recommended anti-malware software and run a full system scan to remove this virus from your computer.





2. Reset Windows HOSTS file.

Go to: C:\WINDOWS\system32\drivers\etc.
Double-click "hosts" file to open it. Choose to open with Notepad or any other text editor.



The Windows hosts file should look the same as in the image below (Windows XP). There should be only one line:

127.0.0.1 localhost (Windows XP)

127.0.0.1 localhost ::1 (Windows Vista/7/8).

If there are more lines, then remove them and save changes. Read more about Windows Hosts file here: http://support.microsoft.com/kb/972034



Alternate method: to reset the Hosts file back to the default automatically, download and run Microsoft Fix it tool and follow the steps in the Fix it wizard.

3. Remove malicious extensions from your web browser.

Google Chrome:
1. Click on Chrome menu button. Go to Tools → Extensions.
2. Click on the trashcan icon and remove the extensions that might be causing the fake warning to show up. Basically, remove all extensions that you didn't install. It's perfectly OK to remove all extensions since by default Google Chrome comes without any extensions.

Mozilla Firefox:
1. Go to Tools → Add-ons.
2. Select Extensions. Remove all extensions that you didn't install. Please note, by default Firefox comes without any extensions.

Internet Explorer:
1. Go to Tools → Manage Add-ons. If you have the latest version, simply click on the Settings button.
2. Select Toolbars and Extensions. Remove all add-ons that you didn't install or you believe may cause those annoying pop-ups to show up.

4. Download CCleaner and tidy up your computer, remove temp files, etc.

5. If the problem persists, please read this web document and follow the steps carefully: http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Browser Hijackers | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • How to remove 'TidyNetwork' adware virus from your computer
    As internet users most of us have seen those irritating little pop-up windows that are advertising something that we normally have little or...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ▼  March (17)
      • False Positive: Ikarus and Comodo detecting TDSSKi...
      • Remove Price Peep (Uninstall Guide)
      • Remove Solid Savings (Uninstall Guide)
      • Identity Theft Protection – How to Stop Your Life ...
      • Remove PC Fix Speed and 24x7 Help (Uninstall Guide)
      • This website has been blocked for you! removal ins...
      • Remove Why do I see this page? virus - Attention R...
      • AVASoft Professional Antivirus Firewall Alert remo...
      • Remove Ukash virus
      • Remove Department of Justice virus
      • How to Remove AVASoft Professional Antivirus – AV...
      • Remove System message - Error Seek popup and relat...
      • Remove Chitka pop up ads, removal instructions
      • Remove Win 7 Security Cleaner Pro, removal instruc...
      • How to Remove 22find
      • How to Remove Disk Antivirus Professional (Uninsta...
      • Know the Enemy – Identifying & Removing the FBI Virus
    • ►  February (7)
    • ►  January (7)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile