Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Sunday, 19 May 2013

Remove "You shall not pass" virus (Uninstall Guide)

Posted on 11:35 by Unknown
This page contains removal instructions for the "You shall not pass" virus. Once you're infected with this virus you won't be able to access Google, Facebook, Tumblr and some other popular websites. When you go to any of these websites, the virus will show you a picture of Gandalf saying You shall not pass. OK, so at first I thought someone is just trolling since the virus doesn't ask you to complete a survey or pay a ransom to restore access to these websites. The virus simply modifies Windows Hosts file. Web browser then loads "You shall not pass" notification from remote web server controlled by cyber crooks instead of your requested website.


I got this virus after downloading free Minecraft account generator. I was looking for this virus, so I had to download and install it but you shouldn't download such shady software. As you can see, such software drops malware on your computer, so don't take the risk. What is more, "You shall not pass" virus notification maybe be a sign of a very dangerous infection. You shall not pass virus fix isn't very difficult but it's not the only problem you have. If you downloaded some free Minecraft software etc., there's a good chance you also got this really nasty infection called Backdoor:Win32/Fynloski.AA. Just a few minutes after I removed the virus, I saw unusual web traffic. This backdoor Trojan was downloaded addition RAT components that were probably necessary to gain access to the compromised system and hide its presence from a security solution. Cyber crooks simply wanted to turn my test machine into a zombie computer, part of a botnet or maybe they wanted so steal sensitive information. One way or another, that's a huge security threat. While Gandalf "You shall not pass" notification might be funny, the other malware that maybe be installed along with it, isn't fanny at all. To remove You shall not pass virus from your computer, please follow the removal guide below. And don't forget to scan your computer with recommend anti-malware software. As I said, the situation may be a lot worse than you think. If you have any questions or suggestions, please leave a comment below. Good luck and be safe online!

Written by Michael Kaur, http://deletemalware.blogspot.com



"You shall not pass" virus removal instructions:

1. Download recommended anti-malware software and run a full system scan to remove this virus and related malware from your computer.

2. Reset Windows HOSTS file.

a. Close your web browser.
b. Go to: C:\WINDOWS\system32\drivers\etc
c. Double-click "hosts" file to open it. Choose to open with Notepad or any other text editor.



The Windows hosts file should look the same as in the image below (Windows XP). There should be only one line:

127.0.0.1 localhost (Windows XP)

127.0.0.1 localhost ::1 (Windows Vista/7/8).

If there are more lines, then remove them and save changes. Read more about Windows Hosts file here: http://support.microsoft.com/kb/972034



If you can't reset Windows Hosts file manually then download and run Microsoft Fix it tool and follow the steps in the Fix it wizard. If you can't download it, then simply delete Hosts file.

3. Download CCleaner and tidy up your computer, remove temp files, etc.

4. If the problem persists, please read this web document and follow the steps carefully: http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Browser Hijackers | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • Facebook Security and Privacy Best Practices
    Facebook is the most popular social networking site. Nearly all of my friends have Facebook accounts. They log on to Facebook at least a cou...
  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Smartphone Security: Using Your Mobile Phone Safely
    Smartphone is like a little copy of your computer with lots of personal information: photos, text messages, access to e-mail account and oth...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Antispyis.com and other Antivirus Scan related domains
    New additions of misleading websites which promote a rogue security application called Antivirus Scan. antispyis.com afantispy.net softwaree...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Antivired.com and other Antivirus Monitor Related Domains
    Just a short note about several malicious domains related to the Antivirus Monitor fraud. This rogue anti-virus program reports non-existent...
  • WebCake Adware Removal Guide
    If you’re reading this it is very likely that your computer is infected with WebCake adware which displays extremely obnoxious and intrusiv...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ▼  May (25)
      • Protecting Against Rootkits with RKhunter (Rootkit...
      • System Doctor 2014 Virus Removal Guide
      • Remove oyodomo.com pop ups and redirects (Uninstal...
      • Remove The United States Courts Virus (Uninstall G...
      • Remove "Internet Security 2014" Malware (Uninstall...
      • What is BCHelper.exe and how to remove it?
      • File "contained a virus and was deleted" removal, ...
      • Remove kaq.pagerte.net pop-up ads, removal instruc...
      • What is DefaultTabSearch.exe and how to remove it?
      • Skype virus: "this is a very nice photo of you" re...
      • BrowserProtect.exe: What you need to know, how to ...
      • Remove dnsbasic.com (Uninstall Guide)
      • What is cltmng.exe and how to remove it?
      • Remove Trojan.Zeroaccess!inf4 (Uninstall Guide)
      • What is ibsvc.exe and how to remove it?
      • RCMP Ukash virus, help on how to remove
      • Remove "You shall not pass" virus (Uninstall Guide)
      • SnapDo.exe - Process Information
      • Remove ad.xtendmedia pop-up "virus", removal instr...
      • Remove VisualBee, removal instructions
      • Remove Mysearchdial, removal instructions
      • YontooDesktop.exe - Application Error - What is it?
      • How to remove Chatzum, removal instructions
      • Remove Tuvaro, removal instructions
      • Remove Win32:Malware-gen, removal instructions
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ►  January (7)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile