The virus blocks antivirus sites: what to do?

There are viruses almost harmless and invisible, which for the time being (or rather, until a complete serious check) can not even be detected. But there are really dangerous. The latter can seriously affect both the operation of the computer in general, and the performance of its individual functions. Such malicious programs include those that block access to the Internet or to certain utilities.

It happens that an insidious virus blocks antivirus sites so that the user can not seek help and eliminate the threat. Also because of it, the automatic update program stops working at the same time. In many cases, even manually updating the anti-virus program does not work. At the same time, it is possible to access other sites without difficulty, as before.

What to do if the virus blocks sites? The solution to the problem will be to "cure" the computer of this malicious program. Due to the specific nature of the virus, this task is greatly complicated. The database of the installed antivirus program may simply not contain information about this pest, and it is unlikely to be updated in the usual way. As it does not work out and download another anti-virus program from the Internet.

The virus blocks antivirus sites: what is the danger?

The problem is that at the moment when the user wonders and finds a problem, the virus already has time to make negative changes in the system. It even happens that the malicious program has already been eliminated, and its action has not stopped. After all, the changes that she made in the system, no one canceled. Therefore, all restrictions on sites continue to operate until the owner of the computer returns the settings to their original state.

How does the virus block search engine sites?

The most common reason that a virus blocks websites is by changing the hosts file. It is responsible for mapping node names to IP addresses. Each time you enter a search query, the computer refers to that file. And already based on the information indicated in it, it connects or does not connect to the specified site. Thus, the hosts file is a kind of Achilles heel. Any changes in this file are fraught with problems and broken connections. That's why it is aimed at the insidious virus that blocks sites.

The main purpose of such an intervention, of course, is the difficulty of getting rid of the computer from a malicious program. This is a very common behavior. The entry, through which the virus blocks sites, can look different. For example, as 388.113.44.1 yandex.ru for Yandex - search engines. This is enough to prevent the computer from connecting to the site: it will erroneously go to the specified wrong address.

Troubleshoot problems manually

In order to correct the consequences of malicious interference, as well as to prevent this, several tricks can be used. First, find the hosts file. It is located in the Windows system folder, the full path to which usually looks like C: \ WINDOWS \ system32 \ drivers \ etc. The last folder contains the desired file, whose properties should be slightly changed. Right-click on it and open the corresponding item and deselect the "Read-only" attribute. In some cases, there is no tick, then you can proceed to the next step.

After the changes made, the file needs to be opened in notepad or similar program. The simplest and most universal option is to delete all records except one single: 127.0.0.1 localhost. Also, you can view the contents of the file more attentively and delete only the entries about the addresses of those sites that were blocked. It is important not to forget to save the changes made and return the file to the attribute "Read only", otherwise the effort will be in vain.

Unfortunately, this option does not always work. If the above actions did not have any effect, it is recommended to try the AVZ program. This utility is designed specifically to find and fix such viruses and the consequences of their stay on the computer. Run it, you need to select "File", and in it - "System Restore". Items that need to be noted are 21, 20, 15, 14 and 13, and 9, 8 and 6. After a few minutes, the utility will cope with its task.

When AVC is finished, it is strictly not recommended to connect to the Internet immediately. First you need to do another operation. At the command line ("Run"), enter cmd. This will cause the console to write the ipconfig / flushdns command. Pressing the enter button starts the process of clearing the cache. But that is not all. The final step is the execution of the route -f command. After that, you can safely restart your computer and go online.