Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


YOUR COMPUTER HAS BEEN BLOCKED – “Virus” Manual Removal

stf-your-computer-has-been-blocked-virus-scam-fake-tech-support-phone-number-lock-screen

YOUR COMPUTER HAS BEEN BLOCKED is a message that accompanies quite a few tech support scams, as well as some ransomware viruses. Those scams can appear on your PC in a lot of ways, the worst of which is due to a Trojan horse. Most of the scams have websites spreading them, which can lock you out of your browser to a point you cannot interact with it. A small number of scams are even more complex and integrate with your system on a higher level. They lock your desktop screen, holding your computer hostage, as ransomware viruses do. Fortunately, those scams do not encrypt files. Every scam uses one or more phone numbers. You should carefully read this article to see how to remove such types of malware.

Threat Summary

Name YOUR COMPUTER HAS BEEN BLOCKED "Virus"
Type Tech Support Scam
Short Description A tech support scam stating that your computer is blocked and in some cases actually doing that. The end goal of these scams is to scare you or somehow force you into calling a phone number.
Symptoms The message “Your computer has been blocked” appearing as a pop-up box, notification, error or as a whole page locking your browser or PC screen. You will be given a phone number and you will be lied to by crooks that you have a virus.
Distribution Method Freeware Installers, Suspicious Sites, Redirects, Trojan Horse
Detection Tool See If Your System Has Been Affected by YOUR COMPUTER HAS BEEN BLOCKED "Virus"

Download

Malware Removal Tool

User Experience Join Our Forum to Discuss YOUR COMPUTER HAS BEEN BLOCKED "Virus".

Update April 2017. Unfortunately, these tech support scams continue to spread in the wild, infecting users via various methods. As you will read later in the article, most tech support scammers rely on companies such as Microsoft to make their attempts more successful. The Microsoft approach definitely works at high rates as users tend to call the provided numbers once they see they should contact Microsoft Tech Support for assistance. Please remember that Microsoft doesn’t own a tech support line. This should be a clear indication of your system being invaded. One of the most recent reports by a victim clearly shows that users are easily tricked by the displayed message claiming their computer has been blocked. Remember that calling unsolicited numbers provided in such dubious ways is never a good idea.

YOUR COMPUTER HAS BEEN BLOCKED – Spread

This tech support scam has many variations. That’s why the YOUR COMPUTER HAS BEEN BLOCKED message can be displayed on your computer due to different spread methods. A common way for it to appear is when you are surfing the Web. When you visit websites which are suspicious and of unknown origin, they can spread the scam via redirect links or advertisements. Clicking on the ads or redirects is not always necessary as any interaction with the site might trigger them. Sometimes, just by leaving a website open can drop malicious files on your computer which load other sites supporting the scam. Phishing websites can make the message of the scam appear, too. It is easy to land on such sites because of a single spelling mistake in a URL.

The worst case scenario that can happen to show you the YOUR COMPUTER HAS BEEN BLOCKED message is if you have a Trojan horse present in your system. The Trojan horse may have installed itself using some of the spread methods mentioned above. In other cases, you may have installed it, without realizing that. You may have thought that you are installing an application which is useful. Many such third-party programs come bundled with other freeware and supposedly useful software. Unfortunately, some can secretly install additive features or even malware. To avoid additional content being put in your PC by such installer setups can be managed if your find Advanced or Custom options in the setup.

YOUR COMPUTER HAS BEEN BLOCKED – Details

YOUR COMPUTER HAS BEEN BLOCKED is a message that can appear on your screen from a tech support scam. The message can appear in a website page, notification, an error or a pop-up message. A phone number is always provided, which is supposed to be a number for contacting support technicians from Microsoft or another reputable company from the security sphere.

In some cases, you can experience your screen or browser being locked or an audio message being played for maximum effect. The file is usually played via the Adobe Flash Player or a similar plugin. The audio message can be applied to lots of such websites, especially if the number is not said in the audio file. The voice of a woman or a man urges you to call the number. You can hear such an example from the audio sample right here:

Many of the websites related to these tech support scams are made to look like the official Microsoft website. See an example of a fake Microsoft site from the below screenshot:

stf-your-computer-has-been-blocked-virus-scam-fake-tech-support-pcvirusalerts-net

People who work in IT or are tech savvy will all tell you the painful truth, that Microsoft does not have a support call line. Knowing that information and seeing a phone number on a copycat site is a dead giveaway, but not for people who are unaware of that fact. You can easily fall victim to such a scam, especially when you are bombarded with pop-up messages such as YOUR COMPUTER HAS BEEN BLOCKED non-stop. The most common variant of such a scam employs a one-page website with a picture background which is a snapshot of the real Microsoft site as seen in the above image. There are two generic messages written inside the pop-ups:

stf-your-computer-has-been-blocked-virus-scam-fake-tech-support-microsoftmonitoringalerts-com-error-268d3-small-pop-up

** YOUR COMPUTER HAS BEEN BLOCKED **

Error # 268D3

Please call us immediately at +1-844-730-8222
Do not ignore this critical alert.
If you close this page, your computer access will be
disabled to prevent further damage to our network.

Your computer has alerted us that it has been infected
with a virus and spyware. The following information is
being stolen…

>Facebook Login
>Credit Card Details
>Email Account Login
>Photos stored on this computer
You must contact us immediately so that our engineers
can walk you through the removal process over the
phone. Please call us within the next 5 minutes to
prevent your computer from being disabled.

Toll Free: +1-844-730-8222

stf-your-computer-has-been-blocked-virus-scam-fake-tech-support-pcvirusalerts-net-small-pop-up

*Your Windows (Microsoft) Computer has been blocked*

Windows System Alert!!

Call Microsoft At 1-888-243-3533
You have been blocked from accessing the Internet.
Private and financial data is at RISK:
– Your credit card details and banking information
– Your e-mail passwords and other account passwords
– Your Facebook ,skype,AIM,ICQ and other chat logs
– Your private & family photos and other sensitive files
– Your webcam could be accessed remotely by stalkers

It is Required that you call the number above and get your PC inspected before you continue using your internet, especially for Shopping or Banking.

The second message varies a bit and actually states Your Windows (Microsoft) Computer has been blocked. That exact same message can be seen in the third type of this scam, this time being loaded as a notification or an error box directly inside your desktop computer:

stf-webpage-fake-tech-support-security-scam-alert-message

The error box is loaded without the requirement of an Internet connection, and it is displayed, because of malicious software, files and registry entries related to the scam are inside your computer. A Trojan horse is not excluded to be managing those files to remain persistent on your machine, so whatever action your try to perform on your PC, the message to be stuck there. That can also lock your desktop screen, and you could be unable to interact with your computer device just like ransomware viruses do.

The locking of your screen may or may not happen depending on the files residing on your machine and the type of tech support scam. That brings us to the fourth and final variant (for now) of the YOUR COMPUTER HAS BEEN BLOCKED message. Here, the website pushing the scam will lock your browser, and the word blocked in the message will be turned into locked. The website will look exactly like a legitimate Google Chrome Warning for a phishing site or malicious activity. You can see an example in the picture below:

stf-your-computer-has-been-locked-google-malicious-activity-phishing-site-fake-screen

The full text on the site says the following:

Your computer has been Locked
Your computer with IP address – has been infected by the Virus RDN/YahLover.worm!055BCCAC9FEC — Because System Activation KEY has expired & Your information (for example, passwords, messages, and credit cards) have been stolen. Call the Technical Support number +1-844-556-7757 to protect your files and identity from further damage.
Call Technical Support Immediately at 1-844-556-7757
The following data will be compromised if you continue:
1. Passwords
2. Browser History
3. Credit Card Information
The virus is well known for complete identity and credit card theft. Further action through this computer or any computer in the network will reveal private information and involve serious risks.

With that, the main four variants of the YOUR COMPUTER HAS BEEN BLOCKED technical support scam are exposed.

You can check out one of the most notorious such scams in the articles given down here:

All phone numbers given in the article are for the purposes of giving real examples, and you shouldn’t dial any of them. If you see another website with phone numbers provided in a similar way, you shouldn’t call them.

The cybercriminals on the other end of the phone line will try to keep you on the line and lie to you. The lies go from how you shouldn’t tamper with your PC except when they instruct you, to how you need to provide personal information. They want your personal data to either sell it on the black market to the highest bidder or to empty your bank account if you provide them with your banking credentials. You can read more about how similar phone scams in India make millions for the people behind them. Besides the money, bigger problems could follow, such as identity theft for instance.

YOUR COMPUTER HAS BEEN BLOCKED – Update April 2017

The scams do not stop with the tech support related ones, but elevate even further into ransomware cryptoviruses. This has happened a couple of years before, with ransomware that claims that a government agency like the CIA has locked or blocked your computer system and you have to pay a fee or you will end up in jail. The same story repeats itself now in 2017 with that kind of ransomware returning and a prime example of that is the Matrix ransomware virus. You can check out the article about it for further details or just see its ransom note below and see how the FBI (Federal Bureau of Investigation) is being used to scare users like you into giving money:

We have also created a video that should help you remove YOUR COMPUTER HAS BEEN BLOCKED virus from your system:

More removal instructions are available below.

YOUR COMPUTER HAS BEEN BLOCKED Removal

To remove the YOUR COMPUTER HAS BEEN BLOCKED tech support scam and its related files manually from your PC, follow the step-by-step removal instructions provided below. If the manual removal guide does not get rid of the scam and its redirects completely, you should search for and remove any leftover items with an advanced anti-malware tool. Software like that will keep your system secure in the future.

Manually delete YOUR COMPUTER HAS BEEN BLOCKED "Virus" from Windows and your browser

Note! Substantial notification about the YOUR COMPUTER HAS BEEN BLOCKED "Virus" threat: Manual removal of YOUR COMPUTER HAS BEEN BLOCKED "Virus" requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1. Remove or Uninstall YOUR COMPUTER HAS BEEN BLOCKED "Virus" in Windows
2. Remove YOUR COMPUTER HAS BEEN BLOCKED "Virus" from Your Browser and Your Registry Editor

Automatically remove YOUR COMPUTER HAS BEEN BLOCKED "Virus" by downloading an advanced anti-malware program

1. Remove YOUR COMPUTER HAS BEEN BLOCKED "Virus" with SpyHunter Anti-Malware Tool and back up your data
Optional: Using Alternative Anti-Malware Tools

Berta Bilbao

Berta is the Editor-in-Chief of SensorsTechForum. She is a dedicated malware researcher, dreaming for a more secure cyber space.

More Posts - Website

Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.