We assume that your mailbox has been hacked. In order to protect your data, we have temporarily blocked access to the mailbox

Conversation, then I want to tell you an instructive story that I witnessed. The story didn’t exactly happen to me, so I don’t know some of the details, but I was directly involved in its completion.

The premise was this: I found one of my good friends sitting with a thoughtful look (read - in complete prostration) at the computer and holding his smartphone in his hand. To my question - why are we sitting and slowing down? - was the answer: “Well, I don’t understand what happened.” Ok, well, let's figure it out in order. Where did it all start? The following is his story (from his perspective).

I needed to go to mail, mail.ru. I go in, enter my username and password - a page pops up - as usual it pops up if I made a mistake with the password.

Only this time it says something like:

Spam has been detected from your mailbox.
Most likely, your password is too simple, and attackers were able to guess it.
Your account is blocked, to restore it you need to:
1. Change the password to a more complex one
2. Specify a phone number for password recovery in the future

At the same time, it does not allow you to enter the box itself. Everything looks like on mail.ru, in the browser line - e.mail.ru, hosts file— pristine, there are no other hosts files with Russian letters, i.e. Doesn't look like phishing.

Well, I think maybe they really picked it up and sent spam on my behalf. I change the password, and at the same time I begin to remember that I once linked a phone number to an e-mail. Yeah, I’m guessing - probably, if you specify your phone number, it will compare it with what’s in the database and let you log in. I enter the phone number, an SMS immediately arrives - indicate your age, we will send a code to enter. Okay, I think you need to send the age that you indicated in the email application form. I send, a code arrives, I enter it into the form, instead of logging into my account, I receive a link to a file that should unlock the account. I download it, send it to virustotal (I have this habit), and from there comes a report that the file is a Trojan. Of course, I still can’t log into my account. Now I'm sitting, thinking what to do.

I tell him - well, let's look again. It looks a lot like phishing. We look - from traces - only when viewing the code original page several suspicious links to css styles. Yes, it is impossible to go to www.mail.ru - there is no redirection to mail.ru, but a page is displayed that the address was not found. But with hosts, everything is really all right. Everything is fine with DNS too. Okay, let's look at the details of the phone. Let's see - for sending an SMS with his age to number 7781, he was charged 203 rubles and 20 kopecks (although in the details it is indicated without VAT, but multiplying by 1.18 is not difficult). Yeah, okay, that means mail.ru didn’t send the SMS. Okay, we'll deal with this later. Let's go from my Galaxy Note in mail.ru (it logs in perfectly, of course), change the password for the account. OK. Go to the DrWeb website, download latest CureIt, let's launch. We find a Trojan in one of the dlls. We say - cure. It cures it and it starts logging into mail.ru normally. But:

• Icons and icons on the desktop cannot be dragged and moved on it in any other way
• When I try to enter the device manager and view the properties of a device, nothing works
• Also properties are not displayed in context menu for any element (by clicking the mouse on the most bottom point"properties")
• Everyone is gone accounts — empty list, nothing but the home button
• Applications do not minimize to the taskbar, but are minimized to nothing; you can only return to the application using Alt+Tab
• The sound is completely cut off - there are no visible audio devices for which you can display the sound level adjustment icon
• The initial loading began to take 2-3 minutes, hangs on the greeting
• Well, a bunch of little things that are no longer important

So I cured you... It would be better if they launched Kaspersky. It is clear that after all this easier windows reinstall rather than catch every error.

OK, now we will return the money. We call MTS. There they pretend that they have nothing to do with it and offer to write an application at the office. Let's write, it's not difficult for us. At least to the prosecutor's office. But first of all, we break through 7781 on the Internet, we see that the scam has been known for a hundred years, which is not surprising, the only difference from our case is that the hosts file basically changes. Okay, we find out that everything went through http://www.alt1.ru/, we make a similar complaint on their website:
————
Good afternoon,

Yesterday, at 22.30, a message appeared about my account being hacked on mail.ru. The browser asked me to enter a phone number to confirm that I was the owner of this account (everything looked like on the mail.ru website and with the same address). At 22.37 an SMS was sent to the specified number +7-916-my-no-mer, to which it was proposed to respond by indicating the age indicated in the mail.ru questionnaire to restore the account. After sending an SMS with age in response to an incoming SMS to number 7781 at 22.39 and 56 sec. 203 rubles. 20 kopecks were debited from me. Considering that
a) I was not warned anywhere about the cost of this service
b) The service was not provided (the account still had to be restored using an antivirus)
this action falls under Article 159 of the Criminal Code “Fraud” and can be qualified as the taking of someone else’s property (money) by misrepresentation. (Criminal Code of the Russian Federation: Article 159. Fraud).
As (already today) I was convinced on the page http://smsnumbers.ru/sms/7781&page=6, this scam has been taking place for a long time.
I urge you to urgently consider my claim and return to my number +7-916-my-no-mer the amount fraudulently debited from my account.
I ask you to respond to this complaint by e-mail [email protected]
If there is no response within three working days, I reserve the right to appeal to higher authorities, including a complaint to the prosecutor's office.
Sincerely,

My name.
————
The next day the answer comes:
————
Good afternoon, your name.

Based on the results of consideration of your application, it was decided to return cash to your personal account.
The funds will be credited to your account within an hour.
————
Another hour later, the money jumped back into his account.

If it weren’t for the required reinstallation of Windows, we can say that everything went painlessly.

To understand how it happened that with a normal hosts file, the IP address was replaced and, accordingly, the mail.ru website was replaced - in such a way that there was a redirection to an unknown location, and the following was displayed in the browser line correct address, and the site was phishing - we still couldn’t. There is an assumption that the registry was affected, for example - a link to hosts located in another location, or something like HKLM\System\CCS\Services\Tcpip\..\ - but now you can’t check.

Instructions

Some email services block box only because the user has not used it for some time (for example, several years). As a rule, in this case, the postal box possible without any difficulties. Those. You will need to click “ ”, and then log in freely using your username and password.

If postal box due to deletion (usually the blocking lasts several months and then), it is more difficult to restore it. To do this, you need to click “unblock” and enter either the answer to the secret one written during registration box a, or the mobile number also specified during registration.

Sometimes a message about mail blocking box but is a disguise. And hacker. As a rule, it says what is needed to unlock it: “send an SMS to such and such a number” or something like that. You need to get rid of this error as follows. First of all, find the hosts file, which is located at: Disk where the operating system is located - Windows - System32 - Drivers - Etc. The hosts file needs to be deleted and the computer restarted, after which this blocking message should disappear.

When no SMS is required, but it is written directly that it is postal box blocked, for example, for sending out . And no alternatives are even offered for unlocking, then you need to check your computer for viruses. Moreover good antivirus(for example, Kaspersky Internet Security). You need to go to the link http://ww.2ip.ru/spam/ and click "check". Opposite the notices written in red, you will need to follow the links and make a request to have your IP removed from the spam databases. After the operations have been completed, write to technical support postal service asking you to unblock your box A. When you gain access, be sure to change your password.

System postal letters actively participates in our daily life: communication with friends, file sharing, receiving newsletters. Email literally pervades us. Giving in to temptation email correspondence, you should know how you can mailbox for the presence of new letters in it.

You will need

• The only tool will be the account you created on the mail service.

Instructions

To check the mailbox we need to run -. Go to website postal service, where we were registered. We need to log in to this service, i.e. go through the authentication procedure. Authentication - confirmation of authenticity. This is also called authorization, although it does not imply confirmation, but rather a check of rights to certain actions. But these are already nuances.

In the authentication field, in the login and password entry field, we need to indicate our registration data. After entering this data, login and password, the system moves you to your page, informing you that a successful login to your mail has occurred.

The login can be either a name or domain name along with the name. For example, to log into Mail.ru mail I need to enter a login and select a domain name from the list.

[email protected]

Here Petrov is the name, and @mail.ru is the domain name.

When logging into your mail on the Gmail.com website, you must indicate the address in the Login column ([email protected])

Please note

Useful advice

Do you often forget the password for your email box, password recovery can come to your aid. Now some services link to a number cell phone. This is very convenient and secure; no one except you can change the password. You can also use in a standard way- answering Security Question, which you specified when registering your mailbox.

By changing the main address email, many users are faced with the problem of changing the mailbox in the services they use. First of all, this is necessary in order to receive important service notifications in a timely manner.

You will need

• New email address, access to the service’s personal account.

Instructions

In order to change the address in the service to a new one, the user needs to complete a series of steps: certain actions. Initially, you need to log in to the service using a password. After user authorization is completed, you need to go to personal settings. Typically, a link like “My”, “My” or “Personal Account” leads to such a menu.

Once in personal account, you need to find the “Change personal data” menu. After the user is redirected to change personal information, the “E-mail” field must be erased old address electronic and enter a new one in its place. At the end of the operation, you must save all changes by clicking on the appropriate button. This way, the user will be able to change their mailbox.

Some services, when changing an email address, provide confirmation of the operation by means of a user transition, which is sent to the previously specified address e-mail. After completing all the steps, do not forget to check the contents of your mailboxes for a new message with relevant content from the service. If there is no email confirmation letter, the service does not provide for such an operation and your e-mail has been changed to a new one.

Video on the topic

Sources:

• how to change your mailbox password in 2019

Email has become an integral part of our lives today. Thanks to an Internet mailbox, a person can communicate with an interlocutor who is located thousands of kilometers away in real time.

You will need

• - mail service account

Instructions

To log into the email service, you will need to know your login username as well as your account password. Go to the mail service and use the login/registration form. Here you will see two fields: a login field and a password field. In the login input field, enter your account name - no need to enter full address mail. For example, if your email address [email protected] , then as a login you need to enter the characters located before @, that is, login in in this case – 12345.

If after entering your login you still cannot enter your mailbox, you probably made a mistake when filling out the fields. It is quite possible that when entering your password you typed in a language or when the “ Caps Lock" Carefully enter your data again, and if the error persists, use the password recovery system.

When recovering your password, you will be required to provide an email address that you cannot log into, and also respond to security question(the answer is assigned by the user at the registration stage mail account). Once you have completed all these steps, you will be assigned New Password to access your account. Once you log in, don't forget to change your password to a more secure one.

For many years now, scammers have been actively operating on the Internet, distributing malicious software. software. IN last Nowadays, so-called banners are becoming “popular”. Their content can be very different - from a pornographic picture to a regular text window. But the essence remains the same - the user cannot log in to the system. Unfortunately, universal methods There is no solution to this problem, but we will be happy to tell you about options for eliminating the most common banners.

You will need

• Internet availability
• Additional computer
• Installation Windows disk 7

Instructions

Windows 7. For the lucky owners of this system there is great news: any banner can be removed in 5 minutes. Paste installation disk, in the BIOS, enable priority for booting from DVD-ROM. After starting the installation system, select “ ”, and the system itself will remove the banner from boot file.

Search for code. If the banner that "captured" your computer is old enough, then there is a chance that you will be able to find a ready-made code. Just open search engine on another or and enter the number to which they offer to send SMS. Ready-made ones are offered on the Kaspersky and Dr. antivirus websites. Web".

Date translation. Sometimes dates in the BIOS help deactivate the banner. At the beginning of the boot, press “del” to enter the BIOS and change the date: try options with moving the number forward and backward. Usually with banners containing the phrase “in n days, all information on your computer will be destroyed.”

You can try to cure your computer by running various utilities that are offered huge amount. We have tested the AVZ Unblocker program. After installation, update the utility database and run it.

Video on the topic

Useful advice

Do not under any circumstances send SMS to numbers indicated and do not rush to reinstall the operating system.

With the advent of Windows 7, and in some cases with others operating systems, the security of the system and access to files has been significantly improved. Such security measures are useful, but on the other hand, many users face a huge problem after reinstalling the OS. Its essence lies in the fact that, even working under an administrator account, they cannot access some folders and files inside their computer. This can be caused by a lot of reasons. And one of them is that the folders have a different owner.

You will need

• Administrator account

Instructions

Find the folder you would like to access. Click on it right click mouse and select “properties”. Go to the “security” tab and click the “ ” button. Check all the required boxes in the “allow” column. If access is required, select “all”.

If it happens that you cannot access the partition or disk In general, your algorithm will change slightly. Select the required disk or section and open its properties. Go to the “security” tab and click the “advanced” button. Go to the “owner” tab and select “edit” in it. You will see the lines “current owner” and “change to”. In the second line, select the one you need, for example, the one you are currently working under and click “apply”. Don't forget to check the "replace owner of subcontainers and objects" checkbox. It will take some time to re-index directories and files, and this section or disk will be at your disposal.

Useful advice

All administrator accounts should be password protected.

Don't open it general access users whose reliability you are not sure of.

Sources:

• how to unlock hard drive

I used it for 7 years.

And everything was fine, nothing foreshadowed, as they say.... And so! last week, I turned on the computer, and there, instead of my email, there was the inscription: " We assume that your mailbox has been hacked. In order to protect your data, we have temporarily blocked access to the mailbox." (see PrintScreen 1).

The inscription DOESN'T seem scary, right? At first I wasn’t even scared: just think, now I’ll do everything they ask and everything will come back.

PrintScreen 1- I enter the phone number and code from the picture

PrintScreen 2- I enter the confirmation code. Do you think that's all? But no!

PrintScreen 3, 4, 5 - here you already have to work hard and lay out all your data, turn out your whole soul, all the passwords and appearances, as if during an interrogation

I don’t have to choose, I filled it all out to the best of my understanding, I wrote everything I could remember. At the end there is a life-affirming inscription that " Your mailbox will be available again soon".

I waited a couple of days and went through this whole, almost humiliating, procedure again (what if it helps?). I'm waiting a few more days. No use!

I’m starting to find out: maybe I can somehow write them a letter THERE? Is there any way I can get an answer or help from THEM?

See the rest of the PrintScreens - help AS WELL as there is, i.e. formally everything is written and explained. But there is nothing specifically about blocking the mailbox by the administration [link]! and there is no way to return your mailbox via correspondence with the moderator either!

In general - a blank wall.

It is difficult to live without mail for more than a week. I registered another mailbox at [link]. My husband, of course, did not approve of me: " They ditched you! and you start a box there again!"

But over the years I have already become accustomed to this mail...... I decided to start life with clean slate no SPAM yet

Conclusions what I made from this situation:

Do not store anything important in the mail!

All necessary contacts You need to copy it to your computer and print it out periodically so that it can also be stored in paper form.

The password is generated automatically and more complex (+ change it once a year).

“You won the competition!”

Another common example of fraud is when you are told that you have won some kind of competition. In this case, you are asked to follow a link and enter your personal data or send an SMS. More details about such cases are described in the article “Competitions on Mail.Ru”.

Let us remind you that you can win or receive a prize only if you took part in the competition (sent photos, videos, stories, etc.). There are no contests like “Your mailbox has become the 10 millionth” or “Follow the link, enter your username and password and receive a free iPhone” on Mail.Ru.

Even if you participated and won the competition, we always bear all costs for delivery of prizes.

“Your mailbox is blocked - send SMS”

If, when you try to enter your mailbox, you see a message like “Your mailbox is blocked, to unlock it you need to send an SMS message to a short number” - there is a virus on your computer that is replacing home page Mail.Ru.

Mail.Ru - free portal: You don't pay for registration or for logging into your mailbox. Therefore, never send SMS messages, even if you see the “free” mark.

To access your mailbox in such a situation, download this file to your computer and run it. It will help get rid of viruses, and after restarting the computer everything will work correctly.

Unsafe email content

Unfortunately, scammers are coming up with more and more sophisticated methods to mislead you and deceive you personal information(mailbox passwords, passport details, etc.) or money. 99.9% of emails with dangerous text content do not reach our users’ mailboxes, so scammers have started using images instead of text, which can harm your security and your personal data.

For your safety, now those pictures that have been recognized by our system as unsafe can be automatically hidden in letters:

Some reasons why images in emails may be blocked:

1. Received large number spam complaints about emails containing such images;
2. The hidden image is similar to the image we previously blocked;
3. The image has been found to be unsafe by our spam analysts.

Disable this option and view hidden images impossible.

Be careful:

1. All official letters come from addresses like [email protected].
2. We never write words like “ZDRASTVYITE”, “POLZOVATELEY” and “DEISTVITELNOST” in official letters; we write the names of countries exclusively with a capital letter.
3. We never require money from users for registering a mailbox, nor do we offer confirmation of registration via SMS.
4. We never send emails asking you to send SMS to short numbers to receive a cash prize or to extend the period of using mail.
5. We recommend that you never click on links in spam emails.
6. There is only one case when the support service requests information about passwords: if you contact support yourself to restore access to your mail.

Report a fraudulent email

Download the letter to EML format according to the instructions and send it through the form feedback below. We will study the letter and if necessary additional information- we’ll write to you. Thank you for helping fight scammers!

Lately, people are increasingly turning to us asking how to unblock mail.ru, social media and other postal services.

Most often the problem looks like this: you go to the site, enter your username and password and a message appears about blocking for spam or for another reason, you try to follow the prompts to unblock the page and you are asked to send SMS message to a short number.

What to do if mail.ru is blocked?

It is very important to know one thing: not a single resource will ever ask you to send a message! These are 100% scammers. If you encounter similar problem The most important thing is not to send SMS - they will simply take money from you, but you will not unblock the site. The simplest and reliable way this is to contact the service computer help to treat the virus.

How to unblock mail.ru yourself?

First, you should understand that the site is blocked by a virus and your computer will need to be treated for it. For treatment it is worth preparing antivirus utility and a system cleaning utility. Next, follow these steps:

1. Launch CureIT and install full check computer (the check will take quite a long time).
2. After scanning, cure or remove all detected threats; if the antivirus displays a message about changing the HOSTS file, agree to restore it.

2.1. If the antivirus did not detect anything, then you need to open the C:\Windows\System32\drivers\etc folder and find the hosts file in it.

2.2. Open the hosts file using notepad and check if there are any changes. It is worth noting that some viruses hide the hosts and make it invisible or replace it empty file with the same name. To display it you need to go to the “control panel”, the “folder options” menu, the “view” tab and check the box next to the “show” option hidden files, folders and disks." A “healthy” hosts file looks like this:

2.3. If you find changes, you must delete them, close the file, and save the changes.

1. Restart your computer.
2. Clean your computer using the utility.
3. Restart your computer again.

How to remove a mail.ru blocking virus?

In most cases, these actions will help you unblock mail.ru and other services blocked by the virus. However, if for some reason you were unable to do this, we strongly recommend that you contact our company that provides computer repair services. Our service technicians will quickly and efficiently restore correct functioning your computer.