I mainly I use Yandex as a search engine, and I use it quite often, looking for something, reading, clarifying terms and facts. Once again I clicked on the “find” button and received this response: surprise: picture is clickable

We're sorry, but the requests coming from your IP address appear to be automated. For this reason, we are forced to temporarily block access to search.
To continue the search, please enter the characters from the image in the input field and click “Submit”.

Why did it happen so?
Maybe, automatic queries do not belong to you, but to another user accessing the network from the same IP address as you. You need to enter the characters into the form once, after which we will remember you and be able to distinguish you from other users exiting from this IP. In this case, the page with the captcha will not bother you for quite a long time.
You may have add-ons installed in your browser that can make automatic search requests. In this case, we recommend that you disable them.

It is also possible that your computer is infected virus program using it to collect information. Maybe you should check your system for viruses, for example, with the CureIt antivirus utility from Dr.Web.
If you have any problems or want to ask our support team a question, please use the feedback form.
If automatic requests actually come from your computer and you know about it (for example, your line of work requires you to send similar requests to Yandex), we recommend using the Yandex.XML service specially developed for these purposes.

So it can’t be a virus for sure, because this is not the first year I’ve been under reliable protection licensed Kaspersky.

The browser add-on was SeoQuake, I installed it for literally 3 days, played around with it and uninstalled it, it did me little good, and the multi-colored icons in the browser and in the search results began to irritate me.

Another 2 hours before receipt Yandex warnings about automatic requests from my IP I monitored using several online services external links to my site, their anchors and visibility for search engines.

On the one hand, I guess that either SeoQuake or the search for external links could send to Yandex excessive number of automated requests. On the other hand, at the time I received the above message from Yandex, I had not monitored external links for 2 hours and deleted SeoQuake.

This message was received only 1 time, after entering the captcha code, Yandex began to behave as standard.
I didn’t understand why this message appeared, but I’m glad that everything was resolved successfully.

If you are offered to send an SMS, do not do it under any circumstances.

I wanted to install one for myself FTP client broken and got himself a virus. The virus has put me in a panic, since all my pages are in social networks were hacked. An inscription appeared on vk.com:
"We detected suspicious activity and temporarily froze your page to take it out of the hands of attackers." When trying to restore access to the pages, no SMS was sent to the phone. There was a question about what to do if you don’t receive an SMS. There, an id number of some kind is issued, which needs to be sent to a short number. I sent it. Nothing. Sent to the second specified number. Nothing. In general, I realized that something was wrong, I logged in from another computer and everything went smoothly. In the end, I sent two SMSs, and they charged me 300 rubles. First of all, I called Megafon and left a request for a refund and verification of these short numbers. The second thing was to log into all accounts from another computer and change the passwords. The third thing I did was go to Yandex to start googling how to delete this virus. Yandex was also replaced by this:
"Oh... We're sorry, but the requests coming from your IP address appear to be automated. For this reason, we are forced to temporarily block access to search.
To continue your search, please enter your phone number in the input field and click "Submit". "

The same thing happened with Google:

Thank God, the completely worthless Rambler at least worked.

Attempts to remove the virus:
1. I started the treatment by scanning the system with my antivirus Microsoft Security Essentials
This is a free antivirus from Microsoft.
Download here: http://windows.microsoft.com/ru-ru/windows/security-essentials-download
He found nothing.
2. I looked in startup and searched for the virus manually in
C:\Documents and Settings\Administrator\Application Data
C:\Documents and Settings\Administrator\Local Settings\
C:\Documents and Settings\Administrator\Local Settings\Application Data
There was nothing
3. I cleared the entire system with all cookies and caches in all browsers using CCleaner.
The program is very good, it cleans up a lot unnecessary trash from a computer. I've been using it for 10 years now.
Download here: http://www.piriform.com/ccleaner (free)
Did not help
4. Then I manually deleted all the entries in the registry through a search where the name of the program that I installed and which caused the virus was found.
Start->Run->regedit
The combination Cntrl+F searches
Did not help.
5. Then I scanned the system with Ad-Aware from Lavasoft.
Good program to search for anything like malware (http://ru.wikipedia.org/wiki/Malware).
The program is old, not sure if it is supported yet.
She found some dangerous crap, deleted it, rebooted it, it didn’t help.
6. Downloaded free utility from Dr.Web - drwebcureit.
I scanned it and found two jambs. The first is that my hosts file has been changed, but I changed it myself and everything is correct there, new entries or hidden file did not have. Secondly, this utility complained about Multi Password Recovery, this is the program I need and I know that it wasn’t the one that hacked it all, since I’ve been using it for half a year now and everything was fine.
That is, drwebcureit didn’t help either.
7. Downloaded avz program and scanned the computer, the program corrected something, rebooted, it didn’t help.
8. Then I read it here http://pc-polzovatel.ru/internet/oj-v-yandeks-poiske.html
that you need to check the boxes in avz in a certain way in order to get the result.
Scanned again. I flipped through the resulting report and saw that I had some kind of crap sitting in my
C:\Documents and Settings\All Users\Application Data\Mozilla
there was an executable file that none of the antiviruses deleted and the file rafypfm.dll
I deleted the exe file, rafypfm.dll could not be deleted, but I erased its extension and rebooted.
Voila it worked! Everything is fixed! I deleted the rafypfm.dll file after rebooting and created a file of the same name hidden folder with such a name, this is done so that the file is not overwritten here again; a viral file with an identical name cannot be overwritten over a hidden folder.

I spent about 3.5 hours fixing it.
Outcome/solution:
You can’t trust anyone who asks you to send an SMS! All serious companies send SMS messages to your phone, VKontakte for example. I solved my problem using the avz program, in the report after scanning I saw where the malicious files were and deleted them manually. Theoretically, if I had searched better when trying to find viruses manually, I might not have had to poke around for so long.

Here are some other options for how to deal with the situation:
http://mdex-nn.ru/page/trojan-redirector.html
http://mdex-nn.ru/page/kak-razvodjat-na-dengi-v-socsetjah.html
http://pc-polzovatel.ru/internet/oj-v-yandeks-poiske.html

P.S. The virus pretends that you have been blocked not only on VKontakte, Yandex and Google, but also on Odnoklassniki, Facebook and Skype.


I dug through a bunch of different videos, forums and articles and invested personal experience to find a solution.
If my post helped you, you can buy me a beer)

__________________________________
Tags for search engines: Vkontakte, VKontakte, vk.com, banned, closed, access, Yandex, yandex, closed, banned, virus, antivirus, what to do, solution, problem, issue, Odnoklassniki, Facebook, Skype, Trojan, sms, social

Yandex writes OH, what should I do now?

Well, first of all, if you want to continue searching in this search engine, then you need enter the indicated characters in the picture and press Send. And then the page we need will load. But note, you just need to enter the characters, but you DO NOT need to send any SMS or anything else!

Secondly, we need to try to figure out why this happens, and from time to time we are asked to enter some letters?

Yandex suspects that we are a bot, that is, not a real person, but a program that automatically enters the site and creates a load on the server, performing an endless search. Thereby Yandex checks us and writes OH, asking you to enter some sometimes complex code or word. And it turns out that if we entered text and clicked “ Send"then we are not a robot.

Why can this happen all the time? Why does “Yandex write OH”, because we have already entered the characters?

This can happen for several reasons!

1. Viruses

Treat viruses! The first thing you need to do is look for viruses. Scan your computer good antivirus, since this is a common cause of the “Oh, from Yandex” error. Especially if they ask you to enter not the characters from the picture, but to send an SMS. Then it’s definitely the tricks of malicious code.

2. Changed hosts file

This option follows from the previous one. Malware may have damaged the Hosts file. Some lines could have been written in it that would block access to the real Yandex website. Instead, some clone is loaded. Need to . If you know where this file is, then make sure it is in order, otherwise I recommend the utility Reset Hosts - quickly corrects the file we need.

3. Dynamic IP

The most difficult problem to solve is when we have a dynamic IP address, and it is distributed to a huge number of users. This common problem, when an Internet provider provides the same IP address to dozens, or even hundreds of its users at once. But when we access Yandex, it identifies us precisely by IP address.

Imagine you and dozens of other people who are connected to the same provider as you. Everyone sits on the same IP and logs into Yandex from time to time, but he thinks that this is one person. More precisely, he is no longer a person, he already suspects that you are a robot. Therefore he gives out his error OH enter the characters from the picture.

Here you need to either accept it and enter characters from time to time, or change the provider. And it’s not a fact that it will help. There are of course some tricks, for example, program level. That is, install special program, which will emulate as if we have a different IP (From Germany, USA, Brazil, and so on). But this also has its downsides: sites will load much slower (and some will refuse to work altogether). In general, read the lesson (link just above), there we touched on in detail IP address change topic.

P.S. Try temporarily switching to the Google search engine, maybe it won’t pester us with requests to enter some stupid characters. I'll do that, otherwise I'm sick of it from Yandex "OH, we're very sorry".

Now the Internet has appeared new virus, which disguises itself as a standard Yandex request, asks you to enter a code and confirm your reality. The same thing happens when you enter your mail, the Odnoklassniki website in Contacts, etc. If you have suffered from this virus, then this article is for you!

If you receive such a message from search engine"Yandex":

Oh…
We're sorry, but the requests coming from your IP address appear to be automated. For this reason, we are forced to temporarily block access to search.
To continue the search, please enter the characters from the image in the input field and click “Submit”.

You need to enter only a digital code, as indicated in the Yandex instructions (for Yandex it consists only of numbers). This message is common standard check, proving that you are a person and not a robot trying to spam the search engine.

All browsers (Opera can work fine) display this message when you try to log into Yandex, your mail, the Odnoklassniki website, VKontakte, etc.

I can’t log into social networks.

If you receive a message asking you to send an SMS, Do not send it under any circumstances! Yandex never asks for your phone number, much less sends you SMS.

Don't send SMS They will take a lot of money from you, but there will be no result, because this message has nothing to do with Yandex.

More likely, you have a virus, I strongly recommend checking your computer with an antivirus. Myself "Yandex" gives the following instructions in this regard:

I recommend using Kaspersky Anti-Virus, it has free versions for 1 month if you download from the official Kaspersky Lab website and free version antivirus for 6 months if you download the Yandex version.

Download Kaspersky antivirus for free for 1 month, official website:

http://www.kaspersky.ru/trials

Download Kaspersky anti-virus for free for 6 months, Yandex version:

http://kaspersky.yandex.ru/

If checking with an antivirus does not help, I suggest the following methods:

METHOD #1 - edit the hosts file

C:\WINDOWS\system32\drivers\etc\hosts- check this document (open with notepad), if there is mention of VKontakte (vkontakte.ru, vk.com) or any other lines - delete everything and leave only: 127.0.0.1 localhost

METHOD No. 2 - remove malware.

It also happens that when you enter the VKontakte website, you are blocked malware. These programs need to be removed. Go to Start -> Search -> Files and folders -> Additional options -> Check the boxes next to all items (search in system files, hidden, etc.) and look for files svc.exe, vk.exe and vkontakte.exe. If you find it, delete it.

METHOD #3 - check the registry

Your computer is infected with a virus that has edited the registry. Incorrectly modifying the registry may disrupt the operation of your system.
To get rid of the virus, follow these steps:
1. Start - Run - regedit.exe
2. In the window that appears, select the path -
\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
3. In the Parameters tab on the right side of the window, a menu with the file name will appear,
its type and meaning. Select DataBasePath and right click on it
mouse button, select Edit. Replace the value with
%SystemRoot%\System32\drivers\etc
If you have the same value, then you do not need to replace it and it is necessary
check file contents hosts from "Method No. 1".

METHOD No. 4 - using the AVZ utility

If the previous 3 methods did not help, try the following. Download the latest free antivirus utility AVZ from the official website http://z-oleg.com/secur/avz/download.php, run.

METHOD No. 5 - removing browsers

For Windows 7

Boot the operating system into safe mode, go to the folder c:\program data\mozilla\ and delete the exe file and dll file.
After a reboot, search engines should work in all browsers.

For Windows XP

It's more difficult in XP. First, remove all browsers from your computer through the “uninstall programs” menu. Boot your computer with LIVE disk CD on the disk, select “load operating system”.

Go to the folder c:\program files\mozilla\ and delete exe file And dll file.

The disk contains registry cleaning utilities, for example CCleaner. Start it up and clean it.
After reboot, install the browser.

Everything should work like new! (Personally, this method helped me)

How to boot Windows in Safe Mode?
  • restart your PC;
  • When booting/rebooting the PC, press quickly many times F8 immediately when you turn on the computer and before it boots operating system(if a selection window appears Boot Device, select HDD on which the operating system (usually C) is installed, click Enter, then again F8 until it appears Menu);
  • V Menu additional options Windows boot use the arrow keys to select Safe mode.

ATTENTION. In all cases you must:

  • after all that has been done, check your computer for viruses, run registry cleaning utilities;
  • change passwords from mailbox, in Odnoklassniki, VKontakte, etc.;
  • You must be administrator on your computer.

Reinstalling the system is the most extreme measure to combat the virus! Our task is to find and neutralize the virus!

Main! Don't send any SMS! Look for viruses! Good luck!

A. Zotov, Volgograd region.

You can discuss virus problems on our



P O P U L I R N O E:

    Today there is a wide variety of all kinds of mortise (built into the countertop) kitchen sinks made of different materials having different shapes and colors. The most popular, budget-friendly and durable type of kitchen sink can be considered stainless steel sinks. Let's look at how to install a stainless steel kitchen sink with your own hands, using simple household power tools. Absolutely any mortise sinks are installed using the same principle.

    If you have plastic windows installed, it’s warm, beautiful and hassle-free. High-quality plastic windows installed in compliance with technology will last a very long time. But... it happens that suddenly it starts to blow from somewhere, the handle is jammed, the seal does not press in, etc. What to do? Look for a specialist or figure out the cause yourself and eliminate it with your own hands!

    Winter is over, gardening chores begin. During the spring-summer season there are long periods of rain, but there are also periods of drought. Let's talk today about self-watering.

    In order not to depend on rain, it is better to make your own automatic watering system.

    Irrigation systems can be divided into 3 groups: systems, having removable and stationary elements; autonomous- these are complex engineering structures installed in the garden all year round;seasonal- when there is no longer a need for watering, they are rolled up and stored for winter storage.

If you are faced with the fact that Yandex does not work, and instead of displaying a standard page it writes “Oh... Requests received from your address look like automatic ones” and asks you to enter a phone number in order to continue the search - first of all, do not believe it: this Just another way for scammers to get your money by using malicious software.

In this article we will look at how to get rid of this message and return to a normal Yandex page.

What is this and why does Yandex write this way?

First of all, the page you see is not a Yandex website at all, it just uses the same design to mislead you. Those. The essence of the virus is that when you request popular sites (in our case, Yandex), it does not display a real page, but transfers you to a fake phishing site. Something similar happens when classmates and others do not open social media and you are also asked to send an SMS or enter your phone number.

Requests coming from your IP address appear to be automatic

How to fix the Oy page on Yandex

Now let’s talk about how to fix this situation and remove the virus.

So, if Yandex writes Oops, then we do the following:

After this, you can restart your computer in normal mode and, most likely, if you try to open Yandex in a browser, it will open successfully.

Another way is to use the AVZ antivirus utility

This option, in general, repeats the previous one, but perhaps it will be more convenient and understandable for someone. To do this, we need the free anti-virus utility AVZ, which can be downloaded for free from here: http://z-oleg.com/secur/avz/download.php

After downloading, unpack it from the archive, run it, and in the main menu click “File” - “System Research”. After this, click the “Start” button; you do not need to change any settings (the only thing you will need to specify is where to save the report).

In the final report, after research, find the "Startup" section and find DLL file, the description of which states HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\WindowsAppInit_DLLs. From this point you should remember (copy) the file name.

Then look for "Scheduler Jobs" in the report and find exe file, which is located in the same folder as the DLL from the previous paragraph.

After that, in AVZ select “File” - “Run script” and run the script with the following content:

Begin DeleteFile("path to DLL from the first point"); DeleteFile("path to EXE from the second point"); ExecuteSysClean; RebootWindows(true); end.

After executing this script, the computer will automatically reboot and the “Oops” message will no longer appear when Yandex is launched.