Antivirus Blocking Rules

Antivirus Blocking Rules are threatening settings changes that prevent your PC from launching known brands of anti-virus software. Although they may be associated with fraudulent security products, Antivirus Blocking Rules also may be implemented by other threats that range from spyware to rootkits or backdoor Trojans. Some particularly invasive forms of adware and browser hijackers also may use Antivirus Blocking Rules. In all scenarios, standard anti-malware strategies should be relied on for circumventing Antivirus Blocking Rules and removing the PC threats that may be implementing them.

The Rules You will not Want to Obey

Antivirus Blocking Rules aren't independent threats, in and of themselves, but may be symptoms of the presence of another, typically threatening program. Malware experts most often see Antivirus Blocking Rules implemented alongside browser hijackings, fraudulent security alerts and other attacks caused by fake anti-spyware scanner, rogue Registry cleaners and equivalent scamware. Antivirus Blocking Rules may misrepresent themselves as being implemented for your safety (such as a legitimate AV program being blocked as a danger to your computer). However, they also may block the affected program without justifying their changes. FakeRean is one example of a fake AV software family that blocks real AV products for your supposed 'protection.'

Most forms of Antivirus Blocking Rules target well-known brands of security software, such as Kaspersky's Anti-Virus or Microsoft's Security Essentials. Less sophisticated threats, such as Antivirus Pro 2017, determine their software blocks by scanning your folders for specific file names. In these cases, you can temporarily rename the affected EXE files to use the names of unblocked software (such as a Windows component like Svchost.exe), which can let you run the application freely. However, other variants of Antivirus Blocking Rules may use different strategies, such as deleting Registry entries that are essential for the affected application.

Blocking a Software Blocker

Because Antivirus Blocking Rules traditionally operate off of set lists of blacklisted, popular AV products, they're likely to overlook lesser known AV programs. The dangers inherent to Antivirus Blocking Rules are a primary reason malware researchers often advises using Safe Mode options while disinfecting your PC. By disabling many types of unwanted and threatening software, Safe Mode allows you to scan your PC with unblocked anti-virus software and remove the underlying causes of Antivirus Blocking Rules.

Antivirus Blocking Rules always can be distinguished from ordinary, software-blocking security features that intervene for your legitimate protection. Actual PC security software capable of blocking other programs always will allow you to set manual exceptions for unblocking false positives or inaccurate alerts. In most cases, a well-known anti-malware product or similar security program never should detect a different security product as being threatening. However, for cases where these false positives generate problems similar to those of Antivirus Blocking Rules, you should report the error to the responsible company and update your software.

Technical Details