Computer is blocked by the PRISM Virus? Today I’m watching a basketball video online and suddenly my computer is frozen up. A screen comes up and says that my computer is locked by NSA Internet Surveillance Program, all the activities are recorded by the government department because I have broken the laws? How can this happen, I never do anything that go against the laws, and it says that I need to pay a $300 fine to unlock my computer, should I pay to this PRISM thing? I don’t want to lose anything on my personal computer. How can I get out of that troubles?
PRISM Virus, we can also call this virus as NSA Internet Surveillance Program virus or National Security Agency Internet Surveillance virus. It is a new virus that usually attacks the victims located in the United States of the America. Virus makers will plant this PRISM virus to the infected programs, files and E-mail attachment so that it can infect the victims’ PCs easily, once the victims download and install those infected programs from the unknown webpage and forum, their computers have a great probability of being infected by this PRISM virus, sometimes the victims may even get this virus infection when they open the unsafe E-mail attachment or click on the links on some websites accidentally. It has become one of the most dangerous viruses on the Internet because this virus has the ability to do the malicious things on the infected machine. Just like some similar ransomware FBI virus and Department of Justice virus, those viruses use the different government departments to scare and cheat the victims if they know nothing about these kinds of the virus infection. They may regard them as the real government messages and follow their instructions. However, the truth is that PRISM virus is just a big scam which uses the name and logo of the government department to do the malicious things online, the local police, any organizations and even the U.S government will not lock your computer, publish this kind of message and ask for a fine for any reasons. You don’t need to worry about what actually you did has broken the laws, all can you see on your blocked PC about locking by the NSA is totally a swindle that you need to pay attention to. Don’t be fooled by this tricky scam, all the things are normal except you get this PRISM virus infection. You need to remove it before it causes further damage on the infected PC.
PRISM Virus (also called National Security Agency Internet Surveillance Program Virus or NSA Internet Surveillance Program Virus) is a new created ransomware that has been spreading on the whole United Stated of the America, once this virus has been installed to one PC and starts its working, it will lock the infected PC immediately and forbid most of the actions on the blocked PC. All the victims can see is a warning page which asks for a unlock payment. The victims can not close this page or minimize it, even the hit the red X can not end this process while PRISM virus is running on the infected PC. Even the victims choose to restart the infected PC, this locking page will still appear after they log in. Some victims have the questions that how can this virus invade their PCs since they have installed the anti-virus programs on the infected PC? That is a good question, for most of the anti-virus programs, they need time to find out the solution to handle the virus infection because new viruses are created everyday and those viruses may be able to change their names and hide their positions on the infected PC. That means those virus especially the PRISM virus may escape from the tracking of the security programs like anti-virus or firewall. What is more, this nasty ransomware can even forbid the anti-virus from running when the PC is infected. That is the reason we can classify this virus as the top virus.
Will my computer unlock if I pay $300 to them? The answer is no! You need to realize PRISM virus is created by the virus maker, it belongs to a Internet scam that you can not trust it at all. Some victims are afraid of being in the trouble because they can see the words “NSA INTERNET SURVEILLANCE PROGRAM, PRISM, COMPUTER CRIME PROSECUTION SECTION”, the red sentence “YOUR COMPUTER HAS BEEN BLOCKED” and the logo of the Department of Justice, Federal Bureau of Investigation and National Security Agency on their screens. This ransomware will claim that your computer is blocked by the government department because you have broken the laws by watching the children abuse, porn or something else, all the data on your PC are blocked by the National Security Agency Internet Surveillance and your actions are recorded for safety as well. You have the chance to unlock your PC by paying $300 fine by Moneypak, if you refuse to finish payment, all the data will be erased and your PC will suffer a permanently lock. Being imprisoned or $25,0000 fine can be the additional punish if you refuse to pay the fine or try to unlock your PC without paying. These message are so real that some victims will decide to believe them and finish payment by Moneypak. Please stop being foolish, those locking messages will not be published by any legit government departments. This tricky virus just cheats the victims by using the fears. The naive victims will find that their PCs are still blocked by the virus even they finish $300 payment by the Greendot Moneypak voucher, but it is too late to get their money back. Those kinds of the ransomware(Like FBI virus, DOJ virus and ICE virus) will tell the victims to use the Moneypak to finish payment because it is hard to get the money back even the victims realize they are cheated. If you and the people around you still have no idea about this virus infection, please remember from this moment, your PC will not be blocked by any government departments for any reasons, next time when you see this PRISM virus or similar virus is on your PC, it is no need to worry about what you exactly do that breaks the laws, the problem of the police, fine and prison at all. The PRISM virus is totally a big scam. So there is one thing you need to do, that is to remove this nasty ransomware from your PC to avoid further damage.
It will take control of your computer rapidly once it is downloaded.
It will encrypt all of your files on the compromised PC.
It will pretend itself as a legit warning and then ask for a ransom.
It can disable your task manager and even pop up in safe mode.
It can connect to a remote IRC server and forward the data to cybercriminals without a computer user’s awareness.
It can’t be simply uninstalled or removed in control panel.
Since PRISM virus can block your antivirus programs to stop them from running even lock your PC entirely, under such circumstance, manual removal is required to handle with the virus. This manual removal guide is for advanced computer users to follow. If you are not 100% confident of what you will have to do, it’s suggested to get help from experts.
Please do a system backup before you start to delete this Ransomware virus manually.
1. Restart your PC before windows launches, tap “F8” constantly. Choose“Safe Mode with Networking” option, and then press Enter key.
2. Press Ctrl+Alt+Del keys together and stop the Ransomware processes in the Windows Task Manager.
Random.exe (The name of the virus process may be different all the time)
(If you can’t figure out the process of the virus, you can end the process called explorer.exe first so that virus won’t come up)
3. Delete associated files related to PRISM virus from your PC completely as follows:
C:\Documents and Settings\<Current User>
4. Search for all related registry entries infected by this dangerous virus and wipe them out:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
5. Reboot the computer to normal mode when the above steps are done.
In general, PRISM Virus will attack the PC which runs the Windows System including XP, Vista, 7 and 8. It usually attack the victims located in the United States of the America but sometimes victims in other countries can be invaded as well. As we mentioned before, PRISM virus is created by the hijacker for the malicious purpose, they get the money and information from the naive victims by acting as the real government department. All the messages shown on this ransomware can not be trusted at all, paying $300 by Moneypak to them can not unlock the computer because that is the way virus maker earns the money. What about ignoring the virus? Firstly if you don’t get rid of it from your PC, you can not use your machine at all because this virus won’t let you do anything after you log in. Since the anti-virus may not be able to remove this ransomware, it is suggested that you should remove PRISM virus manually. Secondly, if the virus keeps staying on the infected PC, it can run a backdoor process automatically, the virus maker have the ability to get into your PC to steal your personal information like account’s number and password, E-mail and important files on the infected machine. What is worse, different viruses can be downloaded to the infected PC when the time goes by, that is why some victims find that these are more than 1 viruses like browser hijack redirect, Worm and Trojan horse on the infected PC. Do not hesitate, you need to start to remove this virus now.
Note: Manual removal is a skillful and risky job, if any mistakes are made in the process, you may damage your computer immediately. If you are not sure how to do, please contact YooCare PC experts 24/7 online for help right now.
Published by Selina Lynmich, last updated on August 17, 2013 1:07 pm | How to Guides