Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Slow Computer

NSA Virus

NSA Virus is a dangerous ransomware infection which installs itself without the user’s permission. The infection creates new registry entries in the Registry, drops its files in various locations, and modifies the running process so that you cannot access the desktop and use the PC as usual. The only mission of NSA Virus is to lure the computer user into paying the so-called fine of $300.  Once you find that your computer is afflicted by NSA Virus, which is also labeled as PRISM Virus, ignore the information provided its warning and take immediate measures to remove it from the PC.

According to the bogus warning, you are contacted by the National Security Agency (NSA) which implements the PRISM program. Moreover, the warning contains the logo of the Federal Bureau of Investigation (FBI) and the Department of Justice. The emblems are supposed to convince the user that the warning is legitimate.

Furthermore, the ransom warning contains false accusations. The computer is said to be locked because you are said to be suspected of downloading, using, and distributing illegal content, such as child pornography. It is highlighted in red that the individuals who are related to this type of crime may be imprisoned and obliged to pay a fine up to $250.000.

You will find that the warning indicates the status of the payment, which reads “Waiting for payment”. There is no need to pay $300 for the money will be received by the criminals hiding behind NSA Virus. MoneyPak, which is presented as the method of paying, can be used on the partner’s websites or in some other ways indicated on the official website of the service. In the present situation, your computer is affected by a dangerous Trojan horse, which you should remove right now.

The removal will be an easy procedure if you use a powerful spyware removal tool. We recommend that you install SpyHunter as this application has already removed different ransomware infections, including Ministerul Afacerilor Interne virus, Služba Kriminální Policie a Vyšetřování virus, and many others. The instructions below will help you install the application in the right way so that you can discover how this time-saving program works.

NSA Virus Removal

Windows Vista and Windows 7

  1. Restart the computer.
  2. Once the BIOS splash screen loads, tap the F8 key.
  3. Using the up/down arrow keys, select the Safe Mode with Networking option and press Enter.
  4. Go to http://www.pcthreat.com/download-sph and download the anti-spyware program.
  5. Install it and launch a system scan.

Windows XP

  1. Restart the computer.
  2. Tap the F8 key once the BIOS splash screen loads.
  3. Select Safe Mode with Networking using the up/down arrow keys and press Enter.
  4. Click Yes on the dialog box.
  5. Open the Start menu.
  6. Launch the Run command and type msconfig in the Open box.
  7. Click OK.
  8. Open the Startup tab and click the Disable All button.
  9. Click Apply.
  10. Download SpyHunter from our website.
  11. Restart the PC.
  12. Install the program and remove NSA Virus.

Windows 8

  1. Press the Windows key.
  2. Once in Metro mode, click the Internet Explorer tile.
  3. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the application and scan the PC.
Download Spyware Removal Tool to Remove* NSA Virus
  • Quick & tested solution for NSA Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove NSA Virus

Files associated with NSA Virus infection:

obvwo.exe
ctfmon.exe
50E1.exe
Task Scheduler.exe
%ALLUSERSPROFILE%
ex3b.dll
rool0_pk.exe
msavfit.exe
svchost.exe
VaultSysUi.exe
administration.exe
魔法桌面第三方主题破解补丁V1.1.exe
install_0_msi.exe
UpdatePriv.exe
%LOCALAPPDATA%\lollipop
ubvhynpxh.exe
iner.exe
wpbt0.dll
sqlncli.exe
scvhost.exe
Other.res
WINDED6.exe
n.
p1.exe
wlsidten.exe
ssntvs.exe
dqnbdq7.dss
acuvzomo.exe
96dddda4.dll
wahneaqa.exe
aPr0hY9.exe
%WINDIR%\system32
wlsidten.dll
videotwisterSA.exe
puozlkmyj.dll
wgsdgsdgdsgsd.exe
Firewallservice.exe
hwj3ba6j.dss
zqmkrehUkpoKfsafsaZg.exe
mplayer2.exe
%AppData%
%WINDIR%\Temp
%SystemDrive%\????????????
setex.exe
systemcpl.exe
jsdhlexdqkllnbcxgai.bfg
Q3d38543.exe
bzsbkotiu.exe
%CommonProgramFiles%
ifgxpers.exe
crack.exe
csrsss.exe
najeoxtt.exe
dtkmujvo.exe
TimeDateMUICallback.exe
taskhost.exe.exe
securitywindrv.exe
xmlfilter.exe
87b2cb3916261d5c807bf44262755cb0.exe
m2PythonLoader.exe
WinSyncMetastore.exe
questscan.dll
ieudator.dll
DA0B.exe
xctqakcqbeo.dll
UpgradeHelper.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
xaZYOVJW.exe
%UserProfile%
bf8h8d02hf.exe
msnmsgrr.exe
3511172082012Build.exe
msdtmsrd.exe
DLL321.dll
%LOCALAPPDATA%\Temp
%APPDATA%\system
gcrwcoak.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
JfCqQ5JC.exe
msshell.exe
OmaSG21e.exe
C87C.exe
b34btbztdb0vavaw.exe
00b5d693.exe
pmstcdjwz.exe
comeo.exe
xlqbteeb.exe
ACEIEAddOn.dll
yaiiwockc.dll
Nbt.exe
%ALLUSERSPROFILE%\Application Data
dyjdl.exe
idiokbbrv.exe
wjthvwjb.dss
brenasa.exe
bvhylsviw.exe
MusicCollector.exe
secproc_isv.exe
oygqyunapnp.exe
pYunY8m4VL3qLc.exe
audipbrd.exe
NTServiceManager.exe
uenovfiu.exe
2084473.dll
00qbipeq.exe
%APPDATA%\updates
%APPDATA%\Task Scheduler
Updating.exe
skype.dat
Piranha.exe
%TEMP%
rvcbcyks.exe
SyncHostps.exe
msn.exe

NSA Virus DLL's to remove:

ex3b.dll
DLL321.dll
ieudator.dll
questscan.dll
xctqakcqbeo.dll
2084473.dll
wpbt0.dll
yaiiwockc.dll
96dddda4.dll
wlsidten.dll
puozlkmyj.dll
ACEIEAddOn.dll

NSA Virus processes to kill:

bf8h8d02hf.exe
crack.exe
JfCqQ5JC.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
UpgradeHelper.exe
uenovfiu.exe
scvhost.exe
secproc_isv.exe
mplayer2.exe
zqmkrehUkpoKfsafsaZg.exe
Piranha.exe
00qbipeq.exe
xaZYOVJW.exe
msavfit.exe
videotwisterSA.exe
wlsidten.exe
50E1.exe
ubvhynpxh.exe
oygqyunapnp.exe
aPr0hY9.exe
UpdatePriv.exe
msshell.exe
xlqbteeb.exe
ctfmon.exe
3511172082012Build.exe
m2PythonLoader.exe
msdtmsrd.exe
acuvzomo.exe
gcrwcoak.exe
securitywindrv.exe
ssntvs.exe
b34btbztdb0vavaw.exe
idiokbbrv.exe
87b2cb3916261d5c807bf44262755cb0.exe
Q3d38543.exe
ifgxpers.exe
NTServiceManager.exe
Updating.exe
dyjdl.exe
Nbt.exe
TimeDateMUICallback.exe
魔法桌面第三方主题破解补丁V1.1.exe
WINDED6.exe
00b5d693.exe
pmstcdjwz.exe
csrsss.exe
sqlncli.exe
najeoxtt.exe
comeo.exe
audipbrd.exe
xmlfilter.exe
msn.exe
brenasa.exe
setex.exe
obvwo.exe
Firewallservice.exe
msnmsgrr.exe
bvhylsviw.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
svchost.exe
Task Scheduler.exe
install_0_msi.exe
systemcpl.exe
wgsdgsdgdsgsd.exe
iner.exe
administration.exe
pYunY8m4VL3qLc.exe
wahneaqa.exe
OmaSG21e.exe
rvcbcyks.exe
dtkmujvo.exe
SyncHostps.exe
C87C.exe
VaultSysUi.exe
rool0_pk.exe
taskhost.exe.exe
MusicCollector.exe
bzsbkotiu.exe
WinSyncMetastore.exe
p1.exe
DA0B.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.