How to Get Rid of NSA PRISM Virus - Computer Has Been Blocked by NSA PRISM Virus

NSA PRISM Virus "Your computer has been locked due to suspicions of illegal content downloading and distribution" - how to remove? Your computer has been blocked by NSA PRISM Virus? How to remove NSA Prism Virus from XP, Vista Win7 and Win8?

What is NSA PRISM Virus ?

Threat Type: Ransomware, Computer-locking malware
level: Severe
Targeted OS: Windows XP, Windows Vista, Windows 7, Windows8

NSA Prism Virus ( also known as NSA Internet Surveillance Program virus, Computer Crime Prosecution Section virus) is a new MoneyPak virus that has been designed by hackers for cyber crims. NSA Prism Virus pushes users into paying a fine/fee of of $300 to unlock the screen. The payment is asked to transferred via MoneyPak, PaySafecard and Greendot prepayment system, which makes it more trustworthy. NSA Prism Virus blocks users’s screen and pops up the massage “ "Your computer has been locked due to suspicions of illegal content downloading and distribution", which is very scary. But users need to realize NSA Prism is a scam virus and it has nothing to do with governmental authority in USA. Normally, users are threaten by the warning “ computer has been blocked because the prohibited downloads or use of software, music, video or child porn thing, which violate the copyrighted law. NSA Prism Virus displays fake alters and users need to get rid of NSA Prism virus as quickly as possible.

 Possible qustions:

• My computer has been blocked by NSA Prism Virus, what should I do?
• NSA Prism Virus blocks all my access, I cannot get my desktop now.
• I have advanced protection programs( Norton, AVG, MSE), why didn’t my antivirus block NSA Prism virus?
• How to completely get rid of NSA Prism virus? I cannot load safe mode now.
• Is NSA Prism the real police? I am so scared. 
• Do I need to pay the money to unlock my screen or am I being put into jail?

Learn more about NSA Prism virus

NSA Prism virus ( also known as NSA Internet Surveillance Program virus, Computer Crime Prosecution Section virus) is a typical ransomware virus. The main purpose of this malware scam is to collect money from users. NSA Prism virus is used by hackers to threaten naive users. NSA Prism virus appears with legitimate logo and name to make it job easier. But users need to ignore the warnings. 

"NSA Internet Surveillance ProgramPRISMComputer Crime Prosecution Section
Your Computer has been locked!
Your computer has been locked due to suspicions of illegal content downloading and distribution.
Your case can be classified as occasional/unmotivated, according to 17 (U.S Code)Thus it may be closed without prosecution.Your computer will be unblocked automatically."

NSA Prism virus ransomware can simply enter into users’ computer using spam email attachments, files-sharing resources, drive-by downloads or other hack domains. It can stop you from loading the window because this NSA Prism virus has changed the startup settings. it is a kind of variant originating from Reveton family that promotes cyber crimes for money. The fine is not existed. Don’t be fooled by NSA Prism virus.


Thought NSA Prism is a fake application, users need to remove it without delays. Because NSA Prism virus is possible gather the privacy information and expose on the public sites, which is very horrible. Besides, it can damage windows registries and drop additional threats to make computer crashes. You should eliminate NSA Prism virus immediately. Manual Help Below 

Simple Video Guide to Help Remove NSA Prism virus

Step one: Boot your computer and get into Safe Mode with Command Prompt
Restart your computer> keep tapping F8 untill you see advanced boot option> select Safe Mode with Command Prompt> hit Enter button to access

Step Two: Input the command to disable all startup items associated
1. Input msconfig into the box then press Enter
2. Click the msconfig search result. The utility will open in a new window.
3. Click the Startup tab. You'll see a list of programs that start when your computer starts.
4. To stop a program from automatically launching when you boot the PC, uncheck the box next to its entry.  5.When you are finished deselecting startup items, click OK and restart your PC to the normal mode.

 Step three: Boot your computer normal mode and remove all associated files
%SYSTEMDRIVE%\*.*
%USERPROFILE%\*.*
%USERPROFILE%\temp\*.exe
%USERPROFILE%\AppData\Local\*.*
%USERPROFILE%\AppData\Local\*.
%USERPROFILE%\AppData\Local\temp\*.exe


 Step four: Open Registry Editor> Open Start Menu, type  Regedit> click OK.>remove the following registry entries

HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
HKLM\SOFTWARE\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
HKLM\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
HKLM\SOFTWARE\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
HKLM\SOFTWARE\Classes\CLSID\{71B1DF81-18D9-4E5B-9493-CAB02B6E9D8F}
HKLM\SOFTWARE\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
HKLM\SOFTWARE\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}

More variant of Moneypak Virus

NSA Internet Surveillance Program virus is a piece of  ransom family that is similar to
The ICE Cyber Crime Center
Mandiant USA Cyber Security virus
United State Homeland Security Virus
FBI Department of Justice Virus
Dirty Decrypted.exe Virus

NSA Prism virus is a very dangerous one. It must be removed timely and completely to avoid more damages. This manual removal is a bit complex for some users who have limited computer knowledge. If you cannot understand or figure out this removal procedure, please Contact MiTechMate PC Repair Center for More Instructions.