Effectively Remove National Security Agency Virus (Removal Guide)

National Security Agency virus is classified as a malicious ransomware whose intention is to extort money from the innocent PC users. Once this ransomware is installed on your system, it will entirely lock your computer screen with a message saying that your computer is locked due to the fact that you have broken the copyright law or illegally distributing contents. And in order to get your computer unlocked, you must pay a fine of $300 through Ukash or any other payment systems. You should not fall into this trap and pay out any money. What you should do it to remove this threat from your computer promptly.

There are several methods to remove National Security Agency virus:

 

Method1: System restore

Step1. Restart your computer and keep pressing F8 key before Windows launches. When Windows Advanced Options menu appears, you should use the arrow keys to select Safe Mode with Command Prompt and then press Enter.

Step2. Type “explorer” at the pop-up Command Prompt and press Enter. Please note that you have to type the command within 2-3seconds or the ransomware will lock your PC soon.

Step3. When Windows Explorer appears, locate to C:\windows\system32\restore\rstrui.exe (For Windows XP) or browse to C:\windows\system32\rstrui.exe (For Windows Vista/7) and then press Enter.

Step4. In the pop-up System Restore window, select a restore point before infection and follow its instructions to finish the System Restore task.

Step5. Boot your computer into the normal mode.

 

Method 2: Remove the ransomware manually.

1. Restart your computer and wait for a while. When something appears on the computer screen, please press the “F8” key repeatedly until you see the Windows Advanced Option Menu. Select “Safe Mode with Networking” by using the up and down arrow keys and press Enter. The computer will continue to boot and then run in the Safe Mode with Networking.

2. Use the key combination “Ctrl+ Alt+ Delete” to open the Windows Task Manager. Click the “Processes” tab and you will see a list of all the processes that are currently running under your user account. Check whether there are any processes related to National Security Agency virus running. If there are, stop them using the “End Process” button. Then, exit the Task Manager.
3. Press Windows Key + R key together to open the Run command box. Type “regedit” into the box and press Enter. When the Registry Editor is openend, you have to find out and delete the registry entries related to the virus.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\random
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

4. Go to the C drive and clean up files related to the virus as follows:

%AllUsersProfile%\[random]
%AllUsersProfile%\Application Data\.exe
%AllUsersProfile%\Application Data\.dll

 

Method 3: Remove the ransomware using an automatic removal tool.

1. Restart your computer into the Safe Mode with Networking.
2. Download a powerful removal tool and install it on your computer.
3. Run the removal tool to detect the ransomware. Once the threat is found, remove it immediately.

Note: The best way to clean up National Security Agency virus is to use a removal tool, for it is much easier, safer and more effective.