Home Malware Programs Ransomware Canadian Security Intelligence Service (CSIS) Ransomware

Canadian Security Intelligence Service (CSIS) Ransomware

Posted: March 13, 2012

Canadian Security Intelligence Service Pop-up Alert Screenshot 1The Canadian Security Intelligence Service (CSIS) ransomware is Canada's own variant of the ransomware Trojan family that's casually known as the 'Ukash Virus,' as in the Scotland Yards Ukash Virus or Strathclyde Police Ukash Virus. However, while the Canadian Security Intelligence Service (CSIS) ransomware is designed to target Canadian computers, the Canadian Security Intelligence Service (CSIS) ransomware may also be a threat to computers in other regions. SpywareRemove.com malware researchers recommend that you learn to identify the Canadian Security Intelligence Service (CSIS) ransomware by its trademark warning message, which will falsely imply that your PC has been connected to criminal activities. A Canadian Security Intelligence Service (CSIS) ransomware infection isn't likely to slip by your notice, however, since the Canadian Security Intelligence Service (CSIS) ransomware's associated ransomware Trojan will try to block you from using other applications. As long as you disable the Canadian Security Intelligence Service (CSIS) ransomware's Trojan via standardized anti-malware tactics, you can regain access to normal software functions. After that, any good anti-malware program should be able to delete the Canadian Security Intelligence Service (CSIS) ransomware and its software lock down.

From East to West: the Journeys of a Canadian Security Intelligence Service (CSIS) ransomware

The Canadian Security Intelligence Service (CSIS) ransomware is the primary symptom of a corresponding ransomware Trojan with a nationality-specific calling card. This Trojan is sometimes identified as Trojan:Win32/Ransom.DU but is more often referred to by names like Strathclyde Police Ukash Virus, Scotland Yards Ukash Virus, Guardia di Finanza Ransomware, Gendarmerie Nationale Ransomware, Police Central e-crime Unit (PCEU) Ransomware or the 'Die offizielle Mitteilung des Bundeskriminalamtes' Trojan. Ransomware Trojans of this family habitually re-brand themselves as a local law enforcement agency while implying that the infected PC has been conducting illegal activities. As a supposed punishment, Canadian Security Intelligence Service (CSIS) ransomware and its ilk will try to prevent you from using other applications until you pay a high fee of roughly one hundred dollars (or Euros, etc, depending on the country in question).

Although the American variant of this Trojan prefers to use Paysafecard, the Canadian Security Intelligence Service (CSIS) ransomware requires you to use Ukash, which is a favorite choice for many other ransomware Trojans in its family. However, SpywareRemove.com malware researchers don't recommend that you pay this fine, since the Canadian Security Intelligence Service (CSIS) ransomware isn't a representative of the CSIS and has zero legal authority. The Canadian Security Intelligence Service (CSIS) ransomware's warning message, which should be considered fraudulent, is identifiable via the text shown below:

Attention!!!
The operating system is locked due to the violation of the laws of the Canada!
Following violations were detected: Your IP address is '[IP address]'. The IP address was used to visit websites containing pornography, child pornography, Zoophilia and child abuse. Your computer also contains video files with pornographic content, elements of violence and child pornography! Spam-messages with terrorist motives were also sent from your computer.
The computer lock is aimed to stop your criminal activity.

The Intel That Will Save Your PC from Canadian Security Intelligence Service (CSIS) ransomwares

The Canadian Security Intelligence Service (CSIS) ransomware and similar ransomware Trojans have been found to use Blackhole Exploit Kits to install themselves on hapless computers without consent. SpywareRemove.com malware experts note that durable security settings for your browser can help to reduce vulnerabilities that Canadian Security Intelligence Service (CSIS) ransomwares may exploit, although actual removal of Canadian Security Intelligence Service (CSIS) ransomware Trojans should normally use a dedicated anti-malware scanner.

Initial attempts to remove Canadian Security Intelligence Service (CSIS) ransomware may be confounded by Canadian Security Intelligence Service (CSIS) ransomware's ability to launch without permission and block any and all other programs, including web browsers and security software. However, SpywareRemove.com malware researchers have found that the Canadian Security Intelligence Service (CSIS) ransomware simply covers up your desktop instead of damaging other programs (although the Canadian Security Intelligence Service (CSIS) ransomware may also terminate processes like Task Manager). This allows you to access blocked applications once you use Safe Mode or other methods to disable the Canadian Security Intelligence Service (CSIS) ransomware.

Technical Details

Additional Information

The following messages's were detected:
# Message
1Government of Canada
Gouvernement du Canada
Canadian Security Intelligence Service
Service canadien du renseignement de sécurité
www.csis.gc.ca
Attention!!!
This operating system is locked due to the violation of the laws of the Canada!
Following violations were detected: Your IP address is [removed]. This IP address was used to visit websites containing pornography, child pornography, zoophilia and child abuse. Your computer also contains video files with pornographic content, elements of violence and child pornography! Spam-messages with terrorist motives were also sent from your computer.
This computer lock is aimed to stop your illegal activity.
To unlock the computer you are obliged to pay a fine of $ 100.
You must pay the forfeit through Ukash:
To do this, you should enter the 19 digits code in the payment form and press OK (if you have several codes, enter them one after the other and press OK).
If an error occurs, send the codes to address deposit@canada.gov

One Comment

  • mr.lucas says:

    HI I need help to remove this virus some Canadian association of chiefs of police and I just found out its a scam from you're video how do I get rid of it please help

Loading...