‘PRS for music’, also known as PRS for music Metropolitan Police, is detected as a ransomware scam that ties to extort money from unsuspecting computer users. Earlier this month, Performing Right Society has issued that this virus has nothing to do with PRS for Music and they are investigating this issue. Whatever, the cyber crooks use their logo, in association with Metropolitan police apparently, to make it the most genuine looking scam that you almost get used to see in a long time. Such a nasty trick is revealed and it still circulates in the wild.
What PRS for music ransomware does exactly?
Once installed, it hijacks your Desktop with a rather professionally done full screen warning that claims to be from PRS for Music and Metropolitan Police. See its full screenshot as follow:
The warning statement “Illegally downloaded music files have been found on your computer and for this reason your computer has been locked” is the very trick to swindle money with credit-confusion masquerade.
I have no idea about the copyright laws in the United Kingdom but even if there is such an act, also do not be panic and keep calm. To further scare you into thinking that PRS for Music warning is a real deal, cyber crooks even use Geo IP functions to determine your IP address and host name. And then, it calls the command and control server before displaying the actual warning. It also needs to mention that these cyber crooks also target computer users in other countries such as Germany, France, the Netherlands, Switzerland, Austria.
When running, PRS for Music scam/ransomware claims that the illegally obtained music files were encrypted and moved to protected folder. DON’T believe in such fake and just bypass it. Despite this scam seems hard to remove, it’s not that sophisticated and even has some critical bugs to enable some simple steps to get rid of. What’s more, PRS for music ransomware claims that you need to pay £50 to avoid prosecution and imprisonment. NEVER LET THIS SCAM WIN.
Do not worry about this confusing ransomware as it can neither steal your privacy information nor delete any of your files. All you need to do with it is to remove it upon sight. However, if you are not good at computers, simply take your computer to a local repair store.
Removal Option 1 Using Safe Mode to recover your computer
Anvi Rescue Disk is a brand-new blockbuster developed by Anvisoft to help users remove ransomware infection. If your computer is locked up due to ransomware infection and even unable to boot into safe mode, then you may need this powerful ransomware killer–Anvi Rescue Disk to save your computer OS.
Anvi Rescue Disk Download:
(Note:rescueDisk.iso is a large file download; please be patient while downloading.)
Details about how to remove this ransomware with Anvi Rescue Disk, please refer to this article:http://www.anvisoft.com/resources/how-to-unlock-and-recover-the-computer-using-anvi-rescue-disk/
You may also need to check the article about Tutorial on Network Configuration if you fail to connect to Internet cloud when you are using Anvi Rescue Disk to recover your computer.
For any question, please feel free to let us know. You can simply leave a reply or send us an email (firstname.lastname@example.org).
Ransomware Removal Guide video
Option 2 Safe Mode with Command Prompt Restore
In some case,when your computer is not severely infected, you can easily recover your computer with Windows restore point. For detail information , please read more on following steps.
Unplug your Internet Cable and boot your computer into safe mode or normal mode. Please note that you should log in as administrator. By disconnecting your operating system from Internet, PRS for music Ransomware Virus will be disabled to run on your computer.
Once the Command Prompt appears you only have few seconds to type “explorer” and hit Enter. If you fail to do so within 2-3 seconds, the ransomware virus will not allow you to type anymore.
Win XP: C:\windows\system32\restore\rstrui.exe and press Enter
Win Vista/Seven: C:\windows\system32\rstrui.exe and press Enter
Follow all steps to restore or recover your computer system to an earlier time and date (restore point), before infection.
Download and install Anvi Smart Defender to remove all threats detected and reboot your PC. A good antivirus program can prevent your computer from getting those similar infection in future. We highly recommend you to install your computer with a legitimate antivirus/antimalware program. Anvi Smart Defender can provide computers with real-time, smart and powerful protection against viruses, Trojans, adware, spyware, ransomware, rogueware, bots and other online threats.
Anvi Smart Defender Download