Remove SUISA Trojan (Paysafecard Ransomware)


SUISA Trojan is a ransom malware that locks the computer and prevent user’s access. Once this ransom program is present, you will see a header warning “SUISA – Ihr Computer ist gesperrt.” It is not common to see this virus on other countries other than targeted region. It is intended to strike computer users located in Europe particularly Switzerland.

This threat normally spreads in a way that other computer virus is deployed. Infected web sites, Trojan infection, and file-sharing servers are just some sources of the infection. An attacker may also use Spam email campaign; however, the method may be obsolete because most mail servers can identify the threat beforehand. Due to lack of security, file-sharing networks, also known as peer-to-peer connection is the most common channel for distributing SUISA Trojan.

When it is installed on the computer, you may notice that fake warning will override the screen. SUISA Trojan blocks your access to the PC and denies executing any of the programs. The warning states that you have committed various online violations and request that you must pay the fine before it can unlock the computer. For this reason, the threat it tagged as SUISA Ransom Malware.

Official web site of SUISA have posted a warning to the public regarding malware authors using SUISA logo and name. Here is the English translation of the said public warning.

Logo and name of SUISA currently abused by a malicious software that blocks infected PCs. SUISA distances itself in all forms of this criminal act logo and name SUISA be used to intimidate and PC users to pay a charge between 75 and 100 francs via paysafecard request. Affected users should not make these payments.

This is not the first time that this virus has appeared in European region. There are other malware of the same nature. We highly suggest that you remove the fake SUISA warning before it can further harm the computer. Follow the guide on this page to delete the malware from the compromised PC.

What are symptoms of SUISA Trojan Infection?

suisa-trojan

Fake SUISA infection produces alert messages that override the desktop. It issues warning stating that you have violated copyright laws by downloading and distributing patented materials. See image above for your reference.

Threat Summary

Threat Name: SUISA Trojan
Type: RansomLock
Brief Description: This type of malware locks the computer or desktop making it unusable.

Description

SUISA Trojan is a ransom malware that locks the computer and prevent user’s access. Once this ransom program is present, you will see a header warning “SUISA – Ihr Computer ist gesperrt.” It is not common to see this virus on other countries other than targeted region. It is intended to strike computer users located in Europe particularly Switzerland.

This threat normally spreads in a way that other computer virus is deployed. Infected web sites, Trojan infection, and file-sharing servers are just some sources of the infection. An attacker may also use Spam email campaign; however, the method may be obsolete because most mail servers can identify the threat beforehand. Due to lack of security, file-sharing networks, also known as peer-to-peer connection is the most common channel for distributing SUISA Trojan.

When it is installed on the computer, you may notice that fake warning will override the screen. SUISA Trojan blocks your access to the PC and denies executing any of the programs. The warning states that you have committed various online violations and request that you must pay the fine before it can unlock the computer. For this reason, the threat it tagged as SUISA Ransom Malware.

Official web site of SUISA have posted a warning to the public regarding malware authors using SUISA logo and name. Here is the English translation of the said public warning.

Logo and name of SUISA currently abused by a malicious software that blocks infected PCs. SUISA distances itself in all forms of this criminal act logo and name SUISA be used to intimidate and PC users to pay a charge between 75 and 100 francs via paysafecard request. Affected users should not make these payments.

This is not the first time that this virus has appeared in European region. There are other malware of the same nature. We highly suggest that you remove the fake SUISA warning before it can further harm the computer. Follow the guide on this page to delete the malware from the compromised PC.

What are symptoms of SUISA Trojan Infection?

suisa-trojan

Fake SUISA infection produces alert messages that override the desktop. It issues warning stating that you have violated copyright laws by downloading and distributing patented materials. See image above for your reference.

Procedures to Remove SUISA Trojan

Download FREE Removal Tool

Removal steps on this page will help you get rid of the threat effectively using tools and virus scanners. Please make sure that you will carry out the guide in exact order.

Create a USB Bootable Device

Ransom Trojans and viruses will lock the screen and makes the computer unusable. Common ways to deal with this type of infection is to boot the PC using another device. For this tutorial we will do a bootable disk that contains SUISA Trojan remover.

1. Download Kaspersky Rescue Disk from their official server. Click the button below. The file will be in .ISO format.

2. Download this utility called rescue2usb to record your .ISO file into the USB drive. Obviously you need a USB thumb drive at least 512MB in capacity. Plug it to the computer.

3. Once you have the two programs, double-click on the rescue2usb.exe to start creating a bootable USB drive.
4. You will see on the screen in the program called Kasperksy USB Rescue Disk Maker. Click on Browse and locate the .ISO file.
5. Under USB Medium, select the proper drive of your USB device.
6. Click on START. It will now begin to create a bootable USB drive with Kaspersky Rescue Disk in it.

Start the Computer with Kaspersky Rescue Disk.

1. You must set the computer to use other bootable device aside from hard drive. For this procedure, enable your BIOS to boot to USB device. If you are not familiar with this, please refer to your computer's instruction manual.

2. Another option is to access the Boot Menu right after you turn one the PC. It will present a Menu so that you can select a preferred boot drive. Select Removable Devices.

Boot Menu

3. Your computer will now start and load Kaspersky Rescue Disk.
4. If you see a message on the screen, please Press any key to enter the menu. You only have 10 seconds to do this, otherwise it will boot with the hard drive.

5. Next screen will be the interface language. Please select desired language to use.
6. You must run the program in Graphic Mode. This gives you easy access to all commands and menus.
7. End User License Agreement will appear. Please accept to continue using the program. Press 1 to proceed.

Using WindowsUnlocker to Remove SUISA Trojan

1.Click on the K button at the lower left corner of the screen.

2. Select Terminal on the list. It will open a command prompt.
3. Type windowsunlocker and press Enter on your keyboard.

4. On WindowsUnlocker menu, please type 1 to Unlock Windows. This utility will clean the registry for malicious entries.

5. After the cleanup process, it will display the menu once more.
6. Press 0 on your keyboard to exit WindowsUnlocker.

Run a Virus Scan

1. After removing SUISA Trojan, you need to delete all remaining components.
2. Click on the K to display the menu.

3. Select Kaspersky Rescue Disk. This will open the virus scanning tool.
4. You need to update the program first. Select My Update Center tab and click on Start update. This requires an Internet connection.

5. After updating the program, select Object Scan tab and click on Start Object Scan. You must scan the following:

  • Disk boot sectors
  • Hidden startup objects
  • All drives

6. Scanning the entire hard drive may take some time. Please let the scan to finish.
7. Once the scan process is complete, the tool will prompt you for preferred actions on detected threats. Deleting all threats is recommended.
8. You can now turn off the computer, unplug the USB drive, and start Windows in normal mode.

Leave a Comment