IRMA (BSA) Virus Ransomware

IRMA (BSA) Virus Ransomware Image

The IRMA (BSA) Virus is a known Winlocker that takes a computer hostage and then demands a ransom in order to return control to the computer user. Because of this kind of attack, malware like the IRMA (BSA) Virus is commonly known as ransomware and, despite the fact that it is commonly referred to as a Virus, the IRMA (BSA) Virus is actually a Trojan infection. Unlike viruses, Trojans cannot spread on their own and do not corrupt executable files; rather, they rely on the victims themselves to download and install them, much like the Trojans opened their own gates to let in the Trojan horse after which these malware threats are named.

The IRMA (BSA) Virus displays a message supposedly coming from the IRMA (Information Resources Management Association) and also claims to be associated with the BSA (Business Software Alliance). Although both of these agencies exist and protect intellectual property, the IRMA (BSA) Virus message is in no way associated with any of these organizations. Rather, criminals use the names of these organizations to try to give the IRMA (BSA) Virus attack some legitimacy. As part of its attack, the IRMA (BSA) Virus blocks access to all components and files on the infected computer. When the victim logs into Windows, the infected computer displays a full screen message supposedly coming from these organizations. The message will claim that the infected computer was blocked by these organizations because of its association with criminal activities such as illegally copying and distributing software. The IRMA (BSA) Virus then demands payment using a money transfer service such as Ukash, PaySafeCard or MoneyPak.

The IRMA (BSA) Virus is Designed to Attack Computers from All Over the World

ESG security researchers have observed at least two versions of the IRMA (BSA) Virus. While one demands payment using Ukash or PaySafeCard, the others demand payment using GreenDot MoneyPak. Ukash and PaySafeCard are most popular in Europe, meaning that IRMA (BSA) Virus variants demanding a Ukash or PaySafeCard code are most probably targeting computers located in Europe. GreenDot MoneyPak is North American in nature, most common in the United States and in Canada. It is important to understand that entering a payment code will note remove the IRMA (BSA) Virus from your computer. ESG malware analysts have observed that paying the IRMA (BSA) Virus' ransom will result in the loss of your money while the IRMA (BSA) Virus continues to block access to your computer. Because of this, the right course of action is to remove the IRMA (BSA) Virus with the help of a strong anti-malware application.