Home Malware Programs Ransomware SABAM Virus

SABAM Virus

Posted: December 2, 2012

The SABAM Virus is a ransomware Trojan that locks the PCs of Belgium-based PC users by displaying fraudulent legal warnings and blocking other applications. The SABAM Virus claims to be authorized on behalf of Belgian Society of Authors, Composers and Publishers to enact legal penalties against your computer due to its supposed violation of copyright-related laws, but SpywareRemove.com malware researchers note that the SABAM Virus is illegal software that's unable to back up its threats of legal action. Instead of paying the SABAM Virus's fraudulent legal fine, you should take steps to disable the SABAM Virus (as elaborated on in this article) and then delete your SABAM Virus with a suitable anti-malware product of your choice.

Don't Be Too Eager to Submit to the SABAM Virus's Media-Protecting Claims

Like very similar ransomware Trojans such as the Koda Virus, the Gema 'Gema 'Access to your computer was denied' Virus, GVU Gesellschaft zur Verfolgung Ransomware, the Buma Stemra Virus, the SIAE Virus and the SGAE Virus, the SABAM Virus tries to portray itself as being an emissary of a legal watchdog group. Pop-ups by the SABAM Virus and its relatives will attempt to leverage the authority of these organizations, along with fraudulent legal threats (such as the future confiscation of your computer) to make you pay a fake legal fine.

SpywareRemove.com malware researchers stress that while the SABAM Virus and its cousins aren't true virus and can't distribute themselves, malware associated with them may distribute the SABAM Virus and company through such methods as e-mail spam or exploiting the Autorun feature of removable drive devices. Most, but not all distribution methods for the SABAM Virus and similar ransomware Trojans utilize drive-by-download exploits that are hosted on either malicious or compromised websites.

The SABAM Virus blocks your entire screen with a borderless browser pop-up that claims that you're guilty of copyright infringement and related crimes, but SpywareRemove.com malware experts have confirmed both the SABAM Virus's inability to detect such crimes and its lack of ties to the real SABAM. While the SABAM Virus is devoted to attacking PC users in Belgium (by detecting the IP address of compromised computers), relatives of the SABAM Virus have been seen throughout almost all of Europe and countries well beyond it.

The Safe Way to Remove a SABAM Virus without Any Undue Prices to Pay

The SABAM Virus uses a simple Registry exploit to launch itself automatically and also blocks other applications while the SABAM Virus is open. Because of this behavior, SpywareRemove.com malware analysts recommend that you reboot Windows to Safe Mode for disabling the SABAM Virus. Alternately, you may launch an operating system from a removable device (such as USB thumb drives). When you've disabled the SABAM Virus and its characteristic pop-up, appropriate anti-malware applications can be used to remove the SABAM Virus without any legal repercussions.

Since the SABAM Virus makes various system changes that should be reverted and also attempts to avoid deletion (unlike benign programs) by normal methods, SpywareRemove.com malware researchers discourage attempts to delete the SABAM Virus manually except in instances of assistance by PC security professionals. Finally, because the SABAM Virus isn't capable of distributing itself, any system scans to get rid of the SABAM Virus also should be thorough enough to detect any related malware that may be installed with the SABAM Virus.

Loading...