Home » Removal instructions » Fixing computer, which is infected with Department of Justice Virus

Community Answers

1. This solution has been deemed correct by the post author

   

   81

   

   4-9-13

   2-spyware.com Support says:

   Hello, thanks for asking on 2spyware forum.

   First of all, you should know that Department of Justice virus, just like other viruses that belong to Ukash group, mutate, so there is a chance that you have a new version of ransomware. However, you can use these options, not only the USB stick, when trying to unblock your computer and remove Department of Justice virus for good:

   First option:

   1. Reboot to Safe mode with command prompt. Your virus should not be active after doing this.
   2. Run regedit and search for Winlogon.
   3. Find a key named as ‘Shell’ under Winlogon. It should refer to Explorer.exe or be blank. If you see something else referring an executable in one of folders, replace it to explorer.exe.
   4. Save changes and additionally reboot to Safe mode with networking.
   5. Run msconfig and disable all unnecessary startup entries.
   6. Finally, run anti-spyware and remove malicious executables it detects.

   Second option:

   Try to deny the flash. For that, go to Macromedia support and select ‘Deny’: http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.

   Third option:

   If you are a paid Spyhunter’s customer, you can get a free assistance from its technicians. Here you can read more about that: What to do when antispyware program fails to remove infection?

   Feel free to contact us again if these steps won’t be helpful for you. For more information, read: How to remove Department of Justice virus?

   2spyware team

   Reply

   +3

   Was this answer helpful?

   LikeDislike
2. 

   1

   

   4-9-13

   Cazzie says:

   While I appreciate your response, you may not have read my statement clearly concerning the DOJ Virus. There is now a version that will not allow any booting from any safe mode option. Suggest you try to address this from that point of view, since complaints of any new infections of this virus will more than likely, be that version.

   What is your take on the possible “Slave Drive” solution, using the infected drive as a slave in a different computer?

   Thanks

   Reply

   +8

   Was this answer helpful?

   LikeDislike

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.