Remove Department of Justice Virus
Removal instructions

Severity scale:  
Department of Justice Virus
is also known as Ukash virus | Type: Ransomware | Tags: Ukash

Department of Justice Virus is one of the latest threats from Ukash virus group that try to attack people living in the United States of America. This threat belongs to the category of ransomware, so it is designed to get inside the system secretly and then try to rip users off. Just like FBI virus, FBI Moneypak or FBI Green Dot Moneypak virus, it creates lots of troubles for its victims by locking the system down. This results is complete system's take over - user becomes incapable to get on the Internet, launch legitimate anti-malware programs or do other things on his PC. He only sees a forged Department of Justice Virus alert, which states that user is caught doing illegal activities on his computer. Before you fall for this alert, you must note that such organizations as Department of Justice do NOT collect their fines in such way. You must remove Department of Justice Virus immediately!

HOW CAN I GET INFECTED WITH Department of Justice Virus?

This scam is designed to use the same ways intrussion as all previous Ukash viruses: it uses spam emails, freeware, shareware and other sources to come inside undetected. Once there, it locks the system down and shows its only message, claiming that Windows system has been blocked because you have been using copyrighted content, visiting pornographic websites or even spreading malware. For that, now you have to make a payment of $200 using the Moneypak prepayment system. Here's how this message looks like:

Your computer has been locked!
This operating system is locked due to the violation of the federal laws of the United States of America (Article: 1, Section 8, Clause 8; Article 202; Article 2012 of the criminal code of the U.S.A. Provides for the deprivation of liberty for four to twelve years.)
Following violations detected:
Your IP address was used to visit websites containing pornopraphy, child pornography, zoophillia and child abuse. Your computer also contains video files with pornographic content, elements of violence and child pornography!
You have 72 hours to pay the fine, otherwise you will be arrested.

No matter how trustworthy it seems, you must ignore this alert because it has nothing to do with Department of Justice. If you pay this $100 or $300 fine, you won't have your computer unlocked and you will lose your money as well. In order to avid that, you should remove Department of Justice Virus as soon as possible.

HOW CAN I REMOVE Department of Justice Virus?

In order to remove Department of Justice virus, you should try following this information. It includes different methids that MAY work in this virus removal. Remember that manual removal methid can be used only if you have enough nowledge about computer's system and its architecture:

* Users infected with Department of Justice virus are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Flash drive method: 

  1. Take another machine and use it to download STOPzilla, SpyHunter or other reputable anti-malware program.
  2. Update the program and put into the USB drive or simple CD.
  3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
  4. Reboot computer infected with Department of Justice virus once more and run a full system scan with updated anti-malware program.

* Manual Department of Justice removal (special skills needed!):

  1. Open Windows Start Menu, enter %appdata% into the search field, click Enter.
  2. Go to: Microsoft\Windows\Start Menu\Programs\Startup.
  3. Remove ctfmon (don't mix it with ctfmon.exe!).
  4. Open Windows Start Menu, enter %userprofile% into the search field, click Enter.
  5. Go to Appdata\Local\Temp and remove rool0_pk.exeDelete [random characters].mof file
  6. Delete V.class
  7. Run a full system scan with updated SpyHunter to remove remaining Department of Justice virus files. You can also use STOPzilla or Malwarebytes Anti Malware.

UPDATE: There is a new Ukash virus, which uses the logo of the Department of Justice. This threat now says 'Your computer has been blocked! The work of your computer has been suspended on the grounds of the violation of the law of the United States of America". Similarly to the previous version of the Department of Justice virus, this ransomware shows a list of laws, that have been violated, and asks to pay the fine of $300 using MoneyPak prepayment system. Besides, it speaks to the victim!

Automatic Department of Justice Virus removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Department of Justice Virus you agree with our Privacy Policy and Agreement of Use.
Do it now!
remover for Department of Justice Virus Happiness
Compatible with Microsoft
SpyHunter is recommended remover to uninstall Department of Justice Virus. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Department of Justice Virus using SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

We are testing STOPzilla's efficiency at removing Department of Justice Virus (2012-09-25 06:38:27)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Department of Justice Virus (2012-09-25 06:38:27)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Department of Justice Virus (2012-09-25 06:38:27)
Defender Pro Ultimate
We are testing Defender Pro Ultimate's efficiency at removing Department of Justice Virus (2012-09-25 06:38:27)
Virus Removal Phone Support
Help Line to remove Department of Justice Virus

Department of Justice Virus screenshot

Geolocation of Department of Justice Virus

This map reveals the prevalence of Department of Justice Virus. Countries and regions that have been affected the most are: United States.

QR code for Department of Justice Virus removal instructions

Department of Justice Virus qrcode QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like Department of Justice Virus are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Department of Justice Virus right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.

Removal guides in other languages

Information added: 2014-10-16 01:57
Information updated: 2014-10-16 01:57

Ask us discussions

Modern viruses are really hard to remove. They have random file names, random registry entries, they can immitale legal products and files. Removal instructions sometimes can't Help to remove infection manually. Please take a look at our discussion where users like you share they experience in fighting the parasite:

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Users comments about Department of Justice Virus:

Its actually much simpler to remove this virus. Im no computer nerd or anything, but I effectively removed this virus without all the technical crap.

First, manually shut off your computer.
As your system reboots, constantly hit the F8 key until the Boot screen shows up.
From there, click a Safe Mode option.
Once in Safe Mode, access the internet and download Malware Bytes.
Have the program run a full scan. Once the virus is detected, remove it- then restart your computer.
BLAMO! Virus is gone.

Youre welcome.
it isnt working it says we cant download the malware bytes because we are on safe mode, is there a way to downlaod something on safe mode? get back to me ASAP thanks
Run safe mode with network mode
I did as you said and the virus is GONE!! Your solution was so much simpler that the other archaic options out there on the web.

Thank you.
I did this and the virus seemed to be removed, then reappeared three days later. I just did this same method again and its not doing anything! Im in safe mode with networking at the moment.
Read Aubreys comment. Oh and on my computer it reset the timer that tells you how much time u have to pay everytime we restarted the computer
Thank you for your great information, after followed all instruction, now I am free from virus
Great advise. Way faster than the other suggested ways and it only took 15 minutes to get everything fixed. Thanks
If you have an anti-virus program and you should. I have AVAST and ccleaner.

1. Shut your PC off using the off button. Do not try alt/ctrl/delete (three finger salute). It wont work.
You need to shut down manually. Go to control tower and shut it off.

Give it a minute or so and turn it back on. This will give you access to your programs. Do NOT try to get back
on the Net.

2. Run your Anti-Virus program. It may try to block you again. If so? Do all of the above again! and just let it run
until your PC is clean. Avast will clean it.

3. Run ccCleaner and you will get rid of it
MS Security Essentials caught and quaranteened this
How long should a scan take?
I (not me actually a co-worker) must have a new version of this it blocks out safe mode now. Cant login as administrator either blocks that to. Any ideas??
im having the same problem...cant perform any of the fixes suggested. can anyone help? ill try calling the Smartsupport # 888-340-9777
I started my computer in safe mode and restored computer to previous restore point and virus was gone after restoring.
I did what Aubrey suggested and it worked perfect. The scan took almost 3 hours. I then ran ccleaner after I restarted. I have Avast, aol security and Verizon security, how do I still get a virus. All the software security really slows down my laptop.
It blocks me even in safe mode, I dont know what go do
Same here. Blocked in every safe mode. Any other options?
I was infected twice. I was watching streaming video then suddenly DOJ appeared. On my first infection I was puzzled I let the computer running while the DOJ displayed on my screen. That was a fatal mistake! Not only it locks up my windows but also the safe mode. I have to go through safe mode with MS DOS command prompt to transfer my documents then reformat the whole computer. The combofix, AVG and other malware was unable to see the virus.

On my next infection I was watching streaming videos again on a different website, again DOJ came knocking. This time I recognize the banner and immediately turn off the computer. I then boot up on safe mode with network. I run malwarebyte and got rid of the virus.

Lesson learned: Turn off your computer asap dont let it run because the virus would write itself deeper into the system. I have an AVG anti virus and Microsoft Security Essential running when I got the 2nd infection. They are useless against the DOJ virus. Now I installed malwarebytes hope this will protect me from DOJ attack.
I booted into safe mode with networking, removed ctfmon from startup, downloaded Malwarebytes and ran a full scan and it was gone.
So this is just a virus, it has nothing to do with the law?
More comments...

Post Comment

Attention: Use this form only if you have additional information about Department of Justice Virus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook
Ask us
What's your antispyware?
I failed to remove Department of Justice Virus using SpyHunter.


add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!