Removal guide Ransomware

Remove Department of Justice virus (MoneyPak Scam)

By Stelian9 min read151comments

The United States Department of Justice MoneyPak Ransom is a computer virus, which will display a bogus notification, that pretends to be from Department of Justice and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.
The United States Department of Justice virus will lock you out of your computer and applications, so whenever you’ll try to log on into your Windows operating system or Safe Mode with Networking, it will display instead a lock screen asking you to pay $300 in the form of a MoneyPak code.
Furthermore, to make its alert seem more authentic, this virus also has the ability to access your installed webcam ,so that the bogus The United States Department of Justice shows what is happening in the room.
If your computer is infected with The United States Department of Justice virus,then you are seeing the below notification:
The United States Department of Justice MoneyPak virus

The United States Department of Justice Ransom will display the following bogus notification:

Your computer has been blocked
The work of your computer has been suspended on the grounds of the violation of the law of the United States of America.

Article 274 – Copyright
A fine or imprisonment for the term of up to 4 years. (The use or shanng of copyrighted files-movies, software)
Article 183 – Pornography
A fine or imprisonment for the term of up to 2 years (The use or distribution of pornographic Nes)
Article 184- Pornography involving children (under 18 years)
Imprisonment for the term of up to 15 years (The use or distribution of pornographic files)
Article 104- Promoting Terrorism
Imprisonment for the term of up to 15 years (You have visited websites of terrorist organization)
Article 297 – Neglect computer use, entailing serious consequences
A fine or imprisonment for the term of up to 2 years (Your computer has been infected with a virus, which, in turn, Infected other computers)
In connection with the decision of the Government as of August 12, all of the violations described above could be considered as conditional in case of payment of a fine.
Amount of the fine is $200. Payment must be made within 24 hours after the discovery of the violation. If the fine has not been paid, you will become the subject of criminal prosecution.
After paying the fine your computer will be unblocked

The The United States Department of Justice Ransom is a scam and you should ignore any alert that this malicious software might generate and remove this trojan ransomware from your computer.
Under no circumstance should you send any money to this cyber criminals,as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.

Advertisements

The United States Department of Justice MoneyPak Ransomware – Virus Removal Guide

This page is a comprehensive guide, which will remove the Department of Justice infection from your your computer. Please perform all the steps in the correct order. If you have any questions or doubt at any point STOP and ask for our assistance.
The Department of Justice will start automatically when you login to your computer and display its screen locker so that you are unable to access your computer, therefore we will need to remove this infection by using one of the below methods:
OPTION 1: Remove Department of Justice lock screen virus with System Restore
OPTION 2: Remove Department of Justice virus with with HitmanPro Kickstart
OPTION 3: Remove Department of Justice virus with Kaspersky Rescue Disk

OPTION 1: Remove Department of Justice lock screen virus with System Restore

System Restore helps you restore your computer’s system files to an earlier point in time. It’s a way to undo system changes to your computer without affecting your personal files, such as e‑mail, documents, or photos.
Because the Department of Justice virus will not allow you to start the computer in Windows regular mode, we will need to start System Restore from the Safe Mode with Command Prompt mode.

Advertisements

STEP 1: Restore Windows to a previous state using System Restore

  1. Reboot your computer into Safe Mode with Command Prompt. To do this, turn your computer off and then back on and immediately when you see anything on the screen, start tapping the F8 key on your keyboard.
    [Image: F8 key]
    If you are using Windows 8, the trick is to hold the Shift button and gently tap the F8 key repeatedly, this will sometimes boot you into the new advanced “recovery mode”, where you can choose to see advanced repair options. On the next screen, you will need to click on the Troubleshoot option, then select Advanced Options and select Windows Startup Settings. Click on the Restart button, and you should now be able to see the Advanced Boot Options screen.
  2. Using the arrow keys on your keyboard, select Safe Mode with Command Prompt and press Enter on your keyboard.
    [Image: Starting computer in Safe Mode with Command Prompt]
  3. At the command prompt, type rstrui.exe, and then press ENTER.
    [Image: Start System Restore to remove lock screen virus]
    Alternatively, if you are using Windows Vista, 7 and 8, you can type: C:\windows\system32\rstrui.exe , and press Enter. And if you are a Windows XP user, type C:\windows\system32\restore\rstrui.exe, then press Enter.
  4. System Restore should start, and you will display also a list of restore points. Try using a restore point created just before the date and time the Department of Justice lock screen virus has infected your computer.
    [Image: Restore settings to remove ransomware]
  5. When System Restore has completed its task, start your computer in Windows regular mode, and perform a scan with Malwarebytes Anti-Malware and HitmanPro, as seen in the next step.

STEP 2: Remove Department of Justice malicious files with Malwarebytes Anti-Malware Free

Even after using System Restore,

  1. You can download Malwarebytes Anti-Malware Free from the below link, then double-click on the icon named mbam-setup.exe to install this program.
    Download MalwarebytesFree official installer. Your download starts right away.
  2. When the installation begins, keep following the prompts in order to continue with the setup process, then at the last screen click on the Finish button.
    [Image: Malwarebytes Anti-Malware final installation screen]
  3. On the Scanner tab, select Perform quick scan, and then click on the Scan button to start searching for the Department of Justice malicious files.
    [Image: Malwarebytes Anti-Malware Quick Scan]
  4. Malwarebytes’ Anti-Malware will now start scanning your computer for Department of Justice virus as shown below.
    [Image: Malwarebytes Anti-Malware scanning for Department of Justice
  5. When the Malwarebytes Anti-Malware scan has finished, click on the Show Results button.
    [Image: Malwarebytes Anti-Malware scan results]
  6. You will now be presented with a screen showing you the computer infections that Malwarebytes Anti-Malware has detected. Make sure that everything is Checked (ticked), then click on the Remove Selected button.
    [Image: Malwarebytes Anti-Malwar removing Department of Justice virus]

STEP 3: Double-check for the Department of Justice virus with HitmanPro

  1. You can download HitmanPro from the below link:
    Download HitmanProOfficial Sophos download. Free scan, free 30-day trial to remove threats.
  2. Double-click on the file named HitmanPro.exe (for 32-bit versions of Windows) or HitmanPro_x64.exe (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.
    HitmanPro scanner
    Click on the Next button, to install HitmanPro on your computer.
    HitmanPro installation
  3. HitmanPro will now begin to scan your computer for Department of Justice malicious files.
    HitmanPro detecting for Department of Justice virus
  4. When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the Next button, to remove Department of Justice virus.
    HitmanPro scan results
  5. Click on the Activate free license button to begin the free 30 days trial, and remove all the malicious files from your computer.
    [Image: HitmanPro 30 days activation button]
Advertisements

OPTION 2: Remove Department of Justice virus with with HitmanPro Kickstart

If you cannot start your computer into Safe Mode with Command Prompt mode, we can use the HitmanPro Kickstart program to bypass Department of Justice lock screen.
As the Department of Justice ransomware infection locks you out of your computer, you will need to create a bootable USB drive that contains the HitmanPro Kickstart program.
We will then boot your computer using this bootable USB drive and use it to clean the infection so that you are able to access Windows normally again.
You will also need a USB drive, which will have all of its data erased and will then be formatted. Therefore, only use a USB drive that does not contain any important data.

  1. Using a “clean” (non-infected) computer, please download HitmanPro Kickstart from the below link.
    Download HitmanProOfficial Sophos download. Free scan, free 30-day trial to remove threats.
  2. Once HitmanPro has been downloaded, please insert the USB flash drive that you would like to erase and use for the installation of HitmanPro Kickstart. Then double-click on the file named HitmanPro.exe (for 32-bit versions of Windows) or HitmanPro_x64.exe (for 64-bit versions of Windows).
    To create a bootable HitmanPro USB drive, please follow the instructions from this video:
  3. Now, remove the HitmanPro Kickstart USB drive and insert it into the Department of Justice infected computer.
  4. Once you have inserted the HitmanPro Kickstart USB drive, turn off the infected computer and then turn it on. As soon as you power it on, look for text on the screen that tells you how to access the boot menu.
    [Image: Windows Boot Menu screens]
    The keys that are commonly associated with enabling the boot menu are F10, F11 or F12.
  5. Once you determine the proper key (usually the F11 key) that you need to press to access the Boot Menu, restart your computer again and start immediately tapping that key. Next, please perform a scan with HitmanPro Kickstart as shown in the video below.
  6. HitmanPro will now reboot your computer and Windows should start normally. Then please Malwarebytes Anti-Malware and HitmanPro, and scan your computer for any left over infections.

OPTION 3: Remove Department of Justice virus with Kaspersky Rescue Disk

If any of the above methods did not clean your infected computer, we can use a Kaspersky Rescue Disk Bootable to clean the Windows registry and to perform a system scan to remove the Department of Justice virus.
To create a bootable Kaspersky Rescue Disk, we will need the following items:

  • A clean (non-infected) computer with Internet access
  • A blank DVD or CD
  • A computer with a DVD or CD burner

STEP 1: Download and create a bootable Kaspersky Rescue Disk CD

  1. You can download Kaspersky Rescue Disk utility from link below:
    Download Kaspersky Rescue DiskOpens the download page in a new tab.
  2. To create the bootable rescue disk, we will need to use the ImgBurn program. You can download ImgBurn from the below link, then install this program.
    Download ImgBurnOpens the download page in a new tab.
  3. Insert your blank DVD or CD in your burner, then start ImgBurn and click on the Write image file to disc button.
  4. Under Source click on the Browse for file button, then navigate to the location where you previously saved the Kaspersky Rescue Disk utility (kav_rescue_10.iso), then click on the Write button.
    [Image: Bootable Kaspersky Rescue CD]
    That’s it, ImgBurn will now begin writing your bootable Kaspersky Rescue Disk.

STEP 2: Start your computer using the Kaspersky Rescue Disk

  1. Once you’ve got the Kasperky Rescue Disk in hand, insert it into the infected computer, and turn off and then turn it on again.
  2. As soon as you power it on, you will see a screen that tells you to press any key to enter the menu, so please tap any key to boot your machine from the Kaspersky Rescue Disk.
    [Image: Starting infected computer from Kaspersky Rescue Disk]
  3. In the next screen, you will need to chose a language, then you click on Kaspersky Rescue Disk. Graphic Mode and press ENTER, to start the Kaspersky Rescue Disk.[Image: Kaspersky Rescue Disk Graphic Mode screen]
Advertisements

STEP 3: Scan your system with Kaspersky Rescue Disk

  1. Within a few short seconds you should see the full working environment, with the Kaspersky Rescue Disk screen front and center as shown below.
    [Image: Kaspersky Rescue Disk scanner]
  2. Switch tabs over to the My Update Center, and then click the Start update button to load the latest anti-virus definitions. Please be patience while this process its completed.
    [Image: Updating Kaspersky Rescue Disk antivirus definitions]
  3. Switch back over to the Objects Scan tab, select the drives you want to scan, and then click the Start Objects Scan button.
    [Image: Kaspersky Rescue Disk scan]
  4. When Kaspersky Antivirus will detect the Department of Justice virus, you’ll be prompted to select an action. When this happens, please select Quarantine or Delete to remove this infection from your computer.
    [Image: Kaspersky Rescue Disk prompt]
  5. When the antivirus scan has completed, you can restart back into Windows regular mode, by clicking on the Kaspersky Start button [Image: Kaspersky Rescue Disk Restart button] (lower left corner), and selecting Restart.
    Once your computer will start in Windows regular more, download Malwarebytes Anti-Malware and HitmanPro, and scan your computer for any left over infections.

Your computer should now be free of the Department of Justice infection. If your current anti-virus solution let this infection through, you may want to consider purchasing the PRO version of Malwarebytes Anti-Malware to protect against these types of threats in the future, and perform regular computer scans with HitmanPro.
If you are still experiencing problems while trying to remove Department of Justice Moneypak virus from your machine, please start a new thread in our Malware Removal Assistance forum.

Finish the cleanup. Keep protection on.

Follow the removal steps above, then consider ongoing protection against malicious software and unwanted advertising.

Affiliate links We may earn a commission if you buy through these links, at no extra cost to you. How we’re funded

MalwarebytesSCAM & MALWARE PROTECTION

Go beyond a one-time scan.

Malwarebytes can detect and remove malware and unwanted programs. Premium Security adds real-time protection against new threats.

  • Scam Guard for suspicious messages
  • Real-time malware protection with Premium
Explore MalwarebytesExplore features on the official website
AdGuardAD & TRACKER BLOCKING

Reduce unwanted ads and redirects.

AdGuard filters ads and trackers while you browse. It can help reduce exposure to advertising that sends you to unwanted pages.

  • Blocks intrusive ads and pop-ups
  • Filters trackers while you browse
Explore AdGuardExplore features on the official website

Features vary by device and plan. These tools add protection; they do not guarantee that a website or offer is trustworthy.

Join the discussion

151 comments

Share your experience or ask a question about this article.

Your email stays private. Comments are reviewed before publishing.

Discussion

  1. Ryan

    Hi, I have a adminstator password on my computer and I have this virus, but I don’t know the admins password and I can’t download anything without the password is there anyway to remove this virus without the consent of a adminstator.

    ReplyReport
  2. Phillip

    AWESOME!!! thanks so much, this is a great post and is very easy to follow and understand.

    ReplyReport
  3. Emilie Cathey

    I downloaded Kaspersky Rescue Disk 10.0. Ran ultraiso and burned it to a disc, to make it a bootable cd/dvd. Once the burning was complete, I booted the system to the disc, updated the definitions then ran a scan. Found and disinfected the viruses from the computer. Was able to boot the computer up successfully w/out any problems.

    ReplyReport
  4. Jake

    Hi I just got this virus and was able to get by it and use Malwarebytes to removes the 2 things it found. However, I want to double check if the virus is completely gone from my computer. Is there a way to do that besides relying on anti-]virus or anti-malware programs? Thanks!

    ReplyReport
    1. Jake

      In reply to Jake

      also do I need to run these programs in safe mode? I was able to login to normal mode through method 2; system restore. Just to be clear, I scanned Malwarebytes in normal mode the first time and also redid it in safe mode-network to make sure i got everything. First scan got 2 hits like I mentioned and second time in safe mode got no hits. They were both full system scans not a quick scan. Sorry for a lot of commenting, i just want to make sure my computer is safe! Thanks!

      ReplyReport
    2. Stelian PiliciTeam

      In reply to Jake

      Hello Jake,
      If the lock screen is not showing anymore, then Malwarebytes removed this infection. Did you perform a scan with HitmanPro.
      As additional tools, you can perform a check with the following utilites:
      STEP 1: Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      STEP 2: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.

      Stay safe!

      ReplyReport
    View all 6 replies
  5. bob

    thanks for the hitman pro notion; I’ve used the malwarebytes before.
    I went into safe mode— back to critical time and ONLY 1 file was picked up by M-bytes.
    I then did hitman pro ( very fast awesome! on the 64 bit ) but it did not pick up the trojan.reveton
    file you mentioned above.??? ( it did clear out other files but no ‘trojan’ files….
    my set-up : windows 7 w/ ‘1 user’ set up on a Lenovo machine.
    I then went into the user to double-check– when I ran Hitman Pro again there– it came up
    and started, but in the lower portion of the box there was message” ( blue circle w/ i )
    it sez: ” application is not activated” ” removal of viruses ( et al) is disabled’ ?????????
    the scan then ran and said no threats found . ?? I still have not seen trojan. reveton’ destroyed??
    Can you offer any thoughts? What else should I do ? I am left wondering after re-setting date
    back to current time …… thanks!

    ReplyReport
    1. Stelian PiliciTeam

      In reply to bob

      Hello Bob,
      Please perform a scan with the following tools:
      STEP 1: Run a scan with RogueKiller

      1. Please download the latest official version of RogueKiller.
        RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

      STEP 2: Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program
      ReplyReport
  6. Jac

    Thank you so much for this!!! I was panic stricken when I realized it was a virus and your step-by-step process was easy to follow! I was able to get it fixed by step two and only needed the malwarebytes program to remove everything.

    ReplyReport
  7. cora

    My 14 year son whom is special needs and has a form of autism saw that on his laptop. I freaked out and called my mom. She told me it was a scam. So I researched it and sure enough. I was grilling my son on what he watched and what pictures he saw. He said there was no pictures on his computer and that all he watched was Hanna Montana music video on youtube… Everything he ever watched has been on youtube. He reminded me that his computer/laptop has restrictions that I put in place. So I know he was not looking at nude pics. Let alone he is special needs and doesn’t even know how to look for nudity. He knows mommy studies the law and he was so upset about it. I had to tell him for hours that it was a scam let alone explain what scam means. I feel so bad about grilling him now. Can you imagine in a 14 year old mind who cannot even fathom what is going on especially since he has a learning disability and form of autism. These damn people scamming innocent people need to be brought to justice no pun intended.

    ReplyReport
  8. Joe

    i have windows xp which is 8 yrs old and i am not able to get it in safe mode. Is my cpu too old. I need my files. Please help. Thanks.

    ReplyReport
  9. Dawa

    Method 2 worked. I had to look up the command prompt to change directories first (maybe because I’ve got XP?) before I could use cd restore, but I got there eventually. Thanks!

    Was surprised my Norton didn’t pick it up. You know, seven years and I’ve never gotten a virus on that computer until today. Weird.

    ReplyReport
  10. Matt Shelton

    God bless your computer geek self. I was able to perform steps 1&2 without a hitch. I saved a lot of very important material which I am now in the process of backing up as it’s been more than 90 days since I have. Thanks a bunch brother.

    ReplyReport
  11. FWilson

    The instructions in Step 2 were followed and enabled me to resume using my PC. Thank you very much for posting easy to follow instructions for a non-geek to understand and follow.

    ReplyReport
  12. Heather

    Thanks for your help on this. After reading from PC Magazine that these were legit programs, we followed your advice. I realized after the fact that my husband had turned off the PCTools Spyware program and he clicked a link from an email from facebook and got this virus today.

    I purchased the Malwarebytes program.

    I also had problems with F8 with Windows 7. I found that F11 and the Esc tab worked better. I kept getting errors trying to do the system restore (after 3 attempts). After the third failure, I decided just to let it boot windows to try the email in the background trick that a previous poster did and found that the restore did work afterall.

    ReplyReport
  13. Thomas

    Couldn’t get steps one or 2. Kept sending me to start page. I downloaded hitman on USB. Plugged it in followed steps. And i says failed to boot. USB on good CPU says its on there and good. Help please

    ReplyReport
    1. Stelian PiliciTeam

      In reply to Thomas

      Hello Thomas,
      Please try one more time to boot from the HitmanPro USB,pay attention at the booting part and click F11 once your computer starts.
      If it still doesn’t work,you’ll need to create a Kaspersky Rescue CD as seen HERE: http://malwaretips.com/blogs/remove-police-trojan/ , on Method 3.
      If everything fails, then you’ll need to create an account on our forums and a member of the staff will help you (with more advanced tools) to remove this nasty virus: http://malwaretips.com/Forum-Malware-Removal-Assistance
      Good Luck!

      ReplyReport
  14. Buford T Justice

    I solved mine in a way I haven’t read about.

    In Windows 7 I wasn’t able to get into safe mode (endless boot loop), and was almost completely locked out in regular mode. I had the ransom page displayed in full screen. Ctrl+Alt+Del brought up the normal screen, but task manager would not work.

    Out of frustration I started clicking the links on the ransom page just so I could see something different (how much worse could it get?) I believe the key was clicking on the email link at the bottom of the page (you’ll see why later). I hit Ctrl+Alt+Del -> Shut Down to make my next attempt at a new strategy. When I did, the shut down hung up asking if I wanted to force Outlook to close. Apparently hitting the email link had launched Outlook in the background. I IMMEDIATELY hit CANCEL when Windows asked if I would like to force Outlook to close before Windows had a chance to close it and continue the shut down. The shutdown stopped, but the virus processes had already ended in prep for shutdown. I had my computer back, but still had to remove the virus with MalwareBytes.

    I hope this can help someone else.

    ReplyReport
  15. siva

    Hi,
    I am not able to restore my office laptop.Also I couldn’t use USB drive. It is shutting down in Safe mode as well as in Safe mode with networking.Please give me a good suggestion.

    ReplyReport
    1. Stelian PiliciTeam

      In reply to siva

      Hello Siva,
      Please try one more time to boot from the HitmanPro USB,pay attention at the booting part and click F11 once your computer starts.
      If it still doesn’t work,you’ll need to create a Kaspersky Rescue CD as seen HERE: http://malwaretips.com/blogs/remove-police-trojan/ , on Method 3.
      If everything fails, then you’ll need to create an account on our forums and a member of the staff will help you (with more advanced tools) to remove this nasty virus: http://malwaretips.com/Forum-Malware-Removal-Assistance
      Good Luck!

      ReplyReport
  16. Jared

    I ve only restored my windows, and it worked fine… On some other site i ve seen some registry files that i have to delete…. But couldnt find those… Do i still need to download a programme to delete the virus? Or has it gone after i restore my laptop??? I m sorry i kinda suck at computer stuff!:)

    ReplyReport
    1. Stelian PiliciTeam

      In reply to Jared

      Hello Jared,
      Yes,please download Malwarebytes and HitmanPro , and run a scan with these software….Both scans should not take more that 30 minutes and will clean any trace of malware.

      ReplyReport
  17. Rob

    Wow, I was a little shook up over that one! Somebody put a lot of work into that. Very convincing. I’ll bet a lot of people fell for that and paid the $300 “fine”. I used method 2 and it worked great! Then I followed up with Ad-Aware full scan. I would have had to seek professional help, as I am only half-geek. Thank you so much for your guidance.

    ReplyReport
  18. mike

    oh man I was so scared when that virus came out of my computer. I don’t usually look at underage porn, and play with myself. I was surfing on an uninfected comp and I saw ur bl. I followed ur first step and it work, thank GOD I found you to help me out. You are a GOD sent, thank you very much.

    ReplyReport
  19. Ryan b

    Hello,

    Can I use AVIRA virus scanner to find it and delete it, if I don’t want to download the Hitman? Thanks!!

    ReplyReport
    1. Stelian PiliciTeam

      In reply to Ryan b

      Hello Ryan,
      Not sure if Avira can detect this variant of the virus, however I see no reasons why you shouldn’t do a scan with this product !! :)
      Stay safe!

      ReplyReport
  20. Mortredor

    Im confused. When I ran the malwarebytes scan, it picked up one(1) virus which was a trojan horse not named doj virus

    ReplyReport
    1. Stelian PiliciTeam

      In reply to Mortredor

      Hello Mortredor,
      The virus it’s not named DOJ..that’s just an interface that the cyber criminals use to trick people….The infection is called Trojan.Reveton.

      ReplyReport

Report a comment

Reports are private and reviewed by a moderator.

Written by

Stelian

Stelian leverages over a decade of cybersecurity expertise to lead malware analysis and removal, uncover scams, and educate people. His experience provides insightful analysis and valuable perspective.

61,116 articlesWriting since 2011
More from Stelian →

MalwareTips community · since 2009

Stuck on a step? 75,000+ members can help you for free.

Post your question on the forum and our volunteer malware removal experts will walk you through it, step by step.

75K+members
999K+forum messages
100K+forum topics
17+years online
Get free malware removal helpJoin the forum →

Previous

Remove Win 7 Internet Security Pro 2013 (Uninstall Guide)

Next

Remove Der Computer ist Blockiert virus (Removal Guide)

Share