Ransomware - Department of Justice virus

[Groo]

Unable to boot to safemode and do the other scans.

I did manually delete the following file - \Users\owner\AppData\Roaming\data.sec
As I had seen it mentioned as bad in many other posts about this malware.

When Hitman Pro boots it says it stopped 24 items from starting but it gives me no log of those stopped processes.

 

[TwinHeadedEagle]

Are you able to boot normally?

 

[Groo]

Any boot safe or non brings up the ransomware before I even get into windows.

 

[TwinHeadedEagle]

Can you make a picture how it looks like when you boot Windows?

 

[Groo]

Easy... It is Exactly like this link....

http://malwaretips.com/blogs/department-of-justice-virus/#kaspersky

 

[TwinHeadedEagle]

Download attached fixlist.txt and save it to your USB flashdrive as fixlist.txt

>> Boot into Recovery Environment


Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....

• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your USB flashdrive.

>> Exit out of Recovery Environment and post me the log please.



Try to boot Windows normally...