Home Malware Programs Ransomware The United States Department of Justice Ransomware

The United States Department of Justice Ransomware

Posted: March 13, 2012

United States Department of Justice ransomware Screenshot 1United States Department of Justice ransomware is an American version of the Trojan.Ransom Fake Federal German Police (BKA) notice variante, a ransomware Trojan that locks down your PC while claiming that you're required to pay a fine due to illegal actions that have been detected on your computer. However, the United States Department of Justice ransomware isn't any more a representative of the Department of Justice than the original ransomware Trojan of this family was a representative of the German BKA, and, as a fraud, its warnings can be discounted. SpywareRemove.com malware researchers recommend that you disable the United States Department of Justice ransomware by using standard anti-malware procedures, followed by a system scan that can remove the ransomware Trojan that's responsible for United States Department of Justice ransomware.

United States Department of Justice Ransomware – a Globetrotting Trojan from Europe to America

The United States Department of Justice ransomware, like Fake Federal German Police (BKA) notice variante and other members of its family, is localized to create the appearance that a region-specific legal entity is warning you about pornography-related crimes associated with your PC. Although the United States Department of Justice ransomware is designed to attack American computers, SpywareRemove.com malware experts warn that they may also prove to be an impediment to computers in other countries. A United States Department of Justice ransomware attack can be recognized by its characteristic warning text and the fact that the United States Department of Justice ransomware will refuse to allow you to access other applications or the Internet.

For your reference, the United States Department of Justice ransomware's warning message is noted below:

Attention!
The operating system is locked due to the violation of the federal laws of the United States of America. Following violations were detected:
Your IP address is '[IP address]'. The IP address was used to visit websites containing pornography, child pornography, Zoophilia and child abuse. Your computer also contains video files with pornographic content, elements of violence and child pornography! Spam-messages with terrorist motives were also sent from your computer.
The computer lock is aimed to stop your criminal activity.

The United States Department of Justice ransomware's ultimate aim is to coerce you to make a hundred dollar payment through Paysafecard to unlock your PC (unlock most other Trojans from its family, which prefer to use Ukash or offer both Ukash and Paysafecard). Since United States Department of Justice ransomware can't detect crimes and doesn't have any ability to threaten your PC with additional harm, SpywareRemove.com malware researchers recommend that you keep a hold on your savings.

Breaking Your PC Loose from a United States Department of Justice ransomware's Confinement

Since United States Department of Justice ransomware will try to impede you from utilizing other programs, blocking the United States Department of Justice ransomware's associated ransomware Trojan from starting is the first step towards removing the United States Department of Justice ransomware. To this end, SpywareRemove.com malware research team can recommend the following workarounds:

  • Safe Mode, a feature available to all Windows PCs, may disable the United States Department of Justice ransomware's startup routine.
  • Booting Windows from a secondary source, such as a a USB device or a network drive, will also get you into your operating system without the United States Department of Justice ransomware appearing.
  • Dual-boot computers are uniquely well-equipped to deal with a United States Department of Justice ransomware ransomware Trojan and comparable PC threats, since they can simply reboot into a different (and uninfected) OS.

The exact method of disabling United States Department of Justice ransomware is less important than removing United States Department of Justice ransomware appropriately, which ordinarily should make use of competent and completely updated anti-malware software. Other ransomware Trojans from the same family include Trojan.Ransom Fake Federal German Police (BKA) notice variante, Scotland Yards Ukash Virus, Strathclyde Police Ukash Virus, the Canadian Security Intelligence Service (CSIS) pop-up alert, Police Central e-crime Unit (PCEU) Ransomware and the 'Metropolitan Police' ransomware Trojan.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%CommonAppData%\MigAutoPlay.exe File name: %CommonAppData%\MigAutoPlay.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MigAutoPlay" = %CommonAppData%\MigAutoPlay.exe

Additional Information

The following messages's were detected:
# Message
1The United States Department of Justice
The work of your computer has been suspended on the grounds of the violation of the law of the United States of America.

Possible violations described below:

Article - 184 Pornography involving children (under 18 years)
Imprisonment for the term of up to 10-15 years
(The use or distribution of pornographic files)

Article - 171 Copyright
Imprisonment for the the term of up to 2-5 years
(The use or sharing of copyrighted files)

Article - 113 The use of unlicensed software
Imprisonment for the term of up to 2 years
(The use of unlicensed software)

Amount of fine is $300. Payment must be made within 48 hours after the computer blocking. If the fine has not been paid, you will become the subject of criminal prosecution without the right to pay the fine. The Department for the Fight against Cyberactivity will confiscate your computer (After 48 hours).

ALL ILLEGAL ACTIVITIES CONDUCTED THROUGH YOUR COMPUTER HAVE BEEN RECORDED IN THE POLICE DATABASE, INCLUDING PHOTOS AND VIDEOS FROM YOUR CAMERA FOR FURTHER IDENTIFICATION. YOU HAVE BEEN REGISTERED FOR VIEWING PORNOGRAPHY INVOLVING MINORS.

AN ATTEMPT TO UNLOCK THE COMPUTER BY YOURSELF WILL LEAD TO THE FULL FORMATTING OF THE OPERATING SYSTEM. ALL FILES, VIDEOS, PHOTOS, DOCUMENTS ON YOUR COMPUTER WILL BE DELETED.

To unlock your computer and to avoid legal consequences, you are obligated to pay a release fee of $300.

Related Posts

Loading...