‘Everything On Your Computer Has Been Fully Encrypted’ Ransomware

Posted: June 21, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	3,195
Threat Level:	1/10
Infected PCs:	11,776

First Seen:	June 21, 2013
Last Seen:	October 17, 2023
OS(es) Affected:	Windows

The 'Everything on Your Computer Has Been Fully Encrypted' Ransomware is a DOJ ransomware Trojan (or Department of Justice ransomware Trojan) that displays fraudulent legal alerts, blocks other programs and encrypts various files on your PC, all to force you to pay a fake legal fine. Because the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware usually also includes some degree of backdoor functionality, the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware infection also may be configured for other attacks, and SpywareRemove.com malware experts rate the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware as a major security risk. Disabling and deleting the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware should be a top priority to any victim of its attacks, and will not hinder your ability to recover any encrypted files after the disinfection has been completed.

How Truth Mixed with Lies Makes for a High Price for File Recovery

The 'Everything on Your Computer Has Been Fully Encrypted' Ransomware is a fairly rare case of a ransomware attack that really can back up its bluffs to some extent: although the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware is not, as its fake warning message claims, affiliated with the US DoJ, the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware really can encrypt your files and make them temporarily unusable. Detected by aliases that include Troj/Agent-ABMG and Trojan:Win32/Harasom.A, the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware always is installed without your permission and creates a screen-sized pop-up claiming that your PC has been penalized due to your illegal computer activities (such as file piracy). It must be emphasized that this pop-up alert will be displayed without any regard for your actual computer history or behavior.

Besides blocking you from utilizing other applications, such as the Windows Command Processor, the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware also will target files from a wide range of formats and encrypt them. This encryption attack causes the files to be unusable temporarily, but doesn't permanently damage them, and affects such common file types as ZIP, TEXT, DOC, GIF, ODS, TXT and JPEG (essentially, most common archive, text document, spreadsheet and image file formats).

These attacks are intended to make you pay a voucher fee to acquire the code that supposedly will decrypt your files, but SpywareRemove.com malware researchers strongly urge against this and always discourage submitting to the ransoms of all types of malicious software.

The Bargain Price to Being Rid of the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware

The safest way to remove the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware and its file-encrypting attack is to use standardized security tactics (such as booting from any USB flash drive) to disable the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware, followed by deleting the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware with the anti-malware program of your preference. Once you've removed the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware, you can decrypt your files with any of various free tools that are available online – many of which have been provided by prominent PC security and anti-malware companies.

Because the 'Everything on Your Computer Has Been Fully Encrypted' Ransomware can't distribute itself, but often is distributed in attacks that can open your PC up to assaults from related PC threats, you should consider any 'Everything on Your Computer Has Been Fully Encrypted' Ransomware infection to be an enormous risk to your PC's security. SpywareRemove.com malware experts previously have seen similar DoJ ransomware Trojans being distributed through exploit kits like Blacole, which often are inserted into hacked websites or are promoted on hostile sites through spam e-mail links.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	The United States Department of Justice The common law is the will of mankind issuing from the life of the people. Everything on your computer has been fully encrypted. Your computer has been blocked! All activities of this computer has been recorded. All your files are encrypted. Don't try to unlock your computer. This PC is blocked due to at Least one of the specified below. You possess unlicensed software and pirate audio and video records. <Fake legalese here> Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law on Neglectful Use of Personal Computer. <Fake legalese here> Your are a distributor of pornography and porno materials, regularly watch porno sites with child pornography and zoophilia. <Fake legalese here> In connection with the decision of the Government as of January 26, 2013, all of the violations described above could be considered criminal. If the fine has not been paid, you will become the subject of criminal prosecution. The fine is applicable only in the case of a primary violation. In the case of second violation you will appear before the Supreme Court of the USA. ALL ILLEGAL ACTIVITIES CONDUCTED THROUGH YOUR COMPUTER HAVE BEEN RECORDED IN THE POLICE DATABASE, INCLUDING PHOTOS AND VIDEOS FROM YOUR CAMERA FOR FURTHER IDENTIFICATION. To unlock your computer and avoid other legal consequences, you are obligated to pay a release fee of $100.

Message

The United States Department of Justice
The common law is the will of mankind issuing from the life of the people.
Everything on your computer has been fully encrypted.
Your computer has been blocked!
All activities of this computer has been recorded. All your files are encrypted. Don't try to unlock your computer.
This PC is blocked due to at Least one of the specified below.
You possess unlicensed software and pirate audio and video records.
<Fake legalese here>
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law on Neglectful Use of Personal Computer.
<Fake legalese here>
Your are a distributor of pornography and porno materials, regularly watch porno sites with child pornography and zoophilia.
<Fake legalese here>
In connection with the decision of the Government as of January 26, 2013, all of the violations described above could be considered criminal. If the fine has not been paid, you will become the subject of criminal prosecution. The fine is applicable only in the case of a primary violation. In the case of second violation you will appear before the Supreme Court of the USA.
ALL ILLEGAL ACTIVITIES CONDUCTED THROUGH YOUR COMPUTER HAVE BEEN RECORDED IN THE POLICE DATABASE, INCLUDING PHOTOS AND VIDEOS FROM YOUR CAMERA FOR FURTHER IDENTIFICATION.
To unlock your computer and avoid other legal consequences, you are obligated to pay a release fee of $100.