One of our customers contacted us today about the ‘The United States Department of Justice’ virus their computer got. This is the pop-up that came up, and would prevent them from doing anything.
Here are the steps I used to remove this virus.
Step One: Download Autoruns to a flash drive.
Step Two: Start the computer up and hit you F8 key on your keyboard continually until you get the following screen:
then boot into Windows by selecting Safe Mode with Command Prompt.
Step Three: Type Explorer in Command Prompt.
Step Four: Use the Windows interface to browse to your flash drive that has autoruns.
Step Five: Run autoruns. Then select Options > Filter Options on the menu bar to filter out all Microsoft and Windows entries. Once that is done look for these files, if any show up, delete them by right-clicking on the file and hitting delete.
1: Under HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run Delete the VProtect Application
2:Under HKLM\SOFTWARE\Microsoft\Active Setup\Installed Component Delete the Internet Explorer file that is there.
3: Under HKCU\Software\Microsoft\Windows\CurrentVersion\Run Delete the DisplaySwitch executable file. If you browse to the location of the Display Switch File, you will find the United States Department of Justice images and the virus file.
Once these files are deleted the virus should be mostly removed. Reboot and boot into Windows normally.
Step Seven: Run a virus scan with Malwarebytes and SuperAntiSpyware to ensure all viruses and malware is removed.
This worked for me. If this helped you or you were not able to use this method to remove this virus please leave a comment below. Thank you. This was posted by techspeeder.