SpamHaus Virus - How to remove?
SpamHaus virus is a ransomware program that has used the name of an International nonprofit organization responsible for maintaining a number of realtime spam-blocking databases. Cyber criminals took this name and created a nasty program that seeks to steal money from computer users. Please note that a legitimate application SpamHaus does not collect money from people. It was developed in order to protect people from receiving spam material, help to identify and pursue spam gangs, etc., whereas SpamHaus virus just played smart by taking a name of a well-known institution. The program enters random systems using Trojan viruses, it locks your computer and tries to swindle your money away.
SpamHaus virus displays a message in the middle of your computer screen warning that you have 48 hours left to enter your payment. The message explains that you have lost control over your computer because you had been spreading Malware and this way violated numerous International and USA laws. The message explains in detail why your system and all your files have been locked and encrypted, why you cannot use Internet and any other programs. Basically SpamHaus virus blames you for being a distributor of pornography and possessing unlicensed software. Here is a part of the message that you will receive, once infected:
Working to Protect Internet Networks Worldwide
SpamHaus tracks the Internet’s spam senders and spam services, provides dependable realtime anti-spam protection for Internet networks, and works with law Enforcement to Identify and pursue spammers world wide.
You have 48 hours left to enter your payment.
You have lost control over your computer. Your system and all your files have been blocked and encrypted because you were spreading the Malware (viruses, trojans, worms).
You are breaking numerous International and USA laws.
You are allowed to settle this issue if you pay a fine of $300, otherwise SpamHaus virus tells it will contact proper authorities. The fine is asked to be paid using MoneyPak payment system. This method is really convenient for cyber criminals because it is very difficult and in many cases even impossible to trace the receiver of the payment. However, have in mind that official institutions would never use such means for collecting fines therefore if you see one you might suspect it is a scam and not a serious charge. It is clear that SpamHaus virus is just another malicious program that was created by cyber criminals in order to steal money.
You are highly advised to remove SpamHaus virus from your computer as soon as you notice it. If you have more than one user account on your computer and at least one of them is not infected, login to it, run a full system scan using a reputable antispyware program, for example, Spyhunter. It will remove the infection automatically. However, in some cases other accounts are not available, try getting rid of SpamHaus this way
- Press Ctrl+Shift+ESC ( Or CTRL+ALT+DEL and choose task manager)
- Kill Spamhous process. It should run under your user and be named something like rasadhlp.exe or other semi-random name.
- Scan with anti-malware programs
Alternately, you can try removing this malware from Safe modes or with bootable CDs.
- Reboot into safe mode
- Run MSConfig.
- Disable unknown startup entries
- Reboot and scan for SpamHaus virus with Spyhunter.