SpamHaus Virus - How To Remove?

Type: Ransomware

SpamHaus virus is a ransomware program that has used the name of an International nonprofit organization responsible for maintaining a number of realtime spam-blocking databases. Cyber criminals took this name and created a nasty program that seeks to steal money from computer users. Please note that a legitimate application SpamHaus does not collect money from people. It was developed in order to protect people from receiving spam material, help to identify and pursue spam gangs, etc., whereas SpamHaus virus just played smart by taking a name of a well-known institution. The program  enters random systems using Trojan viruses, it locks your computer and tries to swindle your money away.

SpamHaus virus displays a message in the middle of your computer screen warning that you have 48 hours left to enter your payment. The message explains that you have lost control over your computer because you had been spreading Malware and this way violated numerous International and USA laws. The message explains in detail why your system and all your files have been locked and encrypted, why you cannot use Internet and any other programs. Basically SpamHaus virus blames you for being a distributor of pornography and possessing unlicensed software. Here is a part of the message that you will receive, once infected:

Working to Protect Internet Networks Worldwide
SpamHaus tracks the Internet’s spam senders and spam services, provides dependable realtime anti-spam protection for Internet networks, and works with law Enforcement to Identify and pursue spammers world wide.
You have 48 hours left to enter your payment.
You have lost control over your computer. Your system and all your files have been blocked and encrypted because you were spreading the Malware (viruses, trojans, worms).
You are breaking numerous International and USA laws.

You are allowed to settle this issue if you pay a fine of $300, otherwise SpamHaus virus tells it will contact proper authorities. The fine is asked to be paid using MoneyPak payment system. This method is really convenient for cyber criminals because it is very difficult and in many cases even impossible to trace the receiver of the payment. However, have in mind that official institutions would never use such means for collecting fines therefore if you see one you might suspect it is a scam and not a serious charge. It is clear that SpamHaus virus is just another malicious program that was created by cyber criminals in order to steal money.

You are highly advised to remove SpamHaus virus from your computer as soon as you notice it. If you have more than one user account on your computer and at least one of them is not infected, login to it, run a full system scan using a reputable antispyware program, for example, Spyhunter. It will remove the infection automatically. However, in some cases other accounts are not available, try getting rid of SpamHaus this way

  1. Press Ctrl+Shift+ESC ( Or CTRL+ALT+DEL and choose task manager)
  2. Kill Spamhous process. It should run under your user and be named something like rasadhlp.exe or other semi-random name.
  3. Scan with anti-malware programs

Alternately, you can try removing this malware from Safe modes or with bootable CDs.

  1. Reboot into safe mode
  2. Run MSConfig.
  3. Disable unknown startup entries
  4. Reboot and scan for SpamHaus virus with Spyhunter.

Automatic SpamHaus Virus removal tools

Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Manual removal


Important Note: Although it is possible to manually remove SpamHaus Virus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on


About the author

 - Main Editor

I have started in 2007 after wanting to be more or less independent from single security program maker. Since then, we kept working on this site to make internet better and safer place to use.

April 16, 2013 08:24, June 3, 2013 13:30

Leave a Reply

Your email address will not be published. Required fields are marked *