Remove FBI Online Agent virus (MoneyPak Scam)

The FBI Online Agent MoneyPak Ransom is a computer virus, which will display a bogus notification, that pretends to be from Federal Bureau of Investigation and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.
The FBI Online Agent virus will lock you out of your computer and applications, so whenever you’ll try to log on into your Windows operating system or Safe Mode with Networking, it will display instead a lock screen asking you to pay $200 in the form of a MoneyPak code.
Furthermore, to make its alert seem more authentic, this virus will display a countdown timer, a bogus case number and FBI agent name,needless to say that all this details are fake and are only used, in an attempt to scare you into sending a MoneyPak code.
If your computer is infected with FBI Online Agent virus,then you are seeing the below notification:

FBI Online Agent MoneyPak virus
The FBI Online Agent Ransom will display the following bogus notification:

FBI Online Agent has blocked your computer for security reason
The work of your computer has been suspended on the grounds of unauthorized cyberactivity. Described below are possible violation, you have made.
Article 274 – Copyright
A fine or imprisonment for the term of up to 4 years. (The use or shanng of copyrighted files-movies, software)
Article 183 – Pornography
A fine or imprisonment for the term of up to 2 years (The use or distribution of pornographic Nes)
Article 184- Pornography involving children (under 18 years)
Imprisonment for the term of up to 15 years (The use or distribution of pornographic files)
Article 104- Promoting Terrorism
Imprisonment for the term of up to 15 years (You have visited websites of terrorist organization)
Article 297 – Neglect computer use, entailing serious consequences
A fine or imprisonment for the term of up to 2 years (Your computer has been infected with a virus, which, in turn, Infected other computers)
In connection with the decision of the Government as of August 12, all of the violations described above could be considered as conditional in case of payment of a fine.
Amount of the fine is $200. Payment must be made within 24 hours after the discovery of the violation. If the fine has not been paid, you will become the subject of criminal prosecution.
After paying the fine your computer will be unblocked

The FBI Online Agent Ransom is a scam and you should ignore any alert that this malicious software might generate and remove this trojan ransomware from your computer.
Under no circumstance should you send any money to this cyber criminals,as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.

FBI Online Agent MoneyPak Ransomware – Virus Removal Guide

STEP 1: Remove FBI Online Agent lock screen from your computer

The FBI Online Agent MoneyPak Ransom has modified your Windows registry and added its malicious files to run at start-up, so whenever you’re trying to boot your computer it will launch instead its bogus notification.To remove this malicious changes,we can use any of the below methods :

Method 1: Start your computer in Safe Mode with Networking and scan for malware

Some variants of the FBI Online Agent virus will allow the users to start the infected computer in Safe Mode with Networking without displaying the bogus lock screen. In this first method, we will try to start the computer in Safe Mode with Networking and then scan for malware to remove the malicious files.

  1. Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
  2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
    [Image: Safe Mode with Networking]
  4. If you computer has started in Safe Mode with Networking, you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

IF the FBI Online Agent virus didn’t allow you to start the computer in Safe Mode with Networking,you’ll need to follow Method 2  to get rid its screen lock.


Method 2: Restore Windows to a previous state using System Restore

System Restore can return your computer system files and programs to a time when everything was working fine, so we will try to use this Windows feature to get rid of the FBI Online Agent lock screen.

  1. Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  2. Use the arrow keys to select the Safe mode with a Command prompt option.
    Enter Safe Mode with Command Prompt
  3. At the command prompt, type cd restore, and then press ENTER.
    Next,we will type rstrui.exe , and then press ENTER
    System Restore commands
  4. The System Restore window will start and you’ll need to select a restore point previous to this infection.
    Restore points in Windows 7
  5. After System Restore has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

IF the FBI Online Agent virus didn’t allow you to start the computer in Safe Mode with Command Prompt you’ll need to follow Method 3, to get rid its screen lock.


Method 3: Remove FBI Online Agent virus with HitmanPro Kickstart

IF you couldn’t boot into Safe Mode with Command Prompt or didn’t have a System Restore point on your machine, we can use HitmanPro Kickstart to bypass this infection and access your computer to scan it for malware.

  1. We will need to create a HitmanPro Kickstart USB flash drive,so while you are using a “clean” (non-infected) computer, download HitmanPro from the below link.
    HITMANPRO DOWNLOAD LINK (This link will open a download page in a new window from where you can download HitmanPro)
  2. Insert your USB flash drive into your computer and follow the instructions from the below video:
  3. After you have create the HitmanPro Kickstart USB flash drive, you can insert this USB drive into the infected machine and start your computer.
  4. Once the computer starts, repeatedly tap the F11 key (on some machines its F10 or F2),which should bring up the Boot Menu, from there you can select to boot from your USB.
    Next,you’ll need to perform a system scan with HitmanPro as see in the below video:
  5. After HitmanPro Kickstart has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

STEP 2: Remove FBI Online Agent malicious files from your computer

No matter what method did you use to get rid of the FBI Online Agent lock screen, we will need to remove its malicious files from your computer.Please download and run a scan with the following scan to completely remove the FBI Online Agent virus from your computer.

Run a computer scan with Malwarebytes Anti-Malware Free

  1. You can download Malwarebytes Anti-Malware Free from the below link,then double click on it to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process.
    DO NOT make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked,then click on the Finish button.
    Malwarebytes Anti-Malware installation
  3. On the Scanner tab,select Perform quick scan and then click on the Scan button to start scanning your computer.
    Malwarebytes Anti-Malware quick scan
  4. Malwarebytes’ Anti-Malware will now start scanning your computer for FBI Online Agent malicious files as shown below.
    Malwarebytes scanning for FBI Online Agent
  5. When the Malwarebytes scan will be completed,click on Show Result.
    Malwarebytes scan results
  6. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    Infections found by Malwarebytes
  7. After your computer will restart, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

Run a computer scan with HitmanPro

  1. Download HitmanPro from the below link,then double click on it to start this program.
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
    IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro scanner
    HitmanPro installation
  3. HitmanPro will start scanning your computer for FBI Online Agent malicious files as seen in the image below.
    HitmanPro scans after FBI Online Agent
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove this malicious files.
    HitmanPro scan results
  5. Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button

If you are still experiencing problems while trying to remove FBI Online Agent virus from your machine, please start a new thread in our Malware Removal Assistance forum.

IT’S YOUR TURN TO HELP!

If we have managed to help you with your computer issues, then it's your duty to let other people know that this article will help them!
You can share this article on Facebook,Twitter or Google Plus by using the below buttons.

SUPPORT MALWARETIPS! (OPTIONAL)

All our malware removal guides and utilities are completely free!
We do not request any kind of payment for our services, however if you like to support us with our website costs, you can make a small donation. Any amount is appreciated, and will support our fight against malware.

ABOUT STELIAN PILICI

I am the creator and owner of MalwareTips.com.
My area of expertise includes malware removal and computer forensics. I'm active in the various online anti-malware communities where I do researches for new malware threats as they are released.
I live in Bucharest (Romania), where I run my own local computer repair shop.
I repair both hardware and other operating systems related issues, however most of my business is malware related problems.

You can follow me on Google+ and I will keep you up-to-date with the latest computer infections and malware threats.

  • Vic

    Thanks for the help!!! 2nd time dealing with this scam, had to use the flashdrive solution this time and it worked after startup with the f12 key. Tried f8-f11 but f12 is the one that worked. Thanks again.

  • Jeff

    Thank you, I’m stress free

  • mike

    Hello, Stelian !

    I got the virus through a music sharing blog! Norton help line, thru India tried valiantly to help, but after 2 hours offered me only a $200 advanced wipe which they said could lose settings and files. So, my search brought me here.
    I could not do a safe boot of any kind, it was completely disabled, but your advice to make a Kaspersky Rescue CD at the link: http://malwaretips.com/blogs/remove-ukash-virus/ was absolutely the best, totally fixed the issue, and subsequent tests with other antivirus programs show that it is OK now!
    thanks!!

    By the way, I ran checkdisk after all was done and it corrected a couple of errors that may have happened as a result of the rescue disc. Everything running smoothly and no lost files or settings!

  • shanny

    wow!! this was my first virus today scared the life out of me ended up at the police station thinking i was going to get locked up..this site was the first i clicked to see if i could fix it myself,, and you deserve a gold medal for your easy to understand top quality instructions..i fixed my pc its up and running all within an hour.. and i owe it all to you..thank you so much for sharing what you know with others i did not have the money to take my pc in to the shop and was in a real state of panic ..you are amazing and i wish i could squeeze you tight and give u a big hug..thanks a million for everything :) hope you have a very lovely day

  • Bls

    I got this ransomware for the 2nd time. I don’t use any virus, malware, spyware equipment because I too am somewhat of a geek with my own equipment.

    This time it’s different than the first, I scanned disk and it deleted my back up restore files. So long story short I just said to he’ll with it and did a factory restore.
    It’s like the doomsday option hahaha, just wanna let anyone reading this know that it’s evolved.

  • y.c

    Hi. My consern is that the hackers can obtain valuable information and used it. Can this happend?

    • http://malwaretips.com/ Stelian Pilici

      Hello Y.c,
      No, this type of malware should not contain any keyloggers or other spyware. Trojan:W32/Reveton is a ransomware application. It fraudulently claims to be from a legitimate law enforcement authority and prevents users from accessing their infected machine, demanding that a ‘fine’ must be paid to restore normal access.

      • Hadi

        Thank you so much Mr. Pilici for your computerized repair skills and to freely help us individuals who thought they were in deep trouble! I recently got the virus and quickly rushed for a moneypak, however I believe it didn’t went through as I rechecked the balance on my Paypal. So, with the same concern with Y.c, there shouldn’t be any access to any information then. By the way, you are our Lifesaver!!! Much appreciation!

  • Wendao

    It’s really help! Thank you very much!

  • Crystal Stevenson

    When I go into safe mode with command prompt how do you type in cd restore ? If I click on it it takes me to a black screen can’t remember what it say and I type it there and it does nothening am I suppose to right click not left click to be able to type next to safe mode command prompt . The way u have that worded sound like I have to type that right next to it and I can’t . I had already downloaded malware thing and did a scan in safety mode and tried to logged in without safe mode and it was still the the FBI message so I’m really wanting to try ur suggestion please help

    • http://malwaretips.com/ Stelian Pilici

      Hello,
      In the Command prompt,type in the following:
      For Windows XP: C:\windows\system32\restore\rstrui.exe and press Enter
      For Windows Vista/7/8 : C:\windows\system32\rstrui.exe and press Enter
      If for some reason, it won’t go into the System Restore options, boot your computer in Safe Mode with Command Prompt, and type msconfig in the Command prompt. This should start the Windows System Configuration tool. Go to the Start-up tab, and search for any suspicious or unknonw entries (random numbers or letter, ctfmon.exe and other suspicious entries), and uncheck them from start-up. Next boot your computer in regular mode and perform a scan with HitmanPro and Malwarebytes as seen on the guide.

  • lance

    My question is what if the message is from department of justice can you still go through the instructions

  • Alex Cuthbertson

    Thanks so much!!!!! I hadn’t even done any of the stuff they claimed I had and I don’t believe the FBI would make it so obvious that they were tracking your computer data so I just knew it had to be a virus, so I searched online and found this amazing website with simple enough instructions to follow. I have now completely fixed my computer, BUT I was wondering that instead of perhaps using the Malwarebytes Anti-Malware software and the Hitman Pro software, could I perhaps use the eset anti-virus protection I already have on my laptop to scan all of my computer hard drives? I don’t know if that would work efficiently and remove the virus, let alone, would it work at all?

    • Stelian Pilici

      Hello Alex,
      ESET is a good scanner and you can give it a go. If you are still having issues, then we recommend that you install and scan with Malwarebytes and HitmanPro.
      Stay safe!

  • Bruce Moore

    Thank you so very much for posting this! My daughter’s computer became infected with this virus, and I was at a loss as to what to do. I was able to start in “safe mode with networking”, and used the Malware link to clear out the 8 viruses found. Your explanation of the steps made it so very easy. Again, many thanks!

  • Kev

    So I was able to get into the desktop screen after I went through the process of logging on with “safe mode” and I ran malaware twice. It came up as six virus removed. So is the virus completely out of my system

  • Bill snider

    I get an error #5, Lock message when I attempt to create a kickstart USB drive. It starts the process ut then I get the error message.

    • Stelian Pilici

      Hello Bill,
      This message is shown whenever another process is holding a lock on the USB flash drive. Most times this is because there is a window open which shows the contents of the flash drive. Sometimes Windows is configured to show the contents of a flash drive whenever a new one is inserted into the PC. These windows must be closed before the flash drive can be written. Also the failure can occur because of another AV program, inspecting the contents of the flash drive. In that case, waiting a few seconds and then trying to write again will succeed most of the times.

  • Bushra

    thank you very much for this support. i was so scared when i first saw that stupid virus. i was angry too because i’ve never done any of the three reasons it gave so why would fbi block my screen. then i googled moneypak from another pc and this thing was on top. but thanks a ton. it helped me to get back my pictures. i have a lot of pictures of my babies in my computer and i didn’t get the time to save those to my external drive. i thought i lost all the pictures. but this site helped me to get rid of that fbi scam. safe mode with networking didn’t work for me. it kept shutting down then i used safe mode with command prompt and it worked. thanks again for this great help. can’t thank you enough.

  • Bubba

    Nothing like a plan that kills these programs. You guys are top notch.

  • brandi

    I tried to get into the safe mode but when i entered my password it wouldn’t let me download the information you recommended and the fake ” FBI” site keeps coming up. Any ideas on what I am doing wrong?

  • brooke

    We might be okay now. Phew. Do I need to look for more malicious files on my hard drive, or should I be okay? Some sites had specific files names to look for.

    • Stelian Pilici

      Hello Brooke,
      If you have run the HitmanPro and Malwarebytes scan, your computer should be ok!
      Stay safe! :D

  • David Biggs

    We’ve tried methods 1, 2 & 3. Can’t get to Safe Mode Screen and when we do get to Set-up Screen, then the Load from removable drives function won’t start! Help!! This is our business laptop and Sales Taxes are due in a few days!!

  • Adam

    Worked for me. However Hitman Pro doesnt have the free 30 trial anymore. So, I wasnt able to use that portion of the fix. Thanks for the info!

    • Stelian Pilici

      Hello Adam,
      HitmanPro offers a free 30 days trail for all the home users, however if you are using a laptop from work , then you won’t see the final activation screen.
      Anyway, there are alternatives way to remove the malicious files,can you please run a scan with the following tools:
      STEP 1: Run a scan with RogueKiller

      1. Please download the latest official version of RogueKiller.
        RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Next,run a scan with HitmanPro.

  • Ruth

    Thank you, thank you, thank you. Cannot say it enough times. Got this virus this morning and I got on my husband’s laptop cause I knew I was not distributing kiddy porn and googled this scam. This site was great and got my computer cleared up right away. Thank God for people like you.

  • FrantheMan

    Stelian – thanks for the help. An hour or two of work, and the free tools you recommend, and my PC is back to normal. Thanks!

  • Betty Wyatt

    OMG!!! Got hit with this virus this evening. Thank you so much for this site. I knew I didn’t do anything wrong, but it still scared me to pieces. They completely ruined the movie night with my kids. I hope these creeps are happy and I pray they get caught. But thank you so much for restoring peace in my house with this website.

  • Jason

    Man just got same bs but I was hiting the weights then all of a sudden my screen turn white im like wth is this so im thinking that omg wth I got to pay this for loll…..then I am like hold on you do not ask for moneypak from a walmart or CVS store loll this hacker is funny but they will get caught. Godd luck to the hacker cause yu will get caught.

  • Jimmy

    Thanks you very much for these instructions. I was so upset and didn’t know what to do. I went to several stores knowing that I hadn’t gone on any of these types of websites to look for a Moneypac pre-paid card for $300. Luckily they didn’t have any or I would been out of this money. Thanks God for Google and this website. Thanks again…..

  • Jonathan

    I just want to give my thanks to this site. I got hit with this scam this morning, and I was furious. For a few minutes, I was shocked, and then in a panic becasue I had to come up with $300 before time was up. I talk to some computer savvy friends about MoneyPak, and they said that it sounds very suspicious. I stubbled on this site by just ‘Goggling” some keywords, but I so glad I did. I followed the step on this site and my computer is back to normal. People can be crooks these days, and this was a very convincing scam that can cause panic. I just hope that whoever made this virus is caught before he makes another buck off of some poor victim. Thank you again for this!

  • Melissa

    Hello. I turned my laptop on Thursday morning and found this exact thing. My heart started racing and I was near in tears because I believed it for a few minutes. I had not looked at child porn so I thought that something had to be up so I googled it and Thank God it is a virus. I booted my computer in both safe mode with networking and safe mode with command prompts. It booted to the log in screen and showed two account, administrator and “wlasniewski” which is the computers name. it does nothing when I click either one. I got into the BIOS and booted from my windows xp disc and got into the repair console but didn’t know what to type. I am going to try “C:\windows\system32\restore\rstrui.exe” as suggested above. I put the hitman program onto my portable hard drive and tried booting the laptop from that but it said “no boot sector on drive” or something like that. I don’t want to reformat my whole computer so hopefully I can get to the prompt and enter in the above. Any other suggestions? Thanks for this!

    • Stelian Pilici

      Hello Melissa,
      First try to use this methods and see if they work for you! If not,then I’ll give you additional ways to remove this infection!
      Good luck!

      • Melissa

        I have tried them all :-/ I have had troubles with this laptop before. My husband sold it a couple years ago to a guy he works with and they gave it back and it had a bad virus . So bad that it ruined the hard drive so I replaced it and it has worked great until this virus. I have all the methods. I loaded the hitman program onto my USB flash drive and tried to load the computer from it but it says it could not be found. I loaded the program onto my portable hard drive and it says something like “drive has no boot sector”. What am I missing? I don’t think I have many important things on the lap top so I am not too worried about wiping it clean but I would rather not in case I forgot something I had saved on there.

        • Stelian Pilici

          Hello Melissa,
          You’ll need to create a Kaspersky Rescue CD as seen http://malwaretips.com/blogs/remove-ukash-virus/, on Method 3.
          If everything fails, then you’ll need to create an account on our forums and a member of the staff will help you (with more advanced tools) to remove this nasty virus: http://malwaretips.com/Forum-Malware-Removal-Assistance

          • Melissa

            thanks, Stelian. I was able to load the kickstart and it began to work and then stopped and said it could not complete because the following was missing or corrupt “\windows\system32\config\system”. I will go ahead an create an account on the forum. Thanks so much for all you’ve already done!

            • Phil

              Melissa,

              If you haven’t already, don’t wipe your drive. If there are files on there you consider unreplaceable, pictures etc, as a last resort, a disk recovery service should be able to burn them off onto DVDs even if the boot sector is wrecked. It costs a bit though. I’ve taken this step before after a disk crash, which actually damages some of the surface, and they still got most of it back.

  • saved our a**!

    Thanks so much! we thought we were screwed being that we are in the midst of writing a huge report for a science publication AND applying to teaching programs– it was not good seeing alleged “child pornography” charges while in the process of applying! this FBI bull is by far the worst virus i have ever com across.

    thank you thank you thank you! we would have been completely left in the dark without your help :D

  • John Doe

    Thank you for your help. This walk through was a lifesaver. Wouldn’t have known what to do if not for your article. This is awesome

  • Stan

    Hey, this really helped as an idea. What I did was start my machine in Safe Mode and delete the malware which was located in C:\users\ with some bogus name of random letters. My Nod32 found it, but was unable to clean or quarantine.
    The virus also disables msconfig.exe and task manager (I was able to run my computer to the point where I could do stuff other than delete the file and use those two applications, because I disabled the network adapter)

    Thank you for your help!

  • Stelian Pilici

    Hello Cramer,
    You’ll need to create a Kaspersky Rescue CD as seen http://malwaretips.com/blogs/remove-ukash-virus/, on Method 3.
    If everything fails, then you’ll need to create an account on our forums and a member of the staff will help you (with more advanced tools) to remove this nasty virus: http://malwaretips.com/Forum-Malware-Removal-Assistance

  • john j

    thanks much bro. i almost wanted to file a law suit against these morons… thank you and bless this new year… Bravo…

  • brandon

    I cant thank you enough for helping me out with his one

  • leonard t

    Thnx alot for the info it helped me out alot. i used the restore. Merry xmas

  • got it

    for windows XP under the command prompt to use system restore you need to type in the following in order to activate system restore. %systemroot%\system32\restore\rstrui.exe

  • Nancy V.

    System Restore worked perfectly for me!Thanks Stelian!
    Merry Christmas!

  • Nikil

    Thanks for sharing this!!

    • Wendao

      Thank you very much!

      • Wendao

        Hi, I got a new problem! My PC runs very slowly after I used Malwarebytes Anti-Malware scan my computer. Could you heip me?

        • http://malwaretips.com/ Stelian Pilici

          Hello Wendao,
          Can you please run a scan with the following tools:
          STEP 1: Run a scan with RogueKiller

          1. Please download the latest official version of RogueKiller.
            RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
          2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
          3. After the scan has completed, press the Delete button to remove any malicious registry keys.
          4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

          STEP 2: Please perform a scan with HitmanPro as seen on the guide.
          If you are having problems starting this program please use the ForceBreach mode as described in the guide.


          STEP3 : Run a scan with ESET Online Scanner:

          1. Download ESET Online Scanner utility.
            ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
          2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
          3. Check Yes, I accept the Terms of Use
          4. Click the Start button.
          5. Check Scan archives
          6. Push the Start button.
          7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
          8. When the scan completes, push Finish

          Waiting for your reply to tell me how everything is running!
          Good luck…