Remove FBI Online Agent virus (MoneyPak Scam)

Photo of author

Written by: Stelian Pilici

Published on:

The FBI Online Agent MoneyPak Ransom is a computer virus, which will display a bogus notification, that pretends to be from Federal Bureau of Investigation and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.
The FBI Online Agent virus will lock you out of your computer and applications, so whenever you’ll try to log on into your Windows operating system or Safe Mode with Networking, it will display instead a lock screen asking you to pay $200 in the form of a MoneyPak code.
Furthermore, to make its alert seem more authentic, this virus will display a countdown timer, a bogus case number and FBI agent name,needless to say that all this details are fake and are only used, in an attempt to scare you into sending a MoneyPak code.
If your computer is infected with FBI Online Agent virus,then you are seeing the below notification:

FBI Online Agent MoneyPak virus
The FBI Online Agent Ransom will display the following bogus notification:

FBI Online Agent has blocked your computer for security reason
The work of your computer has been suspended on the grounds of unauthorized cyberactivity. Described below are possible violation, you have made.
Article 274 – Copyright
A fine or imprisonment for the term of up to 4 years. (The use or shanng of copyrighted files-movies, software)
Article 183 – Pornography
A fine or imprisonment for the term of up to 2 years (The use or distribution of pornographic Nes)
Article 184- Pornography involving children (under 18 years)
Imprisonment for the term of up to 15 years (The use or distribution of pornographic files)
Article 104- Promoting Terrorism
Imprisonment for the term of up to 15 years (You have visited websites of terrorist organization)
Article 297 – Neglect computer use, entailing serious consequences
A fine or imprisonment for the term of up to 2 years (Your computer has been infected with a virus, which, in turn, Infected other computers)
In connection with the decision of the Government as of August 12, all of the violations described above could be considered as conditional in case of payment of a fine.
Amount of the fine is $200. Payment must be made within 24 hours after the discovery of the violation. If the fine has not been paid, you will become the subject of criminal prosecution.
After paying the fine your computer will be unblocked

The FBI Online Agent Ransom is a scam and you should ignore any alert that this malicious software might generate and remove this trojan ransomware from your computer.
Under no circumstance should you send any money to this cyber criminals,as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.

FBI Online Agent MoneyPak Ransomware – Virus Removal Guide

STEP 1: Remove FBI Online Agent lock screen from your computer

The FBI Online Agent MoneyPak Ransom has modified your Windows registry and added its malicious files to run at start-up, so whenever you’re trying to boot your computer it will launch instead its bogus notification.To remove this malicious changes,we can use any of the below methods :

Method 1: Start your computer in Safe Mode with Networking and scan for malware

Some variants of the FBI Online Agent virus will allow the users to start the infected computer in Safe Mode with Networking without displaying the bogus lock screen. In this first method, we will try to start the computer in Safe Mode with Networking and then scan for malware to remove the malicious files.

  1. Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
  2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
    [Image: Safe Mode with Networking]
  4. If you computer has started in Safe Mode with Networking, you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

IF the FBI Online Agent virus didn’t allow you to start the computer in Safe Mode with Networking,you’ll need to follow Method 2  to get rid its screen lock.

Method 2: Restore Windows to a previous state using System Restore

System Restore can return your computer system files and programs to a time when everything was working fine, so we will try to use this Windows feature to get rid of the FBI Online Agent lock screen.

  1. Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  2. Use the arrow keys to select the Safe mode with a Command prompt option.
    Enter Safe Mode with Command Prompt
  3. At the command prompt, type cd restore, and then press ENTER.
    Next,we will type rstrui.exe , and then press ENTER
    System Restore commands
  4. The System Restore window will start and you’ll need to select a restore point previous to this infection.
    Restore points in Windows 7
  5. After System Restore has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

IF the FBI Online Agent virus didn’t allow you to start the computer in Safe Mode with Command Prompt you’ll need to follow Method 3, to get rid its screen lock.

Method 3: Remove FBI Online Agent virus with HitmanPro Kickstart

IF you couldn’t boot into Safe Mode with Command Prompt or didn’t have a System Restore point on your machine, we can use HitmanPro Kickstart to bypass this infection and access your computer to scan it for malware.

  1. We will need to create a HitmanPro Kickstart USB flash drive,so while you are using a “clean” (non-infected) computer, download HitmanPro from the below link.
    HITMANPRO DOWNLOAD LINK (This link will open a download page in a new window from where you can download HitmanPro)
  2. Insert your USB flash drive into your computer and follow the instructions from the below video:
  3. After you have create the HitmanPro Kickstart USB flash drive, you can insert this USB drive into the infected machine and start your computer.
  4. Once the computer starts, repeatedly tap the F11 key (on some machines its F10 or F2),which should bring up the Boot Menu, from there you can select to boot from your USB.
    Next,you’ll need to perform a system scan with HitmanPro as see in the below video:
  5. After HitmanPro Kickstart has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

STEP 2: Remove FBI Online Agent malicious files from your computer

No matter what method did you use to get rid of the FBI Online Agent lock screen, we will need to remove its malicious files from your computer.Please download and run a scan with the following scan to completely remove the FBI Online Agent virus from your computer.

Run a computer scan with Malwarebytes Anti-Malware Free

  1. You can download Malwarebytes Anti-Malware Free from the below link,then double click on it to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process.
    DO NOT make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked,then click on the Finish button.
    Malwarebytes Anti-Malware installation
  3. On the Scanner tab,select Perform quick scan and then click on the Scan button to start scanning your computer.
    Malwarebytes Anti-Malware quick scan
  4. Malwarebytes’ Anti-Malware will now start scanning your computer for FBI Online Agent malicious files as shown below.
    Malwarebytes scanning for FBI Online Agent
  5. When the Malwarebytes scan will be completed,click on Show Result.
    Malwarebytes scan results
  6. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    Infections found by Malwarebytes
  7. After your computer will restart, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

Run a computer scan with HitmanPro

  1. Download HitmanPro from the below link,then double click on it to start this program.
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
    IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro scanner
    HitmanPro installation
  3. HitmanPro will start scanning your computer for FBI Online Agent malicious files as seen in the image below.
    HitmanPro scans after FBI Online Agent
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove this malicious files.
    HitmanPro scan results
  5. Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button

If you are still experiencing problems while trying to remove FBI Online Agent virus from your machine, please start a new thread in our Malware Removal Assistance forum.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.

56 thoughts on “Remove FBI Online Agent virus (MoneyPak Scam)”

  1. I have cm security on my phone and it removed it i dont know if it works on computers but i know it worked on my phone. Hope i helped.

  2. Thanks for the help!!! 2nd time dealing with this scam, had to use the flashdrive solution this time and it worked after startup with the f12 key. Tried f8-f11 but f12 is the one that worked. Thanks again.

  4. Hello, Stelian !

    I got the virus through a music sharing blog! Norton help line, thru India tried valiantly to help, but after 2 hours offered me only a $200 advanced wipe which they said could lose settings and files. So, my search brought me here.
    I could not do a safe boot of any kind, it was completely disabled, but your advice to make a Kaspersky Rescue CD at the link: http://malwaretips.com/blogs/remove-ukash-virus/ was absolutely the best, totally fixed the issue, and subsequent tests with other antivirus programs show that it is OK now!
    thanks!!

    By the way, I ran checkdisk after all was done and it corrected a couple of errors that may have happened as a result of the rescue disc. Everything running smoothly and no lost files or settings!

  5. wow!! this was my first virus today scared the life out of me ended up at the police station thinking i was going to get locked up..this site was the first i clicked to see if i could fix it myself,, and you deserve a gold medal for your easy to understand top quality instructions..i fixed my pc its up and running all within an hour.. and i owe it all to you..thank you so much for sharing what you know with others i did not have the money to take my pc in to the shop and was in a real state of panic ..you are amazing and i wish i could squeeze you tight and give u a big hug..thanks a million for everything :) hope you have a very lovely day

  6. I got this ransomware for the 2nd time. I don’t use any virus, malware, spyware equipment because I too am somewhat of a geek with my own equipment.

    This time it’s different than the first, I scanned disk and it deleted my back up restore files. So long story short I just said to he’ll with it and did a factory restore.
    It’s like the doomsday option hahaha, just wanna let anyone reading this know that it’s evolved.

  7. Thank you so much Mr. Pilici for your computerized repair skills and to freely help us individuals who thought they were in deep trouble! I recently got the virus and quickly rushed for a moneypak, however I believe it didn’t went through as I rechecked the balance on my Paypal. So, with the same concern with Y.c, there shouldn’t be any access to any information then. By the way, you are our Lifesaver!!! Much appreciation!

  8. Hello Y.c,
    No, this type of malware should not contain any keyloggers or other spyware. Trojan:W32/Reveton is a ransomware application. It fraudulently claims to be from a legitimate law enforcement authority and prevents users from accessing their infected machine, demanding that a ‘fine’ must be paid to restore normal access.

  10. Hello Wendao,
    Can you please run a scan with the following tools:
    STEP 1: Run a scan with RogueKiller

    1. Please download the latest official version of RogueKiller.
      RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
    2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
    3. After the scan has completed, press the Delete button to remove any malicious registry keys.
    4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

    STEP 2: Please perform a scan with HitmanPro as seen on the guide.
    If you are having problems starting this program please use the ForceBreach mode as described in the guide.

    STEP3 : Run a scan with ESET Online Scanner:

    1. Download ESET Online Scanner utility.
      ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
    2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
    3. Check Yes, I accept the Terms of Use
    4. Click the Start button.
    5. Check Scan archives
    6. Push the Start button.
    7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    8. When the scan completes, push Finish

    Waiting for your reply to tell me how everything is running!
    Good luck…

  11. Hi, I got a new problem! My PC runs very slowly after I used Malwarebytes Anti-Malware scan my computer. Could you heip me?

  14. Hello,
    In the Command prompt,type in the following:
    For Windows XP: C:\windows\system32\restore\rstrui.exe and press Enter
    For Windows Vista/7/8 : C:\windows\system32\rstrui.exe and press Enter
    If for some reason, it won’t go into the System Restore options, boot your computer in Safe Mode with Command Prompt, and type msconfig in the Command prompt. This should start the Windows System Configuration tool. Go to the Start-up tab, and search for any suspicious or unknonw entries (random numbers or letter, ctfmon.exe and other suspicious entries), and uncheck them from start-up. Next boot your computer in regular mode and perform a scan with HitmanPro and Malwarebytes as seen on the guide.

  15. When I go into safe mode with command prompt how do you type in cd restore ? If I click on it it takes me to a black screen can’t remember what it say and I type it there and it does nothening am I suppose to right click not left click to be able to type next to safe mode command prompt . The way u have that worded sound like I have to type that right next to it and I can’t . I had already downloaded malware thing and did a scan in safety mode and tried to logged in without safe mode and it was still the the FBI message so I’m really wanting to try ur suggestion please help

  17. My question is what if the message is from department of justice can you still go through the instructions

  18. Hello Alex,
    ESET is a good scanner and you can give it a go. If you are still having issues, then we recommend that you install and scan with Malwarebytes and HitmanPro.
    Stay safe!

  19. Thanks so much!!!!! I hadn’t even done any of the stuff they claimed I had and I don’t believe the FBI would make it so obvious that they were tracking your computer data so I just knew it had to be a virus, so I searched online and found this amazing website with simple enough instructions to follow. I have now completely fixed my computer, BUT I was wondering that instead of perhaps using the Malwarebytes Anti-Malware software and the Hitman Pro software, could I perhaps use the eset anti-virus protection I already have on my laptop to scan all of my computer hard drives? I don’t know if that would work efficiently and remove the virus, let alone, would it work at all?

  20. Thank you so very much for posting this! My daughter’s computer became infected with this virus, and I was at a loss as to what to do. I was able to start in “safe mode with networking”, and used the Malware link to clear out the 8 viruses found. Your explanation of the steps made it so very easy. Again, many thanks!

  21. So I was able to get into the desktop screen after I went through the process of logging on with “safe mode” and I ran malaware twice. It came up as six virus removed. So is the virus completely out of my system

  22. Hello Bill,
    This message is shown whenever another process is holding a lock on the USB flash drive. Most times this is because there is a window open which shows the contents of the flash drive. Sometimes Windows is configured to show the contents of a flash drive whenever a new one is inserted into the PC. These windows must be closed before the flash drive can be written. Also the failure can occur because of another AV program, inspecting the contents of the flash drive. In that case, waiting a few seconds and then trying to write again will succeed most of the times.

  23. I get an error #5, Lock message when I attempt to create a kickstart USB drive. It starts the process ut then I get the error message.

  25. thank you very much for this support. i was so scared when i first saw that stupid virus. i was angry too because i’ve never done any of the three reasons it gave so why would fbi block my screen. then i googled moneypak from another pc and this thing was on top. but thanks a ton. it helped me to get back my pictures. i have a lot of pictures of my babies in my computer and i didn’t get the time to save those to my external drive. i thought i lost all the pictures. but this site helped me to get rid of that fbi scam. safe mode with networking didn’t work for me. it kept shutting down then i used safe mode with command prompt and it worked. thanks again for this great help. can’t thank you enough.

  27. I tried to get into the safe mode but when i entered my password it wouldn’t let me download the information you recommended and the fake ” FBI” site keeps coming up. Any ideas on what I am doing wrong?

  29. Hello Brooke,
    If you have run the HitmanPro and Malwarebytes scan, your computer should be ok!
    Stay safe! :D

  30. We might be okay now. Phew. Do I need to look for more malicious files on my hard drive, or should I be okay? Some sites had specific files names to look for.

  31. We’ve tried methods 1, 2 & 3. Can’t get to Safe Mode Screen and when we do get to Set-up Screen, then the Load from removable drives function won’t start! Help!! This is our business laptop and Sales Taxes are due in a few days!!

  32. Hello Adam,
    HitmanPro offers a free 30 days trail for all the home users, however if you are using a laptop from work , then you won’t see the final activation screen.
    Anyway, there are alternatives way to remove the malicious files,can you please run a scan with the following tools:
    STEP 1: Run a scan with RogueKiller

    1. Please download the latest official version of RogueKiller.
      RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
    2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
    3. After the scan has completed, press the Delete button to remove any malicious registry keys.
    4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

    STEP 2: Run a scan with ESET Online Scanner:

    1. Download ESET Online Scanner utility.
      ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
    2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
    3. Check Yes, I accept the Terms of Use
    4. Click the Start button.
    5. Check Scan archives
    6. Push the Start button.
    7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    8. When the scan completes, push Finish

    Next,run a scan with HitmanPro.

  33. Worked for me. However Hitman Pro doesnt have the free 30 trial anymore. So, I wasnt able to use that portion of the fix. Thanks for the info!

  34. Thank you, thank you, thank you. Cannot say it enough times. Got this virus this morning and I got on my husband’s laptop cause I knew I was not distributing kiddy porn and googled this scam. This site was great and got my computer cleared up right away. Thank God for people like you.

  35. Stelian – thanks for the help. An hour or two of work, and the free tools you recommend, and my PC is back to normal. Thanks!

  36. OMG!!! Got hit with this virus this evening. Thank you so much for this site. I knew I didn’t do anything wrong, but it still scared me to pieces. They completely ruined the movie night with my kids. I hope these creeps are happy and I pray they get caught. But thank you so much for restoring peace in my house with this website.

  38. Man just got same bs but I was hiting the weights then all of a sudden my screen turn white im like wth is this so im thinking that omg wth I got to pay this for loll…..then I am like hold on you do not ask for moneypak from a walmart or CVS store loll this hacker is funny but they will get caught. Godd luck to the hacker cause yu will get caught.

  39. Melissa,

    If you haven’t already, don’t wipe your drive. If there are files on there you consider unreplaceable, pictures etc, as a last resort, a disk recovery service should be able to burn them off onto DVDs even if the boot sector is wrecked. It costs a bit though. I’ve taken this step before after a disk crash, which actually damages some of the surface, and they still got most of it back.

  40. Thanks you very much for these instructions. I was so upset and didn’t know what to do. I went to several stores knowing that I hadn’t gone on any of these types of websites to look for a Moneypac pre-paid card for $300. Luckily they didn’t have any or I would been out of this money. Thanks God for Google and this website. Thanks again…..

  41. I just want to give my thanks to this site. I got hit with this scam this morning, and I was furious. For a few minutes, I was shocked, and then in a panic becasue I had to come up with $300 before time was up. I talk to some computer savvy friends about MoneyPak, and they said that it sounds very suspicious. I stubbled on this site by just ‘Goggling” some keywords, but I so glad I did. I followed the step on this site and my computer is back to normal. People can be crooks these days, and this was a very convincing scam that can cause panic. I just hope that whoever made this virus is caught before he makes another buck off of some poor victim. Thank you again for this!

  42. thanks, Stelian. I was able to load the kickstart and it began to work and then stopped and said it could not complete because the following was missing or corrupt “\windows\system32\config\system”. I will go ahead an create an account on the forum. Thanks so much for all you’ve already done!

  44. I have tried them all :-/ I have had troubles with this laptop before. My husband sold it a couple years ago to a guy he works with and they gave it back and it had a bad virus . So bad that it ruined the hard drive so I replaced it and it has worked great until this virus. I have all the methods. I loaded the hitman program onto my USB flash drive and tried to load the computer from it but it says it could not be found. I loaded the program onto my portable hard drive and it says something like “drive has no boot sector”. What am I missing? I don’t think I have many important things on the lap top so I am not too worried about wiping it clean but I would rather not in case I forgot something I had saved on there.

  45. Hello Melissa,
    First try to use this methods and see if they work for you! If not,then I’ll give you additional ways to remove this infection!
    Good luck!

  46. Hello. I turned my laptop on Thursday morning and found this exact thing. My heart started racing and I was near in tears because I believed it for a few minutes. I had not looked at child porn so I thought that something had to be up so I googled it and Thank God it is a virus. I booted my computer in both safe mode with networking and safe mode with command prompts. It booted to the log in screen and showed two account, administrator and “wlasniewski” which is the computers name. it does nothing when I click either one. I got into the BIOS and booted from my windows xp disc and got into the repair console but didn’t know what to type. I am going to try “C:\windows\system32\restore\rstrui.exe” as suggested above. I put the hitman program onto my portable hard drive and tried booting the laptop from that but it said “no boot sector on drive” or something like that. I don’t want to reformat my whole computer so hopefully I can get to the prompt and enter in the above. Any other suggestions? Thanks for this!

  47. Thanks so much! we thought we were screwed being that we are in the midst of writing a huge report for a science publication AND applying to teaching programs– it was not good seeing alleged “child pornography” charges while in the process of applying! this FBI bull is by far the worst virus i have ever com across.

    thank you thank you thank you! we would have been completely left in the dark without your help :D

  48. Thank you for your help. This walk through was a lifesaver. Wouldn’t have known what to do if not for your article. This is awesome

  49. Hey, this really helped as an idea. What I did was start my machine in Safe Mode and delete the malware which was located in C:\users\ with some bogus name of random letters. My Nod32 found it, but was unable to clean or quarantine.
    The virus also disables msconfig.exe and task manager (I was able to run my computer to the point where I could do stuff other than delete the file and use those two applications, because I disabled the network adapter)

    Thank you for your help!

  51. thanks much bro. i almost wanted to file a law suit against these morons… thank you and bless this new year… Bravo…

  54. for windows XP under the command prompt to use system restore you need to type in the following in order to activate system restore. %systemroot%\system32\restore\rstrui.exe

Comments are closed.

Previous

Remove POLSKA POLICJA virus (PaySafeCard scam)

Next

Remove Claro Search (Removal Instructions)