FBI Online Agent V2.2 is a ransom program that is part of a Windows locker family of malware. This group is operating worldwide and targeting every region by pretending to be a local police agency. It displays a scary warning that overrides the desktop on the affected PC. Previous released were pretending to be from Europol and Department of Justice.
The FBI Online Agent ransom malware is targeting computer users mainly in the United States. It disguises as a warning from Federal Bureau of Investigation. The warning imposed that you are violation various online illegal activities including copyright infringement, distribution of files, and explicit activities.
Due to mentioned offense, you will not be allowed to use the computer until you pay a penalty amounting to $200. It requires that payment should be made via MoneyPak voucher, where code should be entered into the FBI Online Agent form field.
There is a guarantee that you can regain access after inserting the MoneyPak voucher code. However, there is no assurance that malware will also be removed from the system. In short, spending for FBI Online Agent virus does not fully resolved your computer issues. The best solution is to ignore the malware and start executing the removal procedures below.
What are symptoms of FBI Online Agent MoneyPak Malware Infection?
Obviously, when this malware enters the PC, it shows devastating effect. Your desktop is filled with a fake warning containing these messages:
FBI Online Agent has blocked your computer for security reason.
Threat Summary
| Threat Name: | FBI Online Agent |
| Type: | RansomLock |
| Brief Description: | This type of malware locks the computer or desktop making it unusable. |
| Detected as: | Trojan.Ransomlock.Y |
Description
FBI Online Agent V2.2 is a ransom program that is part of a Windows locker family of malware. This group is operating worldwide and targeting every region by pretending to be a local police agency. It displays a scary warning that overrides the desktop on the affected PC. Previous released were pretending to be from Europol and Department of Justice.
The FBI Online Agent ransom malware is targeting computer users mainly in the United States. It disguises as a warning from Federal Bureau of Investigation. The warning imposed that you are violation various online illegal activities including copyright infringement, distribution of files, and explicit activities.
Due to mentioned offense, you will not be allowed to use the computer until you pay a penalty amounting to $200. It requires that payment should be made via MoneyPak voucher, where code should be entered into the FBI Online Agent form field.
There is a guarantee that you can regain access after inserting the MoneyPak voucher code. However, there is no assurance that malware will also be removed from the system. In short, spending for FBI Online Agent virus does not fully resolved your computer issues. The best solution is to ignore the malware and start executing the removal procedures below.
What are symptoms of FBI Online Agent MoneyPak Malware Infection?
Obviously, when this malware enters the PC, it shows devastating effect. Your desktop is filled with a fake warning containing these messages:
FBI Online Agent has blocked your computer for security reason.
Procedures to Remove FBI Online Agent
Download FREE Removal Tool
Removal steps on this page will help you get rid of the threat effectively using tools and virus scanners. Please make sure that you will carry out the guide in exact order.
Create a USB Bootable Device
Ransom Trojans and viruses will lock the screen and makes the computer unusable. Common ways to deal with this type of infection is to boot the PC using another device. For this tutorial we will do a bootable disk that contains FBI Online Agent remover.
1. Download Kaspersky Rescue Disk from their official server. Click the button below. The file will be in .ISO format.
2. Download this utility called rescue2usb to record your .ISO file into the USB drive. Obviously you need a USB thumb drive at least 512MB in capacity. Plug it to the computer.
3. Once you have the two programs, double-click on the rescue2usb.exe to start creating a bootable USB drive.
4. You will see on the screen in the program called Kasperksy USB Rescue Disk Maker. Click on Browse and locate the .ISO file.
5. Under USB Medium, select the proper drive of your USB device.
6. Click on START. It will now begin to create a bootable USB drive with Kaspersky Rescue Disk in it.
Start the Computer with Kaspersky Rescue Disk.
1. You must set the computer to use other bootable device aside from hard drive. For this procedure, enable your BIOS to boot to USB device. If you are not familiar with this, please refer to your computer's instruction manual.
2. Another option is to access the Boot Menu right after you turn one the PC. It will present a Menu so that you can select a preferred boot drive. Select Removable Devices.
3. Your computer will now start and load Kaspersky Rescue Disk.
4. If you see a message on the screen, please Press any key to enter the menu. You only have 10 seconds to do this, otherwise it will boot with the hard drive.
5. Next screen will be the interface language. Please select desired language to use.
6. You must run the program in Graphic Mode. This gives you easy access to all commands and menus.
7. End User License Agreement will appear. Please accept to continue using the program. Press 1 to proceed.
Using WindowsUnlocker to Remove FBI Online Agent
1.Click on the K button at the lower left corner of the screen.
2. Select Terminal on the list. It will open a command prompt.
3. Type windowsunlocker and press Enter on your keyboard.
4. On WindowsUnlocker menu, please type 1 to Unlock Windows. This utility will clean the registry for malicious entries.
5. After the cleanup process, it will display the menu once more.
6. Press 0 on your keyboard to exit WindowsUnlocker.
Run a Virus Scan
1. After removing FBI Online Agent, you need to delete all remaining components.
2. Click on the K to display the menu.
3. Select Kaspersky Rescue Disk. This will open the virus scanning tool.
4. You need to update the program first. Select My Update Center tab and click on Start update. This requires an Internet connection.
5. After updating the program, select Object Scan tab and click on Start Object Scan. You must scan the following:
- Disk boot sectors
- Hidden startup objects
- All drives
6. Scanning the entire hard drive may take some time. Please let the scan to finish.
7. Once the scan process is complete, the tool will prompt you for preferred actions on detected threats. Deleting all threats is recommended.
8. You can now turn off the computer, unplug the USB drive, and start Windows in normal mode.
Thanks for your great site!!
I spent over 8 hours searching on how to remove this ‘ransom’ virus.
Not one site addressed the issue of needing to somehow make a bootable disk. Even Microsoft did not mention this issue.
Every help site, like ‘ehow’ had no instruction on making a boot disk. They suggested using the roll back feature, restore points. I have Windows7 and some said to use the ‘last good startup’ option. Well, neither of these worked, since the virus keeps you from utilizing them. ‘Mybleepingcomputer’ had a delete procedure that would require a computer science degree to use!
The Kaspersky people need to be thanked. Your instructions on how to use their program were perfect.
Thanks again!!!!