FBI Online Agent virus - How to remove

FBI Online Agent virus is a rasomware program that tries to deceive computer users located mainly in the US. The virus enters random computers using Trojan viruses that sneak in over system vulnerabilities. Once inside FBI Online Agent virus blocks your system displaying one message. It imitates the warning from FBI accusing you on using some copyrighted content which is illegal by law. For this reason you are told to pay a fine of $200.

FBI Online Agent virus does not allow to do anything on your machine. It remains blocked over entire time the virus is there. It seems that paying a fine is the only thing you can do and many computer users get tricked this way. However, if you think a little more, FBI would never warn you about your fines by displaying one message on your computer screen. Moreover, it would never use such payment methods as FBI Online Agent message tells you. Basically, you are asked to make a transfer over Moneypak payment system. That would never happen for any official institution.

Ignore the content of the message of FBI Online Agent virus. It has nothing to do with legal actions. The only way to get your computer unlocked is to remove FBI Online Agent virus from there. Since it can be tricky to run you antispyware program straight away (unless you can do it from another account), you are highly advised to perform the steps mentioned below. After that we highly recommend scanning your system using some reputable antispyware program, such as spyhunter or Hitman Pro:

1. Reboot your PC into Safe Mode with Networking (press F8 while restarting)
2. Press Windows Key + R (letter). This will open the run box.
3. Delete the text inside the run box and type regedit.exe then click “Ok”
4. Navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
5.Look for .exe running from the following folder: %userprofile%\Local Settings\Application Data\Microsoft\Windows\912\WSManHTTPConfig.exe

To remove the .exe file, follow these steps:

1. Open up the run box again.
2. Enter Control folders and click OK.
3. Navigate to the View tab
4. Tick “Show hidden files, folders, drives” and untick “Hide Protected Operating System Files”
5. Open the run box again and type in %userprofile%. Then click OK.
6. Navigate to “Local Settings\Application Data\Microsoft\Windows\”
7. Delete that folder that was marked in the registry key.
8.Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe .

We also want to say thank you for TeamRocketOps for for notifying about ransomware.

Automatic Malware removal tools

Manual removal