FBI Online Agent Has Blocked Your Computer (Android Virus Removal)

FBI Online Agent Message Is A Scam

Aim:               get easy money
Target:               enterprises and individuals
Attribute:         Ransomware
Hazard index:

FBI Online Agent Android virus belongs to what we call ‘MoneyPak virus’ which contains FBI virus, Department of Justice virus, United State Cyber Security virus and the Firewall of the United States. ‘FBI Online Agent Has Blocked Your Computer/Android Phone for Security Reason’ warning message demands a $200 MoneyPak payment as a ransom for actions violating laws on copyrighted material to be put on the state’s account, claiming which will unblock the sealed screen in 1 to 48 hours.

‘FBI Online Agent Has Blocked Your Computer/Android Phone for Security Reason’ message is totally fraudulent, though it lists down several Articles, detected files that are claimed to be copyrighted ones improperly downloaded/ viewed; shows details on address, responsible agent, emails. Please bear in mind that no State department will collect ransom in such informal way by suddenly locking down the whole screen. Once the demanded amount of money is submitted, there will be little chance that the hacker will help unblock ‘FBI Online Agent Has Blocked Your Computer/Android Phone for Security Reason’ fake message.

What Is MoneyPak?

Just like Ukash, MoneyPak, also known as greendot MoneyPak, is a prepaid card which has been widely considered to be a convenient way to complete a purchase without bankcard/ credit card mainly in U.S.A.. It features itself with functions like reload a prepaid card; add money to PayPal; make a payment; add funds to serve and cash deposit. Because of its conveniency, many reputable financial commodities have made cooperation with it, such as Paypal and metroPCS, and it has made itself as the most competitive prepaid card again Ukash.

MoneyPak payment method can be deemed as a secure payment. However, more and more fake police Android virus turn to use it to make them more convincible as well as assure that real money will be transferred into their pockets. Without the strict regulations on online account, it is quite difficult for police to trace down the real hacker behind ransomware. For this reason, ‘FBI Online Agent Has Blocked Your Computer/Android Phone for Security Reason’ employs MoneyPak payment method.

Dangers by FBI Online Agent Virus

By virtue of Trojan, ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus is capable of overwriting the original vicious file after encrypting the original codes into another folder placed in the protected area by Windows. Hence, anti-virus programs will not able to remove FBI Online Agent virus even after deleting all detected items as detected items are fake ones. There is another worrisome characteristic of ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus which is the ability to form a backdoor. After injecting its registry entries into database of a system, FBI Online Agent virus manages to manipulate the configuration to its satisfaction to shape a hole which can be easily exploited by deadly virus, leading to irritating consequence where search results are hijacked/ redirected frequently, surfing experience is ruined by ceaselessly pop-up ads; computer is running sluggishly; etc.. To crown it all, the hole is made use of transmitting vicious code to threat victims to quickly hand over money by further corrupting the target computer:

• all forms of Safe Modes are gradually disabled
• F8 key becomes fallacious to take people into ‘Advanced Windows Options’
• white/ black screen happens without leading to anywhere.
• computer screen will go straight to ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ fraudulent message after the computer beeps.
• system restore and system repair are destroyed by ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus

User Guide to Remove FBI Online Agent Has Blocked Your Computer for Security Reason

The helping procedure can be cumbersome since FBI Online Agent virus manages to disable build-in services by arbitrarily modifying the kernel part of a machine. Anyway, the solution will stand a larger chance to help regain functional computer than submitting heavy money. Get down to unfreeze ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ message by strictly following the steps now.

One: Enter into ‘Safe Mode with Networking’ to see if it is available; if so, remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus there.

Ⅰ Boot into Safe Mode with Networking.

for Windows 8 users

• Please hold shift key and click on power button at the right-hand bottom together.
• Select Restart.
• Select Troubleshoot with arrow keys.

• Highlight Advanced options with arrow keys and hit Enter key.
• Hit Restart button at the right bottom of the screen.
• Please hit F5 to get into safe mode with networking.

for Windows 7/XP/Vista users:

• As the computer is booting but before Windows launches, keep tapping on “F8 key” continuously.

• Highlight “Safe Mode with Networking” option when “Windows Advanced Options Menu” pops up.
  Press Enter key.

 

Ⅱ Disable startup items to stop autorun of ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.

for Windows 8 users:

• Type ‘Task’ on Charms bar after moving mouse over lower part of Start screen.
• Tap Enter key.
• Find and check the box next to the virus.
• Press ‘Disable’ option to remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.

for Windows 7/XP/Vista users:

• Hold Win key and R key simultaneously to bring up Run box.

• Type ‘msconfig’ and hit Enter key.
• Find and tick items related to the virus.
• Press ‘Disable All’ option to remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.

Ⅲ Modify back settings in database.

for Windows 8 users:

• Move your mouse over lower right screen.
• Type ‘regedit’ in Search charm.
• Hit Enter key.
• Press and hold Ctrl+F together to search for Winlogon.
• Anckor the key labeled Shell in the right pane.
• Right click on it and replace it with ‘explorer.exe’ to help remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.

for Windows 7/XP/Vista user:

1. Click “start”.
2. Put ‘regedit’ in Run box and press Enter key.
3. Press and hold Ctrl+F to search for Winlogon.
4. Anckor the key labeled Shell in the right pane.
5. Right click on it and replace it with ‘explorer.exe’ to help remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.

Ⅳ Show hidden files to remove FBI Online Agent virus.

for Windows 8 users:

• Open Windows Explorer by clicking on Windows Explorer application from Start Screen.

• Hit View tab to tick ‘File name extensions’ and ‘Hidden items’ options
• Press ‘OK’ button.
• Remove files with abnormal name, such as serial numbers with random letters, from Roaming folder and Temp folder respectively in C Disk.

for Windows 7/XP/Vista users:

• Open ‘Control Panel’ from Start menu and search for ‘Folder Options’.
• Under View tab, tick ‘Show hidden files and folders and non-tick Hide protected operating system files (Recommended)’ and then click ‘OK’.
• Remove files with abnormal name, such as serial numbers with random letters, from Roaming folder and Temp folder respectively in C Disk.

V Save changes by restarting the computer and back to normal mode to see if ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus is gone.

Two: Enter into ‘Safe Mode with Command Prompt’ if ‘Safe Mode with networking’ is down.

ⅠEnter into Safe Mode with Command Prompt.

for Windows 8 users:

• Press Alt,Ctrl and delete key together to get options on a blue screen.
• Hold shift key and click on power button

at the right bottom together.

• Highlight Troubleshoot with arrow keys and hit Enter key.
• Choose Advanced options.
• Hit Restart button again at the right bottom of the screen.
• Hit F6 to get into safe mode with command prompt.

for Windows 7/XP/Vista users:

• As the computer is booting but before Windows launches, keep tapping “F8 key” continuously.
• Highlight “Safe Mode with Command Prompt” option when “Windows Advanced Options Menu” comes up and hit Enter key.

Ⅱ Create a new user account with Administrator right from cmd.

• Type ‘explore’ at the place where a slash is flashing behind “System32”.
• Hit Enter key to enable desktop.

Create a new user account with administrator right.

Ⅲ Remove ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus in the newly created user account.

• Restart the computer normally after creating a new user account.
• Click on the name for the newly created user account once when you are asked to select a desired account to get in.
• Follow stepⅡto stepⅤgiven above.

Three: All forms of Safe Mode become useless.

Ⅰ Reboot computer and log into ‘Repair Your PC’ from system CD.

for Windows XP users:

• Insert Windows XP CD into the drive (if Autoplay kicks in, exit out of it).
• Hold Win key and R key together to launch Run box.
• Copy and Paste ‘sfc /scannow’ into the box.
• Windows File Protection Service scans all protected files and verifies integrity, replacing any files with which it finds a problem.
• Be patient and allow this process to proceed completely.
• Restart your computer when the process is completed.

for Windows 7 users:

1. Put Windows 7 CD in your optical drive.
2. Restart to boot from the DVD.
3. On the “Install Windows” screen,  select for appropriate language, time and keyboard before clicking on “Next” button.
4. Click “Repair Your Computer” on the next screen.
5. When led to“System Recovery Options” screen, select the operating system you want to restore if any listed, and click “Next”.
6. Select “Startup Repair” when “System Recovery Options” screen shows up.

for Windows Vista users:

• Insert Windows Vista DVD and restart the computer with the DVD in.
• ‘Press any key to boot from CD or DVD’ will be displayed on black screen.
• Press any key to start the booting process.
• ‘Windows is loading files’ will be seen.
• Another small progress bar appears after several minutes.
• Select your language and keyboard language and click Next button when you are given options.
• Click on the Repair Your Computer option at the bottom left of install screen.
• Once the ‘Vista installation’ is located, highlight it and then click the Next button.

You will see the picture below:

Click on Startup Repair and let the wizard finish.
It is perfectly normal that the computer restarts after it finishes the process.

for Windows 8 users:

• Type ‘Advanced’ in Charms bar on Start Screen.
• Click Settings category.
• Choose Advanced startup options.
• Scroll down to the bottom of “General PC Settings” to select Advanced startup.
• Press on Restart now button.
• Select Troubleshoot.
• Go into Advanced options.
• Click on Automatic Repair.
• Log in the User Account blocked by ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus.
• Automatic repair will now start.
• Your computer will automatically restart after a while, which is perfectly normal; please leave it to complete all the process.

How to Prevent Getting ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ Virus?

Many people would like to know the ways to prevent FBI Online Agent virus. Before that, we need to know the dissemination routine of ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus. Nowadays as computers are connected by Internet, network has become the main source to be commonly utilized for virus invasion and propagation. Should there be any vulnerability on web applications, it becomes more likely to be infected with ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus. The secondly popular way for such ransomware to plague PC users is to cheat users to download Flash Player/ Adobe by popping up fake message that looks just exactly like the genuine one. Also, there are other ways to help ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus get into a computer, they are:

(1) sending links pointing to poisoned sites or fraudulent sites offering download service through instant message;

(2) sending luring but vicious links that would download virus codes upon a click is made by emails making up by hackers;

(3) streaming videos, especially the ones containing pornographic content, on either reliable or unreliable resources.

Therefore, we can take some steps accordingly to prevent getting ‘FBI Online Agent Has Blocked Your Computer for Security Reason’ virus:

Download up-to-date patches for installed browsers/ programs/ Windows and put them into practice.
Do not click open any attachments in an Email sent by strangers.
Do not accept or run files/ documents sent through chat tools casually.
No visit to unknown foreign web sites, especially the ones containing pornographic content or offering video downloads.

Besides, we should also enhance secure coefficient by:

activating Windows Firewall or the ones produced by other reputable anti-virus programs.
employing IDS (Intrusion Detect System) to analyze collected information on computer networks or computing system in an attempt to help detect any action violating security policy and sign of under attack.
utilizing Web Monitor to achieve real-time understanding of the online environment, making it possible to be far away from vicious situation before getting virus.

updating virus signatures on a regular base.
blocking connections to vicious web sites at gateway.

Conclusion:

Ransomware including ‘FBI Online Agent Has Blocked Your Computer/Android Phone for Security Reason’ virus has become one of the most severe problems in western countries. The occurrence of ransomware is on the rise. What makes the situation even worse is that encryption algorithm ransomware uses is getting complicated and highly insured, reaching the extremity of modern cryptography. As a consequence, PC and Android users manage to remove ransomware away without getting their encrypted files back. Because of this, there are some PC and Android users willing to submit the money so fix in the fraudulent message. As far as we have learned, no more than 1% PC users who paid the non-existent fine obtain back their encrypted documents. In such case, it is highly recommended to backup cherished documents at ordinary times.

Published & last updated on September 11, 2014 by Erik V. Miller