Severity scale:  

FBI Online Agent. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as FBI Online Agent virus, Ukash virus | Type: Ransomware

FBI Online Agent and its alert titled 'FBI Online Agent has blocked your computer for security reason' is a huge scam, which has nothing to do with the Federal Bureau of Investigation. In fact, this is a ransomware virus that seeks to swindle the money from its victims. FBI Online Agent clearly targets US people. However, we have already notified about other versions that seek to rip European users as well. In reality, it belongs to a group of hackers who have been releasing their viruses almost every day, so FBI Online Agent acts just like its predecessor FBI virus. After getting inside the PC, it locks the entire system and displays its misleading alert. This notification claims that FBI Online Agent has blocked your computer for security reasons and asks to pay the fine in order to unblock it. For that, this threat offers to use Moneypak prepayment system and enter the code at the buttom of the poge. Don't believe these promisses that this will unblock your computer! You must simply remove FBI Online Agent virus from the system as soon as possible.


FBI Online Agent virus is distributed by trojan horse, which mostly uses a fake warning saying that user has to update his Flash Player. Besides, some people have reported that it uses spam emails that look officially and use FBI logos. As soon as it gets inside, this program locks the PC with its warning. As a result, you can't do anything with your computer because it's simply blocked. FBI Online Agent's victim sees only this notification:

FBI Online Agent has blocked your computer for security reason
The work of your computer has been suspended on the grounds of unauthorized cyberactivity.
Described below are possible violates, you have made:
Article 274 – Copyright
A fine or imprisonment for the term of up to 4 years. (The use or sharing of copyrighted files – movies, software)
Article 183 – Pornography
A fine or imprisonment for the term of up to 2 years. (The use or distribution of pornographic files).
Article 184 – Pornography involving children (under 18 years)
Imprisonment for the term of up to 15 years. (The use of distribution of pornographic files)

If you see such alert, don't think that the only way, which can help you to unlock your computer, is to pay the fine. Instead of doing that, we highly recommend saving your money and unlocking computer by using other methods. Here are they:

HOW CAN I REMOVE FBI Online Agent virus?

When trying to remove any version of Ukash virus, the biggest issue is to unlock the system. However, some versions of Ukash threats may fail to unlock you from getting online. If you are one of these lucky people, download Malwarebytes, Reimage or other reputable anti-malware program and remove the threat. Besides, restoring your computer to a previous date can also help you to unlock computer and launch a scanner to find and remove viruses. However, if you are still locked, follow these tips:

* Flash drive method:

1. Take another machine and use it to download Malwarebytes, Reimage or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Ukash virus once more and run a full system scan.

* Users infected with Ukash viruses are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual Ukash virus removal:

  • Reboot you infected PC to 'Safe mode with command prompt' to disable Ukash virus (this should be working with all versions of this threat)
  • Run Regedit
  • Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  • Search the registry for these files you have written down and delete the registry keys referencing the files.
  • Reboot and run a full system scan with updated Reimage, Malwarebytes or Plumbytes Anti-MalwareNorton Internet Security to remove remaining virus files.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.

If you decided to select another anti-spyware, uninstall Reimage from your computer.
Press mentions on Reimage
Alternate Software
Alternate Software
FBI Online Agent snapshot
FBI Online Agent

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions

Removal guides in other languages