FBI Virus – Removal Instructions

The FBI Virus has been spreading rapidly and is infecting hundreds of thousands of computers at an alarming rate. There are many forms of the FBI Virus and all of them share the same method of operation: you did something illegal and need to pay money. If your computer is infected with the FBI Virus you need to remove it immediately. Removal instructions are at the end of the article.

Update #3: There are even more variations of this virus appearing. Some of the variations include countdown timers and additional warnings. If you have this virus please do not panic. Follow the guide below in order to remove the FBI block.

Update #2: We have seen a sharp increase in the number of infections being spread. It appears that this virus is becoming even more malicious in the fact that it is becoming more difficult to conduct any kind of activity on your computer. We have also been monitoring whether or not this virus is transmitting your computer files to another location.

The individuals who wrote this malicious virus have actually been editing the code to make it more troublesome. They have also been changing the style of the notice and adding more webcam features. It is not uncommon to have a webcam screenshot on the notice. Also, the Moneypak payment method is still being used as a way to pay the fake fine. Of course do not pay the fine the FBI warning shows.

As we gather even more intelligence on the FBI virus we will update this page. Unfortunately this virus keeps changing which means that the hackers who are behind this infection are hard at work making it more malicious. We are concerned that this virus may become even more malicious and will keep an eye out for additional changes.

As far as who is behind this virus we have no idea. I am sure that there are many people who are actively searching for the individuals responsible for the FBI hoax. Hopefully something can be done to stop this infection from spreading further.

FBI Lockdown Virus Image

FBI Lockdown Variation
Scroll down for removal instructions.

FBI Moneypak Virus Image

FBI Moneypak Virus Variation
Scroll down for removal instructions.

Update #1: We are monitoring this virus on a daily basis. It has been changing its appearance and has infected hundreds of thousands of computers throughout the world so far. We have seen this virus change its appearance at least five times in one month. As more changes are made to the virus we will update this page.

The FBI Virus is a type of virus which displays a fake FBI warning purported to be from the Federal Bureau of Investigation. The alert states that the FBI has detected some form of criminal activity on your computer, that your computer is blocked by the FBI and you must pay money. You must realize that this is a complete fraud confirmed by the FBI, and the FBI is in no way affiliated with this warning letter.

FBI Computer Locked Image

FBI Computer Locked Variation
Scroll down for removal instructions.

FBI Moneypak Image

FBI Moneypak Variation
Scroll down for removal instructions.

The FBI virus comes in many different forms and is constantly changing. Some variants of the FBI virus contain a webcam, numbers to input, FBI logo and other corporate store and payment logos. Other variants do not have a webcam or ask for number inputs. However, if you see any type of bogus FBI warning then you are infected.

Common Names:
FBI Warning
FBI Scam
Moneypak Scam
FBI Moneypak
FBI Hoax
FBI Computer Scam
FBI Computer Alert
Fake FBI Alert
*as the FBI virus continually changes we will update this list

Common Color Schemes:
White background with red FBI Online Agent warning.
White background with blue FBI logo.
Black background with red letters.
Blue background with red and white letters.
White background with blue FBI letterhead.
Grey background with FBI logo.
*as the FBI virus continually changes we will update this list

Common Warnings:
“Your Computer Has Been Locked!”
“FBI Online Agent has blocked your computer for security reason.”
“Federal Bureau of Investigation. International Police Association. Attention! Your computer has been locked.”
“FBI Greendot Moneypak with logos.”
“FBI Black Screen”
“FBI Warning”
*as the FBI virus continually changes we will update this list

The fake FBI warning states that the FBI is aware of your location, that the FBI has your internet address, that the FBI has your picture and many more fear based tactics. Some of the criminal charges you are accused of may include: Violating Copyright and Related Rights Law, Child Pornography, Pirated Music, Pirated Software, Illegal Downloads, Illegal Online Activity and more.

You most likely acquired the FBI Virus while browsing the web or through a malicious file. A lot of times you will not know where you downloaded this malicious file containing this virus and unfortunately once it is on your computer it will not go away. The FBI fake warning letter will appear and state that your computer is blocked. This virus will control your computer and will render your computer useless until you get rid of it. Detailed host file analysis can be found on VirusTotal by searching #reveton.

FBI Warning Image

FBI Warning Variation
Scroll down for removal instructions.

This type of financial cyber scam is known as a fear based scam. The criminals who created the FBI Virus wish to instill fear in those that are infected with it. The warning letter looks realistic and your computer is blocked as the warning states. Most people become afraid and feel that they must comply with the letter or they will get in trouble. Most of the time people just want their computer unblocked by the FBI.

Once you have removed the FBI Virus with our instructions you will regain full control of your computer.

You must always remember that this is not a real warning or letter. If you comply with the instructions and pay the money you are only supporting the cyber criminals. You need to instead remove the FBI Virus from your computer, which will get rid of the warning and unblock your computer. Do not under any circumstances believe what this fake FBI warning says.

Attempting to perform a system restore to get rid of the FBI Virus is a waste of time. The cyber crooks who created this infection have purposely disabled the ability for you to do a system restore. The FBI Virus will not go away by doing a system restore, therefore any attempt to do so will be a waste of time.

A professional virus removal program is necessary to remove the FBI virus. The professional program will scan your entire computer, detect the infection and remove all traces of it. Once you have removed the FBI Virus with our instructions you will regain full control of your computer. We highly recommend you remove this malicious virus as soon as possible.

This is a very nasty virus. We are fully aware of how it takes complete control of your computer. We have observed this virus on numerous machines running various operating systems in our virus lab. It is an extremely frustrating infection to have on your computer. We completely understand the frustration that the FBI Virus causes.

We have done thorough testing in our computer lab with the FBI virus. We have tested the removal process we provide below for removing the FBI virus. Spyhunter is the program that we recommend for getting rid of this infection. We promise that if you use Spyhunter to get rid of the FBI Virus you will be successful, we have tried it ourselves. If you want to get this virus off of your computer, please follow the instructions we have provided below.

FBI Virus

Virus Removal Instructions

Success Rate: 98%
OS’s Tested: Windows XP, Windows Vista, Windows 7 and Windows 8
Virus Lab Tests: 14
FBI Virus Samples Tested: 8
Removal Tool: Spyhunter

* Is the virus on a Windows 8 computer? See the Windows 8 Virus Removal Instructions

The virus removal instructions we have outlined below has been proven remove the FBI Virus. You must be on the infected computer when performing these steps.

1 To begin, go ahead and reboot the infected computer. If the infected computer is turned off, go ahead and turn it on.

2 Immediately as the computer begins to boot, press F8 many times. Pressing F8 allows you to access the Advanced Options Menu.

3 Once you are in the Advanced Options Menu, use your arrow keys and select the Safe Mode with Networking option. Press enter when you have selected that option.

Safe Mode with Networking

4 Windows will now boot into Safe Mode with Networking. Safe Mode with Networking will allow you to remove FBI which it would not allow when Windows was in normal mode.

5Now that the virus is not running it is time to begin removal. On your keyboard, click and hold the Windows key, then press the R key. See keyboard diagram below.


6 After you have pressed the Windows and R key, the Windows Run Box will open. Type exactly the following into the run box and click OK:

iexplore https://spywarehelpcenter.com/removeit

Windows Run Remove

After clicking OK, your computer will connect to the internet and download our recommended virus removal program called Spyhunter.

7 When you see the Spyhunter download box, click the Run button. The picture of the download box is below. After you click the “Run” button, Spyhunter will launch. If your computer asks if you are sure you want to run Spyhunter, click OK. The Spyhunter installation will begin. After fully installing Spyhunter the virus scan will automatically begin.

Spyhunter Download Box Click Run

8 After Spyhunter has scanned your computer you will see the FBI virus name in the scan results. Simply click “Fix Threats” to remove the virus.

9 After you click “Fix Threats” you are going to need to register Spyhunter to remove FBI. Please register Spyhunter and the virus will be removed.

Registering Spyhunter offers superior benefits including real-time constant protection against any potential threats. Spyhunter will detect and remove any future threats that may occur including viruses, spyware, trojans, registry infections and more. It is a great all-in-one solution for your computer security needs and that is why we recommend it.

10 After you have registered Spyhunter, and the virus was removed, you can safely reboot into Normal Mode. The FBI Virus will be completely gone.

Call us toll free at 888.801.8751 if you wish to speak to our virus removal team.


  1. John Bartosh says:

    Fbi Virus was removed

  2. thank you so much god bless

  3. Edward colon says:

    Thanks you guys for helping me take this virus out of my computer I really do appreciate it

  4. moron-killer says:

    Thank you , for ur post, Randall Savage!

  5. Will all my pics and music be saved or will they be deleted after this process?

  6. You are the best!

  7. Thanks it worked!

  8. mr hotboy says:

    Thanks so much for helping me remove this virus! You guys are the best!

  9. Is Spyhunter legit??

    • Randall Savage says:

      Yes. Spyhunter is 100% legitimate and will without a doubt get rid of the FBI Virus. We have done hundreds of virus removal tutorials and have tested Spyhunter against the FBI Virus. It works the best.

  10. angeline lassin says:

    THANK YOU. It work

  11. Killer program!

    Money pack from Asia is dead!

    Thanks for such help!

  12. Thanks so much! I had to scour the web to find something that actually worked. All the other sites simply said “use a reputable antivirus” well, AVG free did not recognize the FBI virus. Also, a REAL paid-for and updated version of Norton antivirus didn’t detect it either when I ran it in safemode, and its “power eraser” did not detect the virus. Thanks again, really appreciate the help and will consider changing to Spyhunter for future protection since the others failed so miserably.


    • Randall Savage says:

      Spyhunter is a great program. We have tested A LOT of antivirus programs ourselves and Spyhunter is really good.

  13. Thank you.

  14. Teufelhunden says:

    I had to go to safe mode, then recover to an early registry, then download spy hunter!
    Then spy hunter fixed the problem. I did not renew pctools. I will be using spy hunter

    • Randall Savage says:

      Spyhunter is a great program. We have tested many different programs and Spyhunter is very consistent.

  15. Very pleased with this non-bogus explanation of how to get rid of FBI virus. Very good product Randall. Thank you very much!

    • Randall Savage says:

      You’re welcome :)

      The instructions definitely work. We tested them ourselves before we posted the article.

  16. Worked really nice. Thanks for the help.

  17. patricia says:

    how to i find out if it is a hacker. my husbamd computer is completely lock and has this fbi warning requesting 300.00 by money pak in 72 hours.

    • Randall Savage says:

      If you husband’s computer is locked by an FBI warning and is requesting money then you have been infected with a virus. The computer was not hacked, it was infected with a virus.

  18. thank you so much for your help getting rid of this virus

  19. Alisa LEung says:

    there a limit to it. becuase i knew someones whos limit was $300.00 and the duedate was 48 hours after the threat was sent. im just curious cause she was really scared.

    • Randall Savage says:

      Do not worry about any limit that the virus says. It just wants to try to get you to pay quickly before you realize it is a scam.

  20. Thank you so much this program runs amazing and does a very detailed clean up and searched I realized I had so many infections. And thank you once again for getting rid of my FBI threat

  21. Ok! This works and for a technical layperson it is easy and effective. Thank you. Have no idea how the virus attacked. I try to be so careful. But as of May 30, 2013 — it’s still hitting PC’s. Your fix worked.

  22. It worked.

  23. After rebooting in safe mode with networking my computer restarts immediately after I try to log on and starts automatically in normal mode with the virus still up. Rebooting in safe isn’t an option for me I have no idea where to go from here

  24. As of today of 6/16/2013 at 5:40am i have recieved the virus it made me felt very sad when i first seen the imaged. I felt i’ve done something bad but soon i checked it up using my ps vita for Moneypak then it said of the virus. I’ve done the process and now using Mayware now at 8:28am now. I think i recieved the newest version since none of the others are the same. I could only took half of the image with the only camera ps vita what else it had a countdown timer of 75 hours. Should i post the image for future use and where to.

  25. It would be really helpful if you included dates with your updates.

  26. xiaoxiang says:

    I think the fbi virus is updated and getting more scary. I can‘t log in safe mode with networking. How can i remove it? Thanks.

    • Randall Savage says:

      Call the tech virus removal support team. Posted it at the end of the instructions. 888-801-8751

  27. I’ve had the virus for awhile and I can’t get rid of it, whenever I try to download anything to help me it keeps saying download interrupted. I’m not sure if this is a slow connection or what.

  28. lena Akerman says:

    I’m not able to get anywhere even in the safe mode. The virus is still running and blocking everything… Please advise

    • Randall Savage says:

      Call the pro tech support number we posted in the instructions. They might be able to get around the virus block. This is a nasty virus. Please let us know if they helped you out. Their number is 888-801-8751

  29. My computer won’t let me boot into safe mode, command prompt or network. it give me a blue screen about having to restart and check for viruses. But it will let me boot up in the other ones like debugging and VGA mode. I have gotten this one before. But this version won’t give me anytime on the startup to do anything. What can I do?

    • Randall Savage says:

      Yes you also have the nasty variation of the FBI virus. This fbi virus is awful if you become infected with it. I recommend calling the professional virus removal team. They should hopefully be able to get it off. Call them at 888-801-8751

  30. Just like Jon, when I try to boot into safe mode it says logging off and reboots into normal mode. Normal mode goes to the login screen where I can only select the 1 user. When I do, the screen goes white. I can hit CTRL+ALT+DEL. but when I click on Task Manager, the screen goes white again.

    • Randall Savage says:

      Yes. We are aware of this inability to enter safe mode. Some variations of this virus are extremely nasty. We recommend calling the support number we posted: Call 888-801-8751 to speak to a professional virus removal team.

  31. My poor 9 year old got this virus on her older brothers laptop after viewing Disney videos on YouTube. Scared the poor thing half to death plus it showed a picture of her. It took some time getting to the safe mode. For me instead of completely shutting down and then trying F8 I just hit the reboot button and was then able to get to the safe mode. We have a spyware program on here and it didn’t work. This spyware worked and found 752 threats. Thanks so much for this great information you saved a 9 year old from the wrath of her older brother..hehe

  32. Just got another FBI virus infection. Fourth time in about 15 months. Each time, Spyhunter has been the only program to successfully remove the virus. Still a great fan of Spyhunter!

    • Randall Savage says:

      Very happy to hear. Please try to browse safely. You don’t want to keep getting your computers infected!

  33. for some reason while I’m in safe mode my internet is not on so it cant connect to download the program. How do I turn it on?

    • Randall Savage says:

      Hi Carmen. Did you start in Safe Mode with Networking, or just normal Safe Mode? You need to make sure that you do the with Networking option in order to gain access to the internet. Let us know. Thanks.

  34. does this virus actually download anything onto your computer?? i managed to shut off google chrome and clear all my history, is that alright?

    • Randall Savage says:

      Yes it downloads several files. Clearing your history is a start, however you should definitely fully clean the computer. Did you remove the virus?

  35. Thanks. Being in the tech support field i was skeptical about using other pc repair software. I guess I found something to replace malware bytes. Thanks a bunch, we tackeled the issue with your program within 30 minutes.

    • Randall Savage says:

      I am very happy to hear that you remove the FBI virus. This is not one to take lightly. However we know that Spyhunter can remove it if you can get into safe mode.

  36. Please help i cant get into safe mode and i dont want to have to call the number. Please tell me what to do.

    • Randall Savage says:

      Unfortunately if you cannot get into safe mode with networking then the additional choices are limited.

      There are advanced ways of potentially removing the FBI Virus but they are so advanced, time consuming and not very successful that we do not post them. This is simply because attempting to perform any advanced measures by yourself can result in further damage to your computer and operating system. Sometimes you can do more damage by attempting to modify system files than the actual virus does. Trust me, we have tried several different advanced methods and removing the FBI Virus using these methods is NOT for beginners or those who are not computer savvy.

      The FBI Virus is not your everyday computer virus. It is extremely complicated and modifies many different system files, some of which are very difficult to access on your own. I understand your hesitation in not wanting to call the phone number, but I recommend you do anyway. You should at least give the phone number a try and see if they can help you.

  37. Computer won’t let me download anything.

    • Randall Savage says:

      Can you give us more information? What exactly is happening? Are there any error prompts when you try to download?

  38. Jim lanpher says:

    When I try to startup in safe mode with networking, the computer shuts down. Any suggestions?

    • Randall Savage says:

      At this time the only suggestion I can really offer is to call the phone number. Entering safe mode with networking is critical to removing the virus using our removal guide. If you can’t enter safe mode with networking then the phone tech support may be able to help.

  39. Kim spartichino says:

    When trying to download spyhunter it tells me that the system administrator applied policies to prevent the download. What do I do now?

    • Randall Savage says:

      Right click on the download file and select run as administrator. If it still does not work, try to login as administrator by clicking the start button and switch user. Please let us know if this worked.

Leave a Comment