The malware is spread through spam or corrupted email attachments. This trojan virus has too many harmful features, such as aggressive advertising, data theft, theft of banking details, and identity theft.
- The FBI virus can infect your system and generate pop-ups that can steal your identity.
- To prevent this from happening, you need to delete this file.
PC problems? Solve them in minutes.
Modify the Registry Value
- Open Run with the Windows key + R hotkey.
- Enter %systemroot%system32 into Run and click OK to open the Registry Editor.
- Double-click the HKLMSoftwareClassesRoot key.
- Double-click the msseces.exe key to open its properties.
- Select the REG_DWORD value named StartIn did not err.
- Double-click the StartIn value.
- Enter 0 in the Value data field if it’s set to 1.
- Click the OK button.
- Restart Windows.
Delete the suspicious dll
- Open Registry Editor.
- Navigate to the following path: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
- Search for the following string: †̃FedUp’.
- Delete the string if it exists.
Delete the suspicious files
- Go to C:WindowsSystem32driversetc
- Locate the dll file you want to delete and rename it to something else.
- Now go to C:WindowsSystem32driversetc (the folder you were in earlier), right-click on the renamed file, select Delete, and click OK.
Disable the suspicious program
- Go to Task Manager and locate the suspicious program. Right-click it and choose Disable.
- If the suspicious program is not on the list, go to Task Manager, find suspicious process, and disable it.
- Delete suspicious files
- Go to Start, type Regedit, and open Regedit as administrator.
- In the Registry Editor, navigate to the following path: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
- Locate any suspicious file, right-click on it, and choose Delete.
Reinstall Windows using Fresh Install
- Go to Start > type recovery and select Recovery from the menu.
- When Recovery opens, select Get started and Troubleshoot > Advanced > Startup Settings.
- Select Restart > Troubleshoot.
- Choose Advanced options > Startup Repair.
- When Startup Repair opens, the Advanced Options menu will open.
- Select Command prompt > Continue to open the Command prompt window.
- Type sfc/scannow and press Enter to run the command.
- Wait for the command to complete and restart your PC.
PC problems? Solve them in minutes.
Is your computer running slow, crashing, or giving you the dreaded Blue Screen of Death? Well, don't worry - there's a solution! ASR Pro is the ultimate software for repairing Windows errors and optimizing your PC for maximum performance. With ASR Pro, you can fix a wide range of common issues in just a few clicks. The application will detect and resolve errors, protect you from data loss and hardware failure, and optimize your system for optimal performance. So don't suffer with a slow or crashed computer any longer - download ASR Pro today!

Perform a System Restore
- Press the Windows key and type system restore. Select Restore your PC to an earlier time from the list of results.
- Click the Next button.
- Click the System Restore button on the right.
- Now, select the restore point you want to use.
- Click the Next button.
- Follow the instructions on the screen to complete the procedure.
Delete the suspicious EXE files
- Locate all the malicious EXE files by navigating to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
- Right-click on the malicious Run key -> select Delete
- Delete the DAT files
Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun - Locate the DAT files by double-clicking on them -> select Delete
- Delete the malicious DLL files
Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun - Locate the DLL files by double-clicking on them -> select Delete
- Delete the malicious REG files
Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun - Locate the REG files by double-clicking on them -> select Delete
- Delete the malicious keys
Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun - Locate the malicious keys by double-clicking on them -> delete
Use the System Restore Point
- Press Windows Key + R to start Run.
- Type Restore in the text field and click OK.
- Choose an earlier restore point and click Next.
- Follow the instructions on the screen to complete the process.
Perform a System Restore to a date before the infection occurred
- Download System Restore by Microsoft.
- Run the System Restore wizard.
- Choose a restore point, and click Next.
- Confirm your selection, and wait for the process to complete.
- Disable your antivirus
Disable the Windows Defender Firewall
- Go to Start > type firewall in the search field > right-click on Windows Defender Firewall > click Properties
- Go to the Exceptions tab
- Add your IP Address and IP range manually
- Click Allow Access
Scan your PC with specialized anti-malware software
- Download Malwarebytes AdwCleaner on your computer.
- Double-click the downloaded file to start the program.
- Press the Scan button and wait for the program to find and remove all FBI ransomware-related files.
- Once done, press the OK button.
- Restart your computer.
Use an SFC scan
- Go to the Windows Search bar.
- Type cmd in the text field.
- Right-click on the Command prompt app and select Run as administrator from the context menu.
- Type sfc / scannow and hit Enter to run the command.
- Wait for the command to execute.
- Repeat step 1, but this time, type sfc / scannow /offbootdir and hit Enter to run it.
