How to Remove FBI Virus in Regedit: Step-by-Step Guide

The malware is spread through spam or corrupted email attachments. This trojan virus has too many harmful features, such as aggressive advertising, data theft, theft of banking details, and identity theft.

• The FBI virus can infect your system and generate pop-ups that can steal your identity.
• To prevent this from happening, you need to delete this file.

PC problems? Solve them in minutes.

1. Download and install ASR Pro

2. Run a scan to find and fix errors

3. Reboot your computer for the changes to take effect

Get better performance from your computer with this software - download it to fix your PC today.

Modify the Registry Value

1. Open Run with the Windows key + R hotkey.
2. Enter %systemroot%system32 into Run and click OK to open the Registry Editor.
   
3. Double-click the HKLMSoftwareClassesRoot key.
4. Double-click the msseces.exe key to open its properties.
5. Select the REG_DWORD value named StartIn did not err.
6. Double-click the StartIn value.
   
7. Enter 0 in the Value data field if it’s set to 1.
8. Click the OK button.
9. Restart Windows.

Delete the suspicious dll

1. Open Registry Editor.
2. Navigate to the following path: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
   
3. Search for the following string: †̃FedUp’.
4. Delete the string if it exists.

Delete the suspicious files

1. Go to C:WindowsSystem32driversetc
2. Locate the dll file you want to delete and rename it to something else.
3. Now go to C:WindowsSystem32driversetc (the folder you were in earlier), right-click on the renamed file, select Delete, and click OK.
   

Disable the suspicious program

1. Go to Task Manager and locate the suspicious program. Right-click it and choose Disable.
2. If the suspicious program is not on the list, go to Task Manager, find suspicious process, and disable it.
   
3. Delete suspicious files
4. Go to Start, type Regedit, and open Regedit as administrator.
5. In the Registry Editor, navigate to the following path: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
6. Locate any suspicious file, right-click on it, and choose Delete.

Reinstall Windows using Fresh Install

1. Go to Start > type recovery and select Recovery from the menu.
2. When Recovery opens, select Get started and Troubleshoot > Advanced > Startup Settings.
   
3. Select Restart > Troubleshoot.
4. Choose Advanced options > Startup Repair.
5. When Startup Repair opens, the Advanced Options menu will open.
6. Select Command prompt > Continue to open the Command prompt window.
   
7. Type sfc/scannow and press Enter to run the command.
8. Wait for the command to complete and restart your PC.

Perform a System Restore

1. Press the Windows key and type system restore. Select Restore your PC to an earlier time from the list of results.
2. Click the Next button.
   
3. Click the System Restore button on the right.
4. Now, select the restore point you want to use.
5. Click the Next button.
   
6. Follow the instructions on the screen to complete the procedure.
   

Delete the suspicious EXE files

1. Locate all the malicious EXE files by navigating to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
2. Right-click on the malicious Run key -> select Delete
   
3. Delete the DAT files
   Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
4. Locate the DAT files by double-clicking on them -> select Delete
5. Delete the malicious DLL files
   Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
6. Locate the DLL files by double-clicking on them -> select Delete
7. Delete the malicious REG files
   Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
8. Locate the REG files by double-clicking on them -> select Delete
9. Delete the malicious keys
   Navigate to the following location in your Registry Editor:HKLMSoftwareMicrosoftWindowsCurrentVersionRun
10. Locate the malicious keys by double-clicking on them -> delete
    

Use the System Restore Point

1. Press Windows Key + R to start Run.
2. Type Restore in the text field and click OK.
3. Choose an earlier restore point and click Next.
4. Follow the instructions on the screen to complete the process.
   

Perform a System Restore to a date before the infection occurred

1. Download System Restore by Microsoft.
2. Run the System Restore wizard.
   
3. Choose a restore point, and click Next.
4. Confirm your selection, and wait for the process to complete.
5. Disable your antivirus

Disable the Windows Defender Firewall

2. Go to Start > type firewall in the search field > right-click on Windows Defender Firewall > click Properties
3. Go to the Exceptions tab
   
4. Add your IP Address and IP range manually
5. Click Allow Access

Scan your PC with specialized anti-malware software

1. Download Malwarebytes AdwCleaner on your computer.
2. Double-click the downloaded file to start the program.
3. Press the Scan button and wait for the program to find and remove all FBI ransomware-related files.
4. Once done, press the OK button.
   
5. Restart your computer.

Get better performance from your computer with this software - download it to fix your PC today.

Use an SFC scan

1. Go to the Windows Search bar.
2. Type cmd in the text field.
   
3. Right-click on the Command prompt app and select Run as administrator from the context menu.
4. Type sfc / scannow and hit Enter to run the command.
5. Wait for the command to execute.
6. Repeat step 1, but this time, type sfc / scannow /offbootdir and hit Enter to run it.