Home Spyware Database "HEUR.Crypted Removal Guide"

HEUR.Crypted Removal Guide

HEUR.Crypted Description

HEUR.Crypted Automatic Detection (Recommended)

Is your PC infected with HEUR.Crypted? To safely & quickly detect HEUR.Crypted, we highly recommend you...

Download SpyHunter's* Malware Scanner.

HEUR.Crypted Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove HEUR.Crypted Processes

Remove the "HEUR.Crypted" processes files:
VKNT.EXE hgcheck.exe lsass.exe scvhost.exe vcheck.exe lphcls4j0e58t.exe lphca21j0eebv.exe lphcgsgj0e309.exe lphc1jaj0el6j.exe winhlep.exe cssrrh.exe internet.exe lphc73wj0e9cc.exe lphcgbrj0er5n.exe
Read more on How to kill HEUR.Crypted Processes

Step 2 : Use Registry Editor to Remove HEUR.Crypted Registry Values

Locate and delete "HEUR.Crypted" registry entries:
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN Internet HKEY_LOCAL_MACHINESYSTEMCURRENTCONTROLSETSERVICESWINSOCK2PARAMETERSSYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Help HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AutoInclude HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Internet Explorer Content Server RUNNING PROGRAM\explorer.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcgbrj0er5n HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphc73wj0e9cc HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphc1jaj0el6j HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcgsgj0e309 HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphca21j0eebv HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ VersionCheck HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcls4j0e58t HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msconfig HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ hgcheck RUNNING PROGRAM\lsass.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Vietkey HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catal
Read more on How to Remove HEUR.Crypted Registry Entries

Step 3 : Use Windows Command Prompt to Unregister HEUR.Crypted DLL Files

Search and unregister "HEUR.Crypted" DLL files:
ntdll64.dll tbrxbxbw.dll cgloko.dll thkqcvqa.dll pivxrjze.dll qpfffqik.dll
Read more on How to Remove HEUR.Crypted DLL Files

Step 4 : Detect and Delete Other HEUR.Crypted Files

Remove the "HEUR.Crypted" processes files:
ntdll64.dll VKNT.EXE tbrxbxbw.dll hgcheck.exe lsass.exe scvhost.exe vcheck.exe cgloko.dll thkqcvqa.dll lphcls4j0e58t.exe lphca21j0eebv.exe lphcgsgj0e309.exe lphc1jaj0el6j.exe DIL1D.tmp winhlep.exe cssrrh.exe pivxrjze.dll internet.exe qpfffqik.dll lphc73wj0e9cc.exe lphcgbrj0er5n.exe
Read more on How to Delete Harmful Files

Step 5 : View the HEUR.Crypted Components with its MD5s

Remove the "HEUR.Crypted" components:

File Name	File Size	MD5
lphctj5j0e539.exe	110080	67702c7c36a2de193ea0d4302994ceec
hgcheck.exe	89724	c7842bb3c728b9faf3e2237ee2d689b6
msmsgsd.exe	84956	3633e644be329a6d2f2c26239abc11f1
ntdll64.dll	57856	d796e719a5fb52312fc028acd618a4db
pscmain2.exe	258048	052372ae4c00b9f4039ea172801ec0be
4645.exe	14788	ad29ec71990f3e98b3f626ef4085c85e
lsass.exe	102984	267f3144e0a056a9f92aa99bde27b024
18808.exe	14788	a12b70910fbc04120f1b0334fa4b7e28
VKNT.EXE	82944	0b11cd29fd4de17d656cbc5d51158f9e
tefmdw.dll	161280	97253c24382729740dc4e8542b33d077

Back to Top

Site Disclaimer

Publication Date: Wed Aug 26 2009 07:02:47 EST

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top