Friday, October 11, 2013

How to Remove crypt_s.DEK Virus

What is crypt_s.DEK Virus?

 

crypt_s.DEK Virus is a new trojon horse that prevails the Internet. Just like other Trojan horses that attack your computer and would totally mess up your machine, crypt_s.DEK Virus can be a big threat to any computer for, though tiny it is, its capacity of changing the system’s setting of your computer, and incurring other viruses.

When your antivirus report that your computer is infected with crypt_s.DEK Virus, the first thing that comes to your mind is use antivirus to remove it. It would be convenient but no so effective because antivirus could not remove those corrupted registry values and startup items that had been added to the registry. Those corrupted files hidden in the “Appdata” and other files could still be there and it could still trigger or incur that virus back even though your antivirus remove it.

If a computer is infected with crypt_s.DEK Virus, computer’s setting would be changed. For example, crypt_s.DEK Virus can add startup items to the registry and then run it at the backstage. You will find your computer runs slower than before and crash down, freeze or other weird thing happens. crypt_s.DEK Virus can not only change your registry, but also providinng convenience to the hacker who can access your computer easier. If they got access to your computer, everything you could not imagine becomes possible. You cannot image something is spying on you with the help of crypt_s.DEK Virus. They can record your keyboard activity and analyze them.  Therefore, your online financial activities are exposed to others.


How could we remove it


Step 1: Enter the Safe Mode wit Networking.
Keep tapping F8 when you restart your computer and choose Safe Mode with Networking and hit Enter.

Step 2: Open the Task Manager.
Hit Ctrl+Alt+Esc at the same time and then find Random.exe and end it.


Step 3: Delete following corrupted files created by crypt_s.DEK Virus:
C:\WINDOWS\assembly\GAC\random letters
C:\WINDOWS\system32\random letters

Step 4: Enter the registry editor.

Hit Win+R and then type regedit in the dialog box and hit Enter at last.


Go to the following registry values and delete them all:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\

Please pay more attention when you are dealing with registry editor. If you could not remove it or have any difficulty removing it, please contact here to get professional online tech support.


No comments:

Post a Comment