Heur:exploit.script.generic Removal

Recently my computer has been suffered from the Heur:exploit.script.generic infection. A friend sent me a PDF email attachment which she can’t open on her computer. I downloaded it and tried to open it. But my Acrobat Reader couldn’t make sense of it. And after ward Microsoft Security Essentials detected it as a threat. MS Security Essentials tried to deal with these detections, but failed. And reboots didn’t help. I’ve searched around a little but I can’t say I’ve found anything specific about this anywhere. I want to know if it is a high risk and what it potentially could do. I’d be so grateful if anyone knows anything about this infection and gives me a solution to get rid of it.

Details of Heur:exploit.script.generic:

Heur:exploit.script.generic is a Trojan infection which is created by cyber criminals . It has the ability to make chaos in your computer by modifying the Windows registry entries and other important system settings quickly, thus making the target PC crash and unresponsive. Users would find their computers perform weird, especially the slow running speed. Every time users boot the infected PC it runs automatically. And then this virus begins to replicate itself and quickly spreads in the whole computer, resulting in other files and data are infected. What is more, it drops malevolent files on the infected computer system. And it provides the cyber attackers available access to control over the infected computer. Many users may be confused that antivirus software can help them detect the Trojan, but fail to deal with this tricky and stubborn virus. And don’t mention about completely kicking it from the infected PC.

Heur:exploit.script.generic may disguise itself in the system background which makes it difficult for the antivirus program to detect. It can spread through freeware, shareware, plug-ins, emails and many other ways. Once installed, the virus will distribute more malware infections on the targeted PC system and PC users are unaware of it at all. It takes a long time to operate a certain application and sometimes windows get stuck when you are going online. And the virus also pops up fake warning messages, monitors your online records and steals your personal information, threatening your privacy. When you open some programs, they close suddenly and even cannot work again. You computer may even display blue screen or suddenly shutdown causing you lose important data. And if you leave it in your computer, it may easily cause hardware problems as well.

What Can the Vicious Virus Do?

1. Heur:exploit.script.generic has the ability to download additional components and other infections in the target computer in order to fully complete its penetration.
2. It is able to cause system crash and destroy some of your programs in the infected computer.
3. It facilitates the virus makers to intrude your computer remotely without your knowledge.
4. It is capable of collecting your browsing recoed and other private data.

Manual Removal Guide:

Heur:exploit.script.generic can help computer hackers to collect valuable information from personal computer users and related malware as well as spyware may extend the damages to your computer. Therefore, it is suggested that you should delete it earlier. In order to eliminate this kind of Trojan virus completely, checking the whole computer system is needed.

1. End Relevant Processes

(1). Press Ctrl+Shift+Esc together to pop up Windows Task Manager, click Processes tab

*For Win 8 Users:

Click More details when you see the Task Manager box

And then click Details tab

(2). Find out and end the processes of Heur:exploit.script.generic

2. Show Hidden Files

(1). Click on Start button and then on Control Panel

(2). Click on Appearance and Personalization

(3). Click on Folder Options

(4). Click on the View tab in the Folder Options window

(5). Choose Show hidden files, folders, and drives under the Hidden files and folders category

(6). Click OK at the bottom of the Folder Options window

*For Win 8 Users:

Press Win+E together to open Computer window, click View and then click Options

Click View tab in the Folder Options window, choose Show hidden files, folders, and drives under the Hidden files and folders category

3. Delete Relevant Registry Entries and Files

(1). Delete the registry entries of Heur:exploit.script.generic through Registry Editor

Press Win+R to bring up the Run window, type “regedit” and click “OK”

While the Registry Editor is open, search and delete the related registry entries

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\[RANDOM CHARACTERS].exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

(2). Find out and remove the associated files

%AllUsersProfile%\random.exe

%AppData%\Roaming\Microsoft\Windows\Templates\random.exe

%Temp%\random.exe

%AllUsersProfile%\Application Data\random

Video Shows You How to Safely Modify Windows Registry Editor:

Heur:exploit.script.generic is a risky Trojan virus that can invade into the computer without your knowledge. Many famous antivirus programs are able to detect it but are unable to remove it completely bcause many viruses are created and infected each day and it takes time for antivirus to make solutions for the latest viruses. And this Trojan is quiet stubborn and complex. It makes your computer become very vulnerable. At the same time other nasty viruses are implanted into the computer. To protect your computer properly, the Trojan should be completely deleted before more damages and losses happen.

The above manual removal is quite dangerous and complicated, which needs sufficient professional skills. Therefore, only computer users with rich computer knowledge are recommended to implement the process because any errors including deleting important system files and registry entries will crash your computer system. If you have no idea of how to process the manual removal, please contact experts from YooCare Online Tech Support for further assistance.

Published by on August 19, 2014 11:28 pm, last updated on September 22, 2014 10:30 am