Heular virus, yes I think this a new dangerous virus today. I just want to let me to share my short history about the what I have experience in this heular virus in my computer.
I have my PC at home using windows xp and I leave it on a good condition. During that day my younger sister used my computer to search for her projects. She used her USB flash drive and whatever she did. When I came home, my PC wasn’t logon anymore, it has an error in winlogon.
The boot process is good but in the windows start up loading the windows is not working anymore, my winlogon might get damage or infected by virus and has a dialog box shown that I need to activate my windows now. Since I have an updated antivirus installed in my computer, but i was not contented in it. I have check it out for some possible errors that cause of this problem.
This is what I did?
I tried to go in the Safe Mode by pressing the F8 function keys before the windows has start loading. I have seem that my PC is working fine in Safe Mode. But in the normal mode is not working, my winlogon always says that do you want to activate your windows now by click “yes” or “no”, if you click “yes” it says your windows has been activated already and after that the winlogon gets logging off goes back to login on. This is very stupid action, what happen to my PC? I can’t logon in my PC’s desktop to access my files and programs. But I have found some way on how can I do that.
When the dialog box has appear, you can click yes to continue activation and after press the “window key” + “U” to show your Microsoft Narrator below that you have to click the “Microsoft Web site” to get your Internet Explorer goes online, you need to abort it. In your explorer address bar, type C: to explore your files and documents or files in the drive. I have notice that my folders has been change to executable files and all my folders are gone I can’t see anymore in my drive. And my browser default homepage has been change to red tube(dot)(com) oh! this is suck!.. When I open my browser it always goes in that page and my browser’s title has been change to Heular Browser. And it also changed my windows explorer to heular explorer. What the hell is this?
I have done using different antivirus to scanning for some virus threat by I came nothing, the antivirus didn’t detect or recognize this heular virus.
My Solutions:
1. Windows Update – I have run this and fix my winlogon process, my windows loading works fine. But the heular virus is still on my PC.
2. Antivirus - i have used this but only minimal 2 to 3 spywares has been eliminated, the heular virus is still there.
How to Remove Heular Virus
In removing the heular virus into your computer, you must simply follow the steps below, it is a simple instruction and easily to follow:
1. You must update the virus definitions of your antivirus.
2. Reboot computer and got to SafeMode bt pressing the F8 function keys.
3. Run a full system scan and clean/delete or eliminated all infected file(s) or some spywares.
4. Run your Registry editor and delete/modify any values added to the registry.
Navigate to and delete the following entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\”Microsoft File Server Manager 2.36″ = “C:\WINDOWS\system32\filesrv32.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
“Heiku – Munist” = “C:\WINDOWS\system32\EraleuH.exe”
Navigate to and restore the following registry entries to their original values, if needed:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\”NoFolderOptions” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
\”DisableRegistryTools” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DefaultIcon
\”(default)” = “C:\WINDOWS\system32\filesrv32.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\”IeakHelpString” = “I will always be with you, Huelar!”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\”EnableHeikus” = “1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\”InstallDate” = “1/15/2008″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
\”Window Title” = “Freak-X Browser”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
\”Local Page” = “[http://]www.hentaisailormoon.com[REMOVED]”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
\”Start Page” = “[http://]www.hentaisailormoon.com[REMOVED]”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Explorer\Advanced\”Hidden” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Explorer\Advanced\”HideFileExt” = “1
6. Exit registry editor and restart the computer.
Hope this would help to all of you guys, just simply leave your good comments regarding on this issue. Thank you guys!
Related Articles:
Tags: heular virus, remove virus, winlogon
Loading ...
[...] instructions and the huelar virus was removed in his PC. Here’s what I did, you just click How to Remove Heular.exe Virus? to read the full guide and instructions on how to remove [...]