How to remove the win32 heur virus

Updated February 21, 2017

Win32/Heur, or Win32 Heur, is a virus that infects computers through corrupt media files, spam e-mails and illegitimate file sharing applications. The Win32/Heur virus often creates a fake antivirus program that pops up on your computer and notifies you that your computer is infected. The Win32/Heur virus also can download additional viruses, slow your computer, redirect your Internet browser, and even cause your computer to crash.

Press the three-key combination of "Ctrl," "Alt" and "Delete."

Click on "Start Task Manager."

Click on the "Processes" tab.

Right-click on "Win32/Heur.exe," and select "End Process" from the context menu.

Click on the Windows "Start" menu.

Type "regedit" into the Search field and press "Enter" to open the Registry Editor.

Locate the registry key "HKEY_LOCAL_MACHINE\Software\Win32/Heur" in the left pane of the Registry Editor window.

Right-click on "HKEY_LOCAL_MACHINE\Software\Win32/Heur," and select "Delete."

Click the Windows "Start" menu.

Search for any files named "Win32/Heur." These files may have different extensions. For example, you may fine Win32/Heur.exe or Win32/Heur.dll.

Delete the files you find in the search.


In addition to the steps above, you should update and run your antivirus program. If you do not have an antivirus program, consider purchasing one.

Cite this Article A tool to create a citation to reference this article Cite this Article

About the Author

Thomas King is a graduate of the University of Pittsburgh School of Law where he served as managing editor of the "Pittsburgh Journal of Environmental and Public Health Law." He currently lives in Aberdeen, Washington where he writes and practices law.