Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission

Decrypt Protect virus

A lot of computer infections want to make an impression that you have done something illegal and thus your computer access has been restricted. Decrypt Protect Virus is one of such malicious programs. It is distributed by Trojan Reveton and the malware can be categorized as ransomware infection. The meaning behind the name is rather simple - Decrypt Protect virus holds your computer hostage and expects you to pay a 300 USD ransom fee for something you have not committed. Therefore, it presents the same security threats as other Ukash Virus group infections such as FBI MoneyPak Virus or ICSPA Virus.

What you have to realize is, however, the fact that if you are infected with Decrypt Protect virus, then it means that you have other infections on your PC as well. That is so, because the ransomware infection is distributed by Trojans and other malware, and you may not even notice how or when the infection takes place. The next thing you know, is that your PC is locked and you are asked to transfer money via Green Dop MoneyPak alternative payment system. The same methods are used by a variety of other Ukash infections, for example, Metropolitan Police Virus or EC3 Europol Virus.

Naturally, the fact that you cannot access your desktop can be very disturbing, but even if Decrypt Protect Virus claims that you will be prosecuted if you do not pay the fine within 48 hours, do not panic. This ransomware infection is not concerned with overall online security. It simply wants your money, you should ignore the notification you see on your screen:

You have 48 hours left to enter your payment.
You have lost control over your computer. Your system and all your files has been blocked and encrypted because you were spreading Malware (viruses, trojans, worms).
You are breaking numerous International and USA laws.

The most important thing is to stay calm and keep your money to yourself, because paying Decrypt Protect Virus will not solve anything. In order to unlock your PC and terminate the infection, you have to bypass the malware's defenses first. Follow the instructions below, unlock your desktop and remove Decrypt Protect Virus.

How to restore your desktop access

Windows 8

  1. Press Windows key and metro Start menu will appear.
  2. Click Internet explorer tile.
  3. Enter http://www.pcthreat.com/download-sph into the address bar and click Enter.
  4. Press Run on the download dialog box and install SpyHunter.
  5. Run a full system scan.

Windows Vista & Windows 7

  1. Reboot the PC and press F8 repeatedly until Advanced Boot Options menu appears.
  2. Select Safe Mode with Networking and press Enter.
  3. Access http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and scan your PC with it.

Windows XP

  1. Follow the steps 1 and 2 above.
  2. Click Yes on confirmation box.
  3. Download SpyHunter.
  4. Open Start menu and launch Run.
  5. Enter "msconfig" and click OK.
  6. Select Startup tab on System Configuration Utility.
  7. Click Disable all and press OK.
  8. Restart the PC in Normal Mode.
  9. Install SpyHunter and scan your system.

Should you have any problem with Decrypt Protect Virus removal, leave us a comment below.

Download Spyware Removal Tool to Remove* Decrypt Protect virus
  • Quick & tested solution for Decrypt Protect virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Decrypt Protect virus

Files associated with Decrypt Protect virus infection:

brenasa.exe
uenovfiu.exe
msavfit.exe
87b2cb3916261d5c807bf44262755cb0.exe
rool0_pk.exe
xlqbteeb.exe
2084473.dll
iner.exe
Piranha.exe
pYunY8m4VL3qLc.exe
dyjdl.exe
ieudator.dll
%APPDATA%\system
audipbrd.exe
C87C.exe
n.
scvhost.exe
%TEMP%
%ALLUSERSPROFILE%\Application Data
idiokbbrv.exe
acuvzomo.exe
bf8h8d02hf.exe
UpdatePriv.exe
96dddda4.dll
DA0B.exe
Updating.exe
svchost.exe
oygqyunapnp.exe
videotwisterSA.exe
puozlkmyj.dll
crack.exe
b34btbztdb0vavaw.exe
Nbt.exe
wgsdgsdgdsgsd.exe
bzsbkotiu.exe
jsdhlexdqkllnbcxgai.bfg
50E1.exe
SyncHostps.exe
hwj3ba6j.dss
secproc_isv.exe
00qbipeq.exe
Firewallservice.exe
csrsss.exe
%APPDATA%\updates
bvhylsviw.exe
%WINDIR%\Temp
WinSyncMetastore.exe
zqmkrehUkpoKfsafsaZg.exe
aPr0hY9.exe
ex3b.dll
dqnbdq7.dss
wjthvwjb.dss
%APPDATA%\Task Scheduler
DLL321.dll
securitywindrv.exe
ssntvs.exe
%SystemDrive%\????????????
ACEIEAddOn.dll
JfCqQ5JC.exe
pmstcdjwz.exe
sqlncli.exe
%AppData%
%ALLUSERSPROFILE%
Task Scheduler.exe
ubvhynpxh.exe
yaiiwockc.dll
%LOCALAPPDATA%\Temp
najeoxtt.exe
rvcbcyks.exe
msshell.exe
魔法桌面第三方主题破解补丁V1.1.exe
ctfmon.exe
dtkmujvo.exe
gcrwcoak.exe
xaZYOVJW.exe
obvwo.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
questscan.dll
msdtmsrd.exe
3511172082012Build.exe
%CommonProgramFiles%
xctqakcqbeo.dll
MusicCollector.exe
wahneaqa.exe
WINDED6.exe
wlsidten.dll
mplayer2.exe
wpbt0.dll
TimeDateMUICallback.exe
Other.res
UpgradeHelper.exe
administration.exe
00b5d693.exe
OmaSG21e.exe
Q3d38543.exe
%LOCALAPPDATA%\lollipop
NTServiceManager.exe
%WINDIR%\system32
taskhost.exe.exe
msnmsgrr.exe
install_0_msi.exe
msn.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
ifgxpers.exe
systemcpl.exe
m2PythonLoader.exe
skype.dat
comeo.exe
wlsidten.exe
%UserProfile%
xmlfilter.exe
VaultSysUi.exe
setex.exe
p1.exe

Decrypt Protect virus DLL's to remove:

wlsidten.dll
DLL321.dll
wpbt0.dll
yaiiwockc.dll
ex3b.dll
xctqakcqbeo.dll
questscan.dll
2084473.dll
puozlkmyj.dll
ACEIEAddOn.dll
ieudator.dll
96dddda4.dll

Decrypt Protect virus processes to kill:

SyncHostps.exe
OmaSG21e.exe
UpgradeHelper.exe
C87C.exe
Nbt.exe
rool0_pk.exe
Piranha.exe
bzsbkotiu.exe
msn.exe
mplayer2.exe
msshell.exe
sqlncli.exe
oygqyunapnp.exe
xaZYOVJW.exe
00b5d693.exe
zqmkrehUkpoKfsafsaZg.exe
pmstcdjwz.exe
gcrwcoak.exe
install_0_msi.exe
TimeDateMUICallback.exe
50E1.exe
comeo.exe
wlsidten.exe
csrsss.exe
acuvzomo.exe
uenovfiu.exe
UpdatePriv.exe
Q3d38543.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
WINDED6.exe
aPr0hY9.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
ifgxpers.exe
87b2cb3916261d5c807bf44262755cb0.exe
videotwisterSA.exe
Firewallservice.exe
taskhost.exe.exe
svchost.exe
p1.exe
DA0B.exe
dtkmujvo.exe
ctfmon.exe
setex.exe
VaultSysUi.exe
NTServiceManager.exe
xmlfilter.exe
xlqbteeb.exe
systemcpl.exe
MusicCollector.exe
msavfit.exe
obvwo.exe
wgsdgsdgdsgsd.exe
m2PythonLoader.exe
msdtmsrd.exe
wahneaqa.exe
najeoxtt.exe
pYunY8m4VL3qLc.exe
WinSyncMetastore.exe
dyjdl.exe
bvhylsviw.exe
crack.exe
idiokbbrv.exe
scvhost.exe
00qbipeq.exe
msnmsgrr.exe
b34btbztdb0vavaw.exe
audipbrd.exe
secproc_isv.exe
魔法桌面第三方主题破解补丁V1.1.exe
Updating.exe
administration.exe
Task Scheduler.exe
securitywindrv.exe
iner.exe
rvcbcyks.exe
brenasa.exe
bf8h8d02hf.exe
3511172082012Build.exe
ssntvs.exe
JfCqQ5JC.exe
ubvhynpxh.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.