How Do I Remove SONAR.Heuristic.120 Virus

SONAR.Heuristic.120 is a dangerous Trojan horse which has been doing harmful things on hundreds of computers. Generally, the virus intrudes into computer aggressively without gaining user’s approval. It is worth mentioning that users need to pay close attention on corrupted program, spam email attachment, malicious link and USB flash drive as these are the ways utilized by SONAR.Heuristic.120 to slip into computer secretly.

Unlike other infections, SONAR.Heuristic.120 is not a little case which can be figured by antivirus programs. It deploys files onto different locations with the disguise of system files’ name that it can be hardly removed by security tools. Once executed, it will start to perform the harmful action which is typically known to take up memory space to result in slow computer response. Affected by the virus, it is easy for computer to appear vulnerabilities that would be utilized by cyber crook to penetrate other risky viruses. Worse still, it is also the threat running high risk to the security of personal information. Seriously, users who are stuck with SONAR.Heuristic.120 must be urgent to get rid of it thoroughly.

SONAR.Heuristic.120 is very risky a virus

1. SONAR.Heuristic.120 is an unwanted computer infection which sneaks into computer secretly
2. SONAR.Heuristic.120 always bypass security tools through rootkit tactic
3. SONAR.Heuristic.120 takes up system resources and degrades down computer performance
4. SONAR.Heuristic.120 may further damage computer by bringing in other malware
5. SONAR.Heuristic.120 may track your personal information and send it to cyber criminal for illegal profit

Remove SONAR.Heuristic.120 completely with manual removal guides

1. To stop running processes of SONAR.Heuristic.120, please press Ctrl+Alt+Delete keys to open Task Manager:

[random name].exe

2. Show all hidden files: On Windows XP

• Close all programs so that you are at your desktop.
• Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
• Click on the Control Panel menu option.
• When the control panel opens click on the Appearance and Personalization link.
• Under the Folder Options category, click on Show Hidden Files or Folders.
• Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
• Remove the checkmark from the checkbox labeled Hide extensions for known file types.
• Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
• Press the Apply button and then the OK button

On Windows 7 / Vista

• Click and open Libraries
• Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
• Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
• Remove the checkmark from the checkbox labeled Hide extensions for known file types.
• Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
• Press the Apply button and then the OK button.

On Windows 8 /8.1

• Click on Windows Explorer ;
• Click on View tab;
• Check the "Hidden Items" box

3. Search and find the related files of SONAR.Heuristic.120, delete them all:

%AppData%\<random>\

%LocalAppData%\KB8456137\KB8456137.exe

%AppData%\<random>\<random>.exe

%Temp%\[random].bat

4. Terminate these Registry Entries created by SONAR.Heuristic.120.

Method 1 (Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1):

• Call out “Run” box by pressing “Windows” key + “R” key on your keyboard;
• Type "Regedit" into the Run box and click OK to open Registry Editor

Method 2 (Available on Windows 7/ Vista):

• Click on Start button to open Start Menu
• Type "Regedit" into the search box and click on Regedit to open Registry Editor

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\[random]
HKEY_CURRENT_USER\Software\Microsoft\Command Processor "AutoRun" = "<malware path>\<random>.exe"
HKEY_CLASSES_ROOT\CLSID\{750fdf0e-2a26-11d1-a3ea-080036587f03}\InProcServer32 "(Default)" = "<malware path>\<random>.dll"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "courts" = %AppData%\p1.exe

Tips: Manual removal method is a little complicated, no mistake would be allowed to make. Or it will crash down your PC. For the prevention of messing up your system, you will be welcome to start a live chat with expert to get your computer fixed safely and thoroughly.