HPREYOS Virus Removal (Microsoft Windows)

This page aims to help you remove HPREYOS Virus. These HPREYOS Virus removal instructions work for every version of Windows.

Some non English speaking users asked “HPREYOS là gì ?” If you are wondering what HPREYOS represents, it is a member of the most terrifying group of cyber threats – the Trojans. These viruses are responsible for more than 75% of all the infections caused by malware worldwide. The infection with a certain member of this group – HPREYOS – could really become a nightmare for you. Why we think so and how you could fight this contamination has been explained in details in the following text.

The HPREYOS link was removed for download from

The most common malware – the Trojan horse viruses

If there ever were a computer threat that could be used for practically anything by hackers and might be caught from practically anywhere on the web, it is one that is based on a Trojan horse virus. These incredibly dangerous malware versions have an awfully wide span of activities, the most usual of which we have assembled in a detailed list below. Also, the potential means of spreading such malware could be so many and so different that practically nothing on the Internet could be considered safe or free of Trojans. We are not kidding when we say that the viruses that belong to the Trojan category could really be used for many diverse damaging activities. Here is our list with the most common ones:

  • Even hackers have fun sometimes and this is generally not bad. But the way they do so could be considered very disturbing, as hackers might find it entertaining to crash your system. To erase the content of your disks and drives could also be considered great fun by them. They might also consider destroying and deleting files an amusing activity. All these things could be done with the help of HPREYOS.
  • Some hackers may also appear to be psychos. They might just want to use this virus to control your system remotely and spy on you all the time. Such criminals could easily turn into physical abusers, as they will know how you look, where you live, what you do. This is a pretty awful possible usage.
  • Transportation purposes. HPREYOS could be exploited as a transportation tool for another type of malware – a Ransomware-type program. If this is the case, you have to be really careful, as both of these viruses are extremely hazardous. The Trojan finds a weakness inside your system, either an operating system-based one or a program-based one, and effectively uses it to let the Ransomware inside your computer. After that the Ransomware finds out which data on your PC is most valuable to you and encrypts it. As a result, you will be requested to pay money and threatened to have your files destroyed forever, should you refuse.
  • Theft purposes. Any Trojan could be used as a tool for stealing sensitive information from the affected user. Consequently, the user might end up robbed – their bank accounts could be drained and their social media profiles could be hacked. This usage is probably the most harmful one, as it could have really serious negative consequences for the infected user.
  • Resource exploiting. The creators of HPREYOS might just need your computer’s resources. In this case they have unleashed this malware to turn your machine into a bot, thus making the CPU and the RAM of your PC available to them. After that your computer could be used to mine crypto currencies, or your computer could become a spam-distributing center. What’s even more bothering, some illegal activities might be done from your PC with the help of the virus and the one who could later be held responsible for them will be you.

Where you can come across HPREYOS

The locations where you may come across this virus could range from contaminated web pages to program bundles. However, according to the statistics, a great number of infections with HPREYOS come as a result of clicking on fake, malicious advertisements (malvertising) or by opening a contagious spam letter and its attachments (all kinds of, archives, documents, executables, etc.). The virus is capable of immediately penetrating your system and continuing with its preset activities listed above. Dealing with such a great cyber threat, however, may not always be easy and may not be successful from the first time. That’s why we advise you to try all the possible removal options. What we recommend as a necessary action from you is to follow the instructions we have prepared for you below (see the Removal guide). They will help you set your system free.


Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms Nothing really noticeable before the completion of this virus’ task, whatever it may be.
Distribution Method Via fake advertisements, contagious torrents, contaminated spam letters, infected file attachments, dangerous web sites with malicious content.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

HPREYOS Virus Removal


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:


Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.


  • This step is very important, because you can catch other threats (like Ransomware and Spyware) while looking for the Adware process.

Right click on each of the virus processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.


Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


If all the prior steps fail to help you or you have reason to believe your system is exposed to threats like Ransomware, we advise you to download a professional scanner and remover.

Remember to leave us a comment if you run into any trouble!

Leave a Comment