Ucrtbase.dll Crash/Trojan.gen.npe.2 Virus Removal (August 2018 Update)

How irritating is this problem? (3 votes, average: 5.00)

This page aims to help you remove Ucrtbase.dll. Our removal instructions work for every version of Windows.

A dangerous Trojan horse has recently been threatening the web users all over the Internet. This new infection is lurking in various web locations and using different sneaky transmitters in order to contaminate as many computers as possible, but on this page, we will share with you some protection and prevention tips, which may help you avoid it and/or deal with its infection. The damage that Ucrtbase.dll may cause to your system can be very serious and, therefore, the information that you are going to read below could be very useful. As a typical Trojan, this computer threat may have many different malicious purposes. Sadly, the presence of the malware on the machine may not be visible. If you have any suspicion that Ucrtbase.dll might have contaminated your PC but you are unable to detect it or have difficulties with having it removed, we suggest you stay with us to learn the methods you can use in order to deal with this tricky virus effectively. In the next lines, you will find a detailed Removal Guide which can help you a lot if followed properly. There is also a professional removal tool which can deal with the Trojan without risk for your system. It is really important that you take immediate measures against the threat as soon as you detect it in order to prevent any serious damage such as irreparable system corruption or even the insertion of a Ransomware cryptovirus in the computer.

Trojans are complex pieces of malware – here is what you should know about them:

Trojan horses or in short “Trojans” are popular computer threats which have a very versatile nature. They are more complex than a simple virus and usually contain advanced code which can be programmed to perform different types of criminal tasks. An infection like Ucrtbase.dll, for instance, can easily corrupt any system in such a way that it may not be possible to be repaired later. The malicious capabilities of such an advanced threat can be really damaging to your PC but if you have already been contaminated, then you should remove it as soon as you can.

Remove Ucrtbase.dll


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:



Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

The list of criminal deeds which could be performed with the help of a malicious piece of software such as Ucrtbase.dll can be many. The hackers in control could set their Trojan to steal various types of sensitive data from your computer. They could get their hands on your online banking credentials and this way perform a banking fraud or they can monitor your keystrokes and gain access to your online accounts by copying your passwords and login details. The presence of the Trojan on the computer could also contribute to the insertion of other harmful viruses such as Ransomware or Spyware because, in most of the cases, the infection can run in the background and can create system vulnerabilities and weaknesses in the security of your PC.

One single click on a tricky transmitter can deliver Ucrtbase.dll on your computer!

The infection with a Trojan horse usually requires you to click on a malicious transmitter or an Exploit kit which can immediately insert the malware in the computer. The tricky thing is that the transmitter, in almost all of the cases, is camouflaged so well that you may not be able to distinguish it from a legitimate piece of content unless you have a reliable antivirus program to detect it. Very often, the Trojan could promote itself as an interesting offer, a pop-up ad, an email attachment or a link, a free application or add-on that doesn’t look dangerous or suspicious at all. The moment you click on it, however, the harmful payload activates. Unfortunately, there are hardly any visible symptoms which could indicate the contamination. This is exactly what helps the nasty threat to remain in the system for long periods of time and run its criminal tasks.

That’s why, if you want to keep your PC safe, it is really important to arm yourself with reliable antivirus software. For optimal protection, especially against new threats such as Ucrtbase.dll, you should not forget to update your virus definitions to the latest ones and to run regular scans of your entire system. In case of an infection, such software can help you detect and remove the threat in a safe and effective manner without putting your OS at risk.


Name Ucrtbase.dll
Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms  There usually are no visible symptoms but if you notice some unusual system behaviour, errors or crashes, you should run a system scan with reliable antivirus software.
Distribution Method  This threat could be distributed with the help of different legitimate-looking messages, ads, pop-ups, links, torents, spam, email attachments, infected web pages or contaminated software installers. 
Detection Tool

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment