How to Remove Uc.exe “Virus”

This page is made to help you remove Uc.exe. The Uc.exe removal guide works for Chrome, Firefox and Internet Explorer, as well as every Windows version.

Uc.exe is an adware program. The rogue tool does not have an official name. For this reason, security researchers have named it after the process it runs in the Task Manager. Uc.exe is ad-supported. The secluded tool promotes the content of sponsored websites. It generates pop-up advertisements, listing bargain shopping deals. The reality is that these ads link to sponsored platforms which are not chosen by the program. The developers of Uc.exe agree to promote the content of all paying parties without running a security check. Any of the linked websites could turn out to be corrupted.

What are the consequences of Uc.exe running on your system?

Per definition, adware programs are created to raise monetary proceeds through supported advertising. This approach is not well regarded when the program neglects to take precautionary measures. Uc.exe does not filter the websites it links to. This makes the tool risky for the end user. Following the pop-up ads could take you to compromised websites and get your computer infected with malware.

The web page you are redirected to by following a given ad might not match the description from the window. This is quite common for unsolicited advertisements. The pop-up window displays a picture of a certain item, while the website it leads to is not connected to shopping at all.

In some cases, the user is required to sign in with an online payment account before proceeding to the website. You should never agree to enter your financial details when accessing a website. This is how phishing attacks are done. Cyber criminals can duplicate the layout of a legitimate payment platform and collect the login credentials you enter. The developers of Uc.exe may have nothing to do with this scheme, but they allow it to happen by redirecting users to unreliable websites.

Uc.exe can be involved in stealing your personal details. The shady program has tracking capabilities. It can record your surfing history, cookies, IP address, country of origin, zip code, email, user names, passwords and the personal details you have entered into your online accounts. The gathered data can be sold to cyber criminals.

How is Uc.exe distributed?

As already elaborated, there is not much information on Uc.exe. The furtive program uses a few dark patterns to gain entry into people’s computers. The most common distribution technique is bundling. The adware can merge its wizard with another utility and try to get installed in parallel with it. Pirated programs, freeware and shareware tools are the download clients for Uc.exe. When adding a program to your system, you should read its terms and conditions. Uncheck all extra tools, offered as a bonus.

Uc.exe can be transferred through a spam email with a host file. Mailing spammers spread clandestine software through attachments. The file can be infected with a malicious code to prompt the download and install of the adware when accessed. Make sure a message is legitimate before opening files from it. The entity behind the letter should have provided contacts. The listed information should match the disclosure on its official website.

Drive-by installations are another way of spreading Uc.exe. An insidious website or link can transfer the adware to your system through a single click. You need to be cautious about the sources you trust online. If you have doubts about the reliability of a given website, do your research on it. Be advised that malicious links can come from a reliable source when a hacker is involved. Make sure the person has sent the link himself. If you did not expect to receive a link from him, it is best to contact him.

Uc.exe “Virus” Removal

STEP-1 Before starting the real removal process, you must reboot in Safe Mode. If you are familiar with this task, skip the instructions below and proceed to Step 2. If you do not know how to do it, here is how to reboot in Safe mode:

For Windows 98, XP, Millenium and 7:
Reboot your computer. When the first screen of information appears, start repeatedly pressing F8 key. Then choose Safe Mode With Networking from the options.
Safe Mode with Networking
For Windows 8/8.1
Click the Start button, next click Control Panel —> System and Security —> Administrative Tools —> System Configuration.‌
Windows 8 Safe Mode with Network
Check the Safe Boot option and click OK. Click Restart when asked.
For Windows 10
Open the Start menu and click or tap on the Power button.
win10 safemode 1
While keeping the Shift key pressed, click or tap on Restart.
win10 safemode 2

STEP-2Here are the steps you must follow to remove Uc.exe “Virus” from the browser:

Remove From Mozilla Firefox:

Open Firefox, click on top-right corner , click Add-ons, hit Extensions next.
firefox extensions
Look for suspicious or unknown extensions, remove them all.

Remove From Chrome:

Open Chrome, click chrome menu icon at the top-right corner —>More Tools —> Extensions. There, identify the malware and select chrome-trash-icon(Remove).
chrome extensions

Remove From Internet Explorer:
Open IE, then click IE gear icon on the top-right corner —> Manage Add-ons.
ie gear
Find the malicious add-on. Remove it by pressing Disable.

STEP-3

Right click on the browser’s shortcut, then click Properties. Remove everything after the .exe” in the Target box.

ff shortcut

STEP-4

Open Control Panel by holding the Win Key and R together. Write appwiz.cpl in the field, then click OK.

appwiz

Here, find any program you had no intention to install and uninstall it.

STEP-5

Run the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.

task manager

Look carefully at the file names and descriptions of the running processes. If you find any suspicious one, search on Google for its name, or contact me directly to identify it. If you find a malware process, right-click on it and choose End task.

STEP-6

Open MS Config by holding the Win Key and R together. Type msconfig and hit Enter.

msconfig

Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Still can not remove Uc.exe from your browser? Please, leave a comment below, describing what steps you performed. I will answer promptly.

17 thoughts on “How to Remove Uc.exe “Virus””

  1. Hi. I did all the steps shown and managed to remove some of the uc files. But some still remains especially that uc.exe. i could not find it in my uninstall programmes or anything else. The virus has been in there for a day now and i am really scared that they took my personal information. Help would be greatly appreciated! Thank you.

    1. Hey Isaac,

      Please try the following to delete uc.exe

      1. Press they Windows Key + R on your keyboard, type “taskmgr” in the input field and hit Enter.
      2. Locate the uc.exe under “Processes”, right-click on it and write down the full path to the file. Then click “End process”.
      3. Navigate to uc.exe folder and delete the file.

      Please, let me know if this helped.

      Thanks,
      Daniel

  2. Hello , Mr Daniel , I have a probleme with my windows 10 since an UC.exe got in the system , I have no more controle on my pc , It restarts all alone after analysing the error , for several time , leaving me short of options what can I do please ?

    1. Hey Melek,

      Please, try these steps:
      1. Boot Windows into Safe mode.
      2. Click “Cortana” and type “regedit”. When asked click “Yes”.
      3. In Registry Editor, click Edit -> Find and type uc.exe
      4. Write down all registry entries that have uc.exe as data. Post them as a reply of this comment. I will let you know if they are safe to be deleted.

      Thanks,
      Daniel

  3. Danilo Leonel Gallardo Cea

    Hi Daniel. Mi laptop reboot every 30 second aproximately. I don´t have the time to do anything, I try by closing the suspicious process brom the task manager in the short time I have (when I do that the reboot delays a little), but still reboot mi laptop. When the UC.exe try to execute and windows ask mi if I gave my permission to execute the program doesn´t matter my answer, still reboot mi laptop. I look for the path where the file is hosting and it was in the program files in a folder named “hhh”, I deleted it but mi laptop still reboot, the only difference is that now windows ask me nothing. I looked in google chrome for suspicious extensions, I ended deleting all of them, I did that when I reboot mi laptop in safe mode, but in safe mode can´t acces to microsoft edge to look for suspicious extensions. In safe mode I also try all the options that the Recory gave me, but the Recovery system didn’t work. I have Avira but I can´t execute it in safe mode, so I can’t scan my laptop. I look in the uninstall programmes but I don´t find UC.exe maybe it´s disguised with another name.

    I conclusion, I don’t know what else to do. The only option I left is to install windows all over again.

    Many thanks for your time,
    Danilo

    1. Hey Danilo,

      Please, try these steps:
      1. Boot Windows into Safe mode.
      2. I am not sure that Windwos version you are running.
      If you are running Windows 10, then click “Cortana” and type “regedit”. When asked click “Yes”.
      If you are running Windows 7, then click “Start”, “Run” and type “regedit”. When asked click “Yes”.
      3. In Registry Editor, click Edit -> Find and type uc.exe
      4. Write down all registry entries that have uc.exe as data. Post them as a reply of this comment. I will let you know if they are safe to be deleted.

      Thanks,
      Daniel

  4. Hi Daniel
    I find it in my Windows 10 system
    location: svchost0 C:\Program Files(x86)\sbqh\uc.exe

    is it safe to delete and how?
    thak you

    1. Hey Ian,

      Yes, this is a bogus entry. Once you kill the uc.exe in Task Manager, you can navigate to C:\Program Files(x86)\sbqh and delete the whole sbqh folder. Also, make sure that you remove that entry from the Registry too.

      Regards,
      Daniel

  5. Hi Daniel

    Appreciate some help with removing the uc.exe malware. The only place I managed to find it was when you go into msconfig, there were a few items with a us and unknown manufacturer so I unchecked these. However I still get an this window flashing for a split second and then vanishing. I also went into the regedit as per your previous advise to another user, and I found quite alot of stuff with ou.exe.. details are as follows and appreciate if you can advise if safe to delete….

    – OADE17BF64395C04D – FILE NAME 99E80CA9BO328EB1F2AE has a msous.exe file located microsoft office \root\office16 folder
    – there is a msou.exe file ocated microsoft office \root\ office14 folder
    – FEATURE_ADDON_MANAGEMENT – HAS MSOUC.EXE FILE
    THE BELOW ALL HAVE MSOUC.EXE FILES:
    – FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
    – FEATURE_LOCAL_MACHINE_LOCKDOWN
    – FEATURE_MIME_HANDLING
    – FEATURE_MIME_SNIFFING
    – FEATURE_OBJECT_CACHING
    – FEATURE_RESTRICT_ACTIVEXINSTALL
    – FEATURE_RESTRICT_FILEDOWN
    – FEATURE_SAFE_BINDTOOBJECT
    – FEATURE_SECURITYBAND
    – FEATURE_UNC_SAVEFILECHECK
    – FEATURE_VALIDATE_NAVIGATE_URL
    – FEATURE_WEBOC_POPUPMANAGEMENT
    – FEATURE_WINDOWS_RESTRICTIONS
    – FEATURE_ZONE_ELEVATION

    THEN UNDER DIAGNOSED APPLICATIONS DIRECTORY THERE IS A UC.EXE FOLDER

    THEN UNDER MSCONFIG > STARTUPREG > APP THERE IS A COMMAND FILE WITH DATA C:\PROGRAMFILES (X86)\WANTTOXIAME\UC.EXE

    PLEASE ADVISE WHAT I SHOULD DO AND WHAT SHOULD I DELETE, IE THE WHOLE DIRECTORY OF THE FILE NAME.

    tHANKS

  6. Does restoring pc to factory settings work to remove it. I found csrss.exe in the details and I googled it and its apperently a trojan but when I tried to end task its said not allowed. I did not find any bogus folders and was able to delete the ucfolder in program files am I safe??

  7. eduardo fuentebella

    Hi Daniel

    got nothing on my laptop now. all that is displayed is a black screen! please help.

    thanks much

    boyet

  8. Hi Daniel,
    I followed all the mentioned steps but I still find multiple instances of the UCBrowser in Prefetch, Tasks, Local and WinSXS folders. When I try to delete them it says that I do not have permissions.
    What can I do?

  9. I uninstalled UC browser in safe mode, but the default browser appears UC followed by Chinese characters. How can I remove and there? And 2 when I want to create a folder and explore Windows restarts will not let me do that. How can I solve these problems?

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.