Remove Meheerwar. Description and removal instructions

 
Title: Meheerwar

Type: Trojans
Severity scale:Meheerwar severity is 49  (49 / 100)
 
Meheerwar is a trojan that changes the Internet Explorer start page, alters its web site history list and modifies other web browser settings. The parasite also creates numerous empty folders on the desktop and in the My Documents folder. These folders have English or Dutch names. Furthermore, Meheewar replaces the desktop wallpaper with a message in Dutch. The trojan may control the CD or DVD drive. It also swaps the left and right mouse buttons. Meheerwar runs on every Windows startup.


Meheerwar properties:
• Changes browser settings
• Hides from the user
• Stays resident in background

Automatic Meheerwar removal:

remover for Meheerwar

Meheerwar manual removal:

Kill processes:
csrss.exe, del.exe, dont delete me.exe, msn.exe, msnpaint.exe, notedpad.exe, open me.exe, winfile.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\update=%System%\winupdate\csrss.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address 1]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title=Warrior !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! By Mr.X
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs\url[X]=[site address 2]
Delete files:
csrss.exe, del.exe, dont delete me.exe, msn.exe, msnpaint.exe, notedpad.exe, open me.exe, winfile.exe, d.bmp
Delete directories:
C:\Windows\System\winupdate
C:\Windows\System32\winupdate
C:\Winnt\System32\winupdate
Misc:
[X] is a number from 1 to 13.
[site address 1] is an address of a web site on the mrx-server.com domain.
[site address 2] is an address of a web site on the sex.nl domain.

Exact file location:
csrss.exe - C:\Windows\System\winupdate, C:\Windows\System32\winupdate or C:\Winnt\System32\winupdate
del.exe, dont delete me.exe, msn.exe, msnpaint.exe, notedpad.exe, open me.exe, winfile.exe, d.bmp - C:

Other programs to remove Meheerwar:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 22/02/06
Information updated: 22/02/06

Additional resources related to Meheerwar:

Attention: If you know or you have a website or page about Meheerwar removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Meheerwar parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: