Meridian manual removal:
Delete registry values:HKEY_CLASSES_ROOT\CLSID\{FA79FA22-8DB3-43D1-997B-6DBFD8845569}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FA79FA22-8DB3-43D1-997B-6DBFD8845569}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FA79FA22-8DB3-43D1-997B-6DBFD8845569}
Unregister DLLs:gdiplus64.dll, ie64.dll, myaccess.dll, ver64.dll
Delete files:gdiplus64.dll, ie64.dll, myaccess.dll, ver64.dll
Misc:Meridian files can be found in the default system folder, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Can download and execute arbitrary unsigned code pointed to by its controlling server, thumbsnatcher.com.
Post Comment: