Meheerwar is a trojan that changes the Internet Explorer start page, alters its web site history list and modifies other web browser settings. The parasite also creates numerous empty folders on the desktop and in the My Documents folder. These folders have English or Dutch names. Furthermore, Meheewar replaces the desktop wallpaper with a message in Dutch. The trojan may control the CD or DVD drive. It also swaps the left and right mouse buttons.
csrss.exedel.exedont delete me.exemsn.exemsnpaint.exenotedpad.exeopen me.exewinfile.exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunupdate=percentSystempercentwinupdatecsrss.exeHKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page=[site address 1]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainWindow Title=Warrior !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! By Mr.XHKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerTypedURLsurl[X]=[site address 2]