Win32.Mawar Description
Win32.Mawar is labeled as a computer virus, but it is really just a script labeled as malware by most anti-virus companies. It is also known by the names JS_AUTORUN.ABE, Mawar.js, and AhPaw.js.
Win32.Mawar Symptoms
You will see the following indications if your computer is infected with Mawar:
- Your Windows Explorer and/or the Internet Explorer window title is changed to Mawar.js or AhPaw.js
- When you right-click any drive inside the My Computer section of your computer, the default option which is “Open” is not the first choice. It will be labeled “Op%n” or “Search” instead of the default, bolded “Open”.
- Double clicking a drive on your computer won’t open it. Instead it will perform another operating system function such as “Search”.
- You have to go to the address bar and select your drive from the small arrow icon to open it, instead of double-clicking the drive.
How to Remove Win32.Mawar
Manual Instructions – Conduct at your own risk! Use a anti-virus or anti-malware program if you have one available first!
1. Disable System Restore on your computer by doing the following:
- Right click the “My Computer” icon on your computer and select “Properties->System Restore” and check the “Turn Off System Restore” option.
(Right click My Computer –> Properties –> System Restore –> check at the Turn Off System Restore box –> OK
2. Restart your computer in Window Safe Mode
Reboot your computer normally, then push the “F8” key rapidly until you get the reboot menu. Then choose the “Safe Mode” rebooting option.
3. Login to your computer in administrator mode.
4. Unhide all Hidden Files and protected Operating System Files
- Open “My Computer” then select “Tools->Folder Options->View” and check the “Show hidden files and folders” radio button followed by unchecking the “Hide protected operating system files (Recommended) button.
- Click “OK” to apply the changes
5. Go to My Computer –> C:\ drive (or any additional/removable drive) find the following files through searching the drive and delete them: autorun.ini, VirusMwrdy.js, ahpaw.js.
6. Go to My Computer again, and right-click C:\ drive
- Click Properties –> Disk Cleanup –> More Options –> System Restore –> Cleanup.. –> click Yes when asked –> then choose the “Ok” menu option.
7. Remove Mawar Registry Entries
- Click Start — > Run –> input “regedit” and click the “enter” button on your keyboard.
- Search the registry for VirusMwrdy.js, ahpaw.js, and delete all keys found on the searches. For mawar, also enter mawar on a separate search and ahpaw for AhPaw.js.
8. To fix your windows and Internet Explorer title bars, delete this entry from your registry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
9. Reboot your computer normally after finishing with the registry deletions.
No related posts.
Related posts brought to you by Yet Another Related Posts Plugin.
