Worm.Mevon.A

What is Worm.Mevon.A?

Worm.Mevon.A is a computer worm that enters target systems through mapped drivers. In order to do that, Worm.Mevon.A makes use of the Autorun feature, or simply spreads through P2P file sharing networks. It drops copies of itself in a number of shared folders, and there are quite a few of file sharing applications that are exploited by Worm.Mevon.A for distribution. For example, file sharing application that are known to deliver the worm include eMule, Kazaa, Morpheus, Tesla, Rapigator, Warez and others. When the malware spreads via mapped drives, it checks whether any of the following drives are present on the computer and then tries to spread through them: C:, D:, E:, F:, G:, H:, I:, J:, K:, L:, M:.

What does Worm.Mevon.A do?

The worm comes with a number of process names in its setup, and once it is installed, Worm.Mevon.A scans the system for all the processes that contain strings known to it. If the worm detects a process with familiar string, it stops it. The strings that Worm.Mevon.A can terminate include AcctMgr, aut, atupdate, escan, fire, luall, poproxy, Synaptics, Update, wscript and others. Also, Worm.Mevon.A can easily delete files. It scans your Program Files directory and then if it finds the file names it has been looking for, it delete them. Any files that have the following names can be deleted by Worm.Mevon.A: Avg, counterspy, evonsoft, f-secure, kasper~1, NOD32a~1, Norton, Panda and so on. As you can see, Worm.Mevon.A tries to stop security programs from functioning, so that it could remain in your system for as long as possible and then spread to other computers.

How to remove Worm.Mevon.A?

Apart from deleting files and terminating processes, Worm.Mevon.A can also alter your HOSTS file, so you could be redirected to a particular website. This way, with Worm.Mevon.A on board your computer can be exposed to other malicious infections. You need to fix it. Run a full system scan with SpyHunter scanner and check whether there are any other malicious infections apart from Worm.Mevon.A on your PC. Then acquire a powerful antimalware tool that will remove Worm.Mevon.A for you automatically, along with other dangerous applications.

How to restore HOSTS file

1.  Open My Computer and click Local Disk (C:).
2. Double-click Windows folder and go to system32 folder.
3. Open drivers folder and double-click etc folder.
4. Open HOSTS file with Notepad.
5. For Windows XP - there should be only one line at the end of the file: 127.0.0.1 localhost. For Windows Vista, Windows 7 & Windows 8, there should be two lines at the end of the file: 127.0.0.1 localhost and ::1 localhost.
6. If there are any other lines below the ones described above, delete them and save changes.

 

 

Download Removal Tool100% FREE spyware scan and
tested removal of Worm.Mevon.A*