Have you got infected with W32/Mariofev!mem virus? Do you know how you pick it up, what it may do to your computer and how to uninstall it successfully? This post is here to uncover the secret about this particular Trojan virus. If you are one of the victims, it’s necessary to pay attention.

Description of W32/Mariofev!mem virus

W32/Mariofev!mem virus is known as a nasty Trojan infection that can spread from one computer to another automatically and secretly in a short time. As we all know, most of the computer virus are in fact a self-reproducing program which have the ability to execute code and write to memory so that they can copy itself. This W32/Mariofev!mem Trojan is kind of highly dangerous virus just like a ticking boom. As it can attach itself to executable files that may be part of legitimate programs. Once the infected program is launched, the code may execute at the same time. From then on, the virus can do various kinds of damage to your system. It may show numerous and annoying pop-ups, modify your browser settings and homepage, connect to Internet without your permission, keeps track of your internet browsing data and sends your browsing history data to remote location servers, bring in more malicious virus and install unwanted programs. Though all these infections, it makes your system run much slower and unsteady than before. Since this virus can insert codes without changing size of files or damaging files, it’s not easy to recognize. What’s worse, the virus tries to collect as much information as it can. At the same time, it tries to trick you into purchasing the so called full version anti-virus software by popping up various warnings consequently. To avoid being detected and removed from anti-virus, it can kill the tasks associated with antivirus software and changes every time.  If you are one of the victims, please note that this infection must be get rid of immediately. To protect your computer from more damages, you can get help online now or try to get rid of this aggressive Trojan virus on your own.

Threats this Trojan virus may cause

a. Bring more viruses, malware and ransomware inside your computer without permission.
b. Pop up warning warning window frequently in order to scare you.
c. Modify windows registry and kill the tasks associated with antivirus software and changes every time so that it can hide secretly.
d. Produce large amount of rubbish things and consume system resources to make your system run much slower and more unsteady.
e. Collect your personal information such as bank or Facebook account and password.

Manual Removal Guide

1: Reboot the infected computer to get into Safe mode with networking. To do that, you will need to repeatedly hit F8 key before the Windows Start-up screen shows, then use arrow keys to highlight “Safe mode with networking” option and press Enter.

2: Open Control Panel from Start menu and double click Folder Options.

3: Click on View, select Show hidden files and folders and non-select Hide protected operating system files (Recommended) then click OK.

4: Press Windows+R keys and then type regedit in Run box to open Registry Editor.

5: Delete all the following or those related to the following files.
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Desktop\W32/Mariofev!mem.lnk
%UserProfile%\Start Menu\Programs\W32/Mariofev!mem\
%UserProfile%\Start Menu\Programs\W32/Mariofev!mem\Uninstall W32/Mariofev!mem.lnk
%UserProfile%\Start Menu\Programs\W32/Mariofev!mem\W32/Mariofev!mem.lnk

6: Delete all the following or those related to the following registry entries.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Regedit32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net”
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current\Winlogon\”Shell” = “{ W32/Mariofev!mem }”

7: Restart the computer to normal mode when the above steps are done and make a check around to see if this virus is still there.

Video on How to Modify or Change Windows Registry:

TO SUM UP: As mentioned above, W32/Mariofev!mem  infection is very dangerous in your computer.Once you connect to social network you get the chance to infect it accidentally. It can  sneak into your system when clicking on an unsafe website link, opening the spam attachment, downloading free software or shared software. If you are unfortunately to pick up this pest, please calm down and remove it manually. Because up to now, no anti-virus can kill it completely. It keeps popping up again and again when you restart your PC. Since this malware has the ability to self-reproducing, you’d better remove it as soon as possible. To keep your Facebook account safe, you have to delete the stored information in the website. After the manual removal, your system will become safe again. I may emphasized that manual removal is a highly risky work to deal with program files, .dll and registry entries. If you are not sufficient enough to deal with these files,  it may lead to deadly damage. It is suggested that to manually remove this Trojan infection, advanced computer skills are required.

Notice: If you still cannot delete completely this W32/Mariofev!mem virus from your computer, please contact YooSecurity Experts now for a complete and satisfied Trojan virus removal online service.

Published by Tony Shepherd & last updated on November 26, 2012 8:34 am

Leave a Reply