Home & Home OfficeBusinessPartnersClubAbout Security Stronghold

Medre Removal: Remove Medre Forever

Information provided by: Alexey Abalmasov

Let our support team solve your problem with Medre and repair Medre right now!

Leave the detailed description of your Medre problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix Medre problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete Medre problem removal solution.

Describe your problem here and we'll contact you in several minutes:

We'll contact you back in 10 minutes or less after you click on this button.

Individual solution guaranteed!

It is important:

We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Medre removal solution.
All fields of this form are obligatory.

Guaranteed Problem Solution

If you want to make problem with Medre and acad.fas solved with the automated fix created by our professionals right now, click here (download of fix will start immediately):

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

What is Medre? Technical details of Medre problem and Medre removal tool.

Methods for manual Medre removal.

Instant download of a program that will solve your problem automatically.

Instant professional support in solving Medre error from our Security Support Team.

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Medre

acad.fas

Worm

Win32 (Windows 9x, Windows XP, Windows Vista, Windows Seven)

The worm attempts to modify the following file:

%autocadinstallationfolder%\Support\acad20*.lsp

The worm writes the following entries to the file:

(if (findfile "cad.fas")(load "cad.fas"))

The performed data entry ensures launching/interpretation of commands stored in the following files:

cad.fas

Medre intrusion method

Medre copies its file(s) to your hard disk. Its typical file name is acad.fas. Then it creates new startup key with name Medre and value acad.fas. You can also find it in your processes list with name acad.fas or Medre.

If you have further questions about Medre, please fill in the form above and we'll contact you shortly.

Download program to remove Medre (Medre Removal Tool)

How to fix Medre?

This problem can be solved manually by deleting all registry keys and files connected with Medre, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Medre.

To get rid of Medre, you should:

1. Kill the following processes and delete the appropriate files:

• %windir%\System32\Acad.fas
• %windir%\Acad.fas
• %currentworkingdirectoryofdwg%\cad.fas
• %currentworkingdirectoryofdwg%\acad.fas
• %autocadsupportdirectory%\cad.fas
• %autocadsupportdirectory%\acad.fas

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use Medre Removal Tool for safe problem solution.

2. Delete the following malicious folders:

no information

3. Delete the following malicious registry entries and\or values:

Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting
Value: FILE-H
Data: T

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use Medre Removal Tool for safe problem solution.

Here are the descriptions of problems connected with Medre and acad.fas we received earlier:

Problem Summary: Autocad File is crashing

Our autocad file is always crashing, it will say drawin busy and then stop. when opening the file again, all of th drawing inside are lost. This is cause by acad.fas