What is mor.exe?
mor.exe is part of JuireShi ©ltd. and developed by JuireShi according to the mor.exe version information.
mor.exe's description is "JuireShi ©ltd."
mor.exe is usually located in the 'c:\Users\Claude Roumain\AppData\Local\Temp\' folder.
Some of the anti-virus scanners at VirusTotal detected mor.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
The following is the available information on mor.exe:
| Property | Value |
|---|---|
| Product name | JuireShi ©ltd. |
| Company name | JuireShi |
| File description | JuireShi ©ltd. |
| Internal name | fxqdzsmeidz |
| Original filename | fxqdzsmeidz.exe |
| Legal copyright | JuireShi Copyright © 2006-2010 All Rights Reserved. |
| Product version | 5 Alpha181 RC36825 |
| File version | 0 Alpha35 RC63110 12.1037 |
Here's a screenshot of the file properties when displayed by Windows Explorer:
| Product name | JuireShi ©ltd. |
| Company name | JuireShi |
| File description | JuireShi ©ltd. |
| Internal name | fxqdzsmeidz |
| Original filename | fxqdzsmeidz.exe |
| Legal copyright | JuireShi Copyright © 2006-2010 All .. |
| Product version | 5 Alpha181 RC36825 |
| File version | 0 Alpha35 RC63110 12.1037 |
Digital signatures [?]
mor.exe is not signed.
VirusTotal report
31 of the 43 anti-virus programs at VirusTotal detected the mor.exe file. That's a 72% detection rate.
| Scanner | Detection Name |
|---|---|
| AntiVir | TR/Crypt.XPACK.Gen |
| Antiy-AVL | Trojan/Win32.Yakes.gen |
| Avast | Win32:Crypt-LRL [Trj] |
| AVG | SHeur4.SQD |
| BitDefender | Trojan.Generic.KDV.553405 |
| CAT-QuickHeal | (Suspicious) - DNAScan |
| Commtouch | W32/FakeAlert.RV3.gen!Eldorado |
| Comodo | Heur.Suspicious |
| DrWeb | Trojan.DownLoader5.51908 |
| Emsisoft | Trojan.Win32.Yakes!IK |
| F-Prot | W32/FakeAlert.RV3.gen!Eldorado |
| F-Secure | Trojan.Generic.KDV.553405 |
| Fortinet | W32/LockScreen.AKA |
| GData | Trojan.Generic.KDV.553405 |
| Ikarus | Trojan.Win32.Yakes |
| K7AntiVirus | Riskware |
| Kaspersky | Trojan.Win32.Yakes.qja |
| McAfee | Generic.dx!bd3e |
| McAfee-GW-Edition | Heuristic.LooksLike.Win32.Winwebsec.B |
| Microsoft | Trojan:Win32/Ransom.HB |
| NOD32 | Win32/LockScreen.AKA |
| Norman | W32/Suspicious_Gen4.SGEE |
| nProtect | Trojan.Generic.KDV.553405 |
| Panda | Generic Malware |
| Sophos | Mal/Generic-L |
| Symantec | Trojan.Gen |
| TrendMicro | TROJ_SPNR.29C912 |
| TrendMicro-HouseCall | TROJ_SPNR.29C912 |
| VBA32 | Trojan.Yakes.qja |
| VIPRE | Trojan.Win32.Generic!BT |
| VirusBuster | Trojan.Yakes!UmgoXTkd2QE |
mor.exe removal instructions
The instructions below shows how to remove mor.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the mor.exe file for removal, restart your computer and scan it again to verify that mor.exe has been successfully removed. Here are the removal instructions in more detail:
- Download and install FreeFixer: http://www.freefixer.com/download.html
- Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
- When the scan is finished, locate mor.exe in the scan result and tick the checkbox next to the mor.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate mor.exe in the scan result.
c:\Users\Claude Roumain\AppData\Local\Temp\mor.exe 
- Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the mor.exe file.
- Restart your computer.
- Start FreeFixer and scan your computer again. If mor.exe still remains in the scan result, proceed with the next step. If mor.exe is gone from the scan result you're done.
- If mor.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
- Restart your computer.
- Start FreeFixer and scan your computer again. Verify that mor.exe no longer appear in the scan result.
Hashes [?]
| Property | Value |
|---|---|
| MD5 | 170c983ffd13053175959760643e9af5 |
| SHA256 | 5def4d1756b53721b53bcfc6328170a2f2b789ed1dc690f4d69795273d6f4b7f |
Error Messages
These are some of the error messages that can appear related to mor.exe:
mor.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
mor.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
JuireShi ©ltd. has stopped working.
End Program - mor.exe. This program is not responding.
mor.exe is not a valid Win32 application.
mor.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with mor.exe?
To help other users, please let us know what you will do with mor.exe:
What did other users do?
The poll result listed below shows what users chose to do with mor.exe. 92% have voted for removal. Based on votes from 79 users.
NOTE: Please do not use this poll as the only source of input to determine what you will do with mor.exe.
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
3 files downloaded to my pc while visiting a page from an exchange but only saw 1 firewall security let it all through.
One was a file placed on my desktop and looked like junk
and two were placed in Inet temp location. One was a batch file and the other mor.exe
Earlier today after these files downloaded a process attempted a code injection into explorer and unknown process attempted execution (mor.exe)
Prior to today,(last 2 days) my system has been catching zbot virus and quarantining.....and the odds are the issues are related. WATCH OUT ....VERY SNEAKY
# 20 Mar 2012, 8:42
LUCIANO writes
programa bastante peligroso si no es detectado por el antivirus ya que podria poner en peligro la privacidad de tu ordenador, proyectos y archivos importantes, el virus s basicamente un zbot.
# 7 Apr 2012, 7:28
Benita Walsh writes
This downloaded to my pc without my knowledge. Norton internet security originally blocked it. A Norton scan found trojan maljava and quarantined it, nothing else. mor.exe launched twice more on its own. I left my computer scanning last night, and when i went back to check it, file insight said norton had allowed mor.exe to launch?? Norton say it is nothing to worry about? I don't agree!
# 21 Apr 2012, 6:01
Benita Walsh writes
Why didn't my Norton Internet security 2012 block this?
I run regular scans, and I update several times a day??
I'm also running Malwarebytes!
# 24 Apr 2012, 4:26
Sal Zingale writes