Home » Removal » How to Remove Sawmenger XP Trojan

How to Remove Sawmenger XP Trojan

This article can help you to remove Sawmenger XP Virus. The step by step removal works for every version of Microsoft Windows.

Sawmenger XP is yet another member of the Trojan family. The malicious infection is hazardous, and quite harmful. It exploits your carelessness to invade your system. Then, once it does, takes over, and spreads its corruption. After a Trojan makes its way into your system, it has free rein. The tool does as it wishes, and you’re stuck dealing with the consequences. You face continuous meddling, reshuffles, a variety of dangers. The more time, such a tool spends on your computer, the worse your situation becomes. That’s why, experts advise towards its immediate removal. Once you become aware of the presence of the Sawmenger XP threat, take action. Do your best to locate its exact hiding place. Then, delete it on discovery. By removing it ASAP, you’ll avoid a plethora of problems. You won’t have to face the incessant online interference. Or, endure the consequences of said interference. Or, deal the grave malware risk, the Trojan poses. Not to mention, the severe security risk. Yes, among everything else, you also face a security risk. Do what’s best for you, and your system. Locate and remove the Trojan NOW! Sawmenger XP has NO place on your computer.

Remove Sawmenger XP

How did I get infected with?

Sawmenger XP seems to pop up out of the blue. But, in reality, you’re the one, who allowed its entry. Yes, the tool asked you if you agree to its install. And, you did. Odds are, you don’t remember giving it. Since, no Trojan can access a system without user’s consent, memory or no, you gave it. Don’t be too hard on yourself, though. It’s far from a straightforward exchange. Yes, the tool inquires whether you agree to allow it in, or not. But don’t think it’s outright. It’s quite the opposite. Yes, it seeks your permission, but does it in the most covert way possible. The Trojan lurks behind corrupted sites or links. It uses spam email attachments, or freeware. It can even pretend to be a program or system update. Like, Java or Adobe Flash Player. It’s rather masterful in the art of deception. But it cannot succeed without your cooperation. You are the last line of defense. If you’re thorough enough, you can catch it in the act. And, foil its invasive attempts. If you’re not, you end up with a hazardous cyber threat. Remember that, next time, you open your PC to tools, updates, or anything else off the web. Attention goes a long way. If you wish to keep an infection-free PC, caution is crucial. Always do your due diligence. Take the time to be thorough. If you’re not, odds are, you’ll regret it.

Why is this dangerous?

The Sawmenger XP Trojan is a hazard. After it invades your computer, it wastes no time. Corruption ensues at once. In no time, you start to face the repercussions of its stay. Every time you browse, you face an avalanche of intrusions – ads, redirects. Going online becomes a nightmare. You begin to discover a plethora of changes. Changes, performed throughout your system, without your knowledge or consent. One day, you come to find them, already in place. These reshuffles can range from seeing your default homepage switched. To finding out your PC is home to a myriad of malicious programs. Applications, you did not agree to install. That’s how Trojans work. They have the power to approve the admission of malware. If the tool so wishes, it can fill your computer to the brim, with cyber threats. And, that’s not without consequences, either. What if your system gets too overwhelmed? What if it can no longer function right? What if it gives up? The Blue Screen of Death is a valid possibility. Yes, it’s a rather minute, insignificant one. But that doesn’t discard it as non-existent. So, as minuscule as the odds of the dreaded blue may be, are you prepared to take them? Or, would you rather, protect yourself, and your PC? Trojans don’t make for good company. Not only do they wreak havoc, and mess your system up. But, they also threaten your privacy. Given enough time, the infection WILL steal your information. And, then, it WILL expose it to strangers. It’s programmed that way. Sawmenger XP spies on you from the moment, it invades. It keeps track of your activities, and records everything. That gives it access to your personal and financial details. Once it gets a hold of your data, it’s free to use it as it sees fit. Are you willing to give the Trojan such power over you? Or, would you rather, avoid the plethora of risks, mentioned above? Do yourself a favor, and pick the latter. Locate where the Trojan lurks, and delete it on discovery. The sooner you do, the better.

Manual Sawmenger XP Removal Instructions

The Sawmenger XP infection is specifically designed to make money to its creators one way or another. The specialists from various antivirus companies like Bitdefender, Kaspersky, Norton, Avast, ESET, etc. advise that there is no harmless virus.

If you perform exactly the steps below you should be able to remove the Sawmenger XP infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

STEP 1: Track down Sawmenger XP related processes in the computer memory

STEP 2: Locate Sawmenger XP startup location

STEP 3: Delete Sawmenger XP traces from Chrome, Firefox and Internet Explorer

STEP 4: Undo the damage done by the virus

STEP 1: Track down Sawmenger XP related processes in the computer memory

  • Open your Task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
  • Carefully review all processes and stop the suspicious ones.


  • Write down the file location for later reference.

Step 2: Locate Sawmenger XP startup location

Reveal Hidden Files

  • Open any folder
  • Click on “Organize” button
  • Choose “Folder and Search Options”
  • Select the “View” tab
  • Select “Show hidden files and folders” option
  • Uncheck “Hide protected operating system files”
  • Click “Apply” and “OK” button

Clean Sawmenger XP virus from the windows registry

  • Once the operating system loads press simultaneously the Windows Logo Button and the R key.


  • A dialog box should open. Type “Regedit”


Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or

  • and delete the display Name: [RANDOM]

delete backgroundcontainer

  • Then open your explorer and navigate to: %appdata% folder and delete the malicious executable.

Clean your HOSTS file to avoid unwanted browser redirection

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:


Step 4: Undo the possible damage done by Sawmenger XP

This particular Virus may alter your DNS settings.

Attention! this can break your internet connection. Before you change your DNS settings to use Google Public DNS for Sawmenger XP, be sure to write down the current server addresses on a piece of paper.

To fix the damage done by the virus you need to do the following.

  • Click the Windows Start button to open the Start Menu, type control panel in the search box and select Control Panel in the results displayed above.
  • go to Network and Internet
  • then Network and Sharing Center
  • then Change Adapter Settings
  • Right-click on your active internet connection and click properties. Under the Networking tab, find Internet Protocol Version 4 (TCP/IPv4). Left click on it and then click on properties. Both options should be automatic! By default it should be set to “Obtain an IP address automatically” and the second one to “Obtain DNS server address automatically!” If they are not just change them, however if you are part of a domain network you should contact your Domain Administrator to set these settings, otherwise the internet connection will break!!!


  • Check your scheduled tasks to make sure the virus will not download itself again.

How to Permanently Remove Sawmenger XP Virus (automatic) Removal Guide

Please, have in mind that once you are infected with a single virus, it compromises your whole system or network and let all doors wide open for many other infections. To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify possible virus leftovers or temporary files.

This article was published in Removal and was tagged . Bookmark the permalink for later reference by pressing CTRL+D on your keyboard.

Share the Knowledge by following us.

Support the fight against malware

Fix This Today!

Warning: Stopping the wrong file may damage your system. If you have any doubts this can happen just use SpyHunter® - a multiple time certified scanner and remover.
download spyhunter
  • SpyHunter Removal Tool is recommended to get rid of the virus, however if you want to remove the malware automatically, you have to register the professional malware removal tool.

© 2018 Updated. All Rights Reserved. About. Terms of Use. Disclaimer. Log in