MIRAR & TROJANS FROM LIMEWIRE

[mer62]

I GOT MIRAR & VIRUS FROM LIMEWIRE , I HAVE RAN SPYBOT SEARCH & DESTROY &
AVG. I HAVE DISABLED THE MIRAR TOOLBAR BUT IT IS STILL INSTALLED. I CANNOT
ACCESS MY REGISTRY TO RUN REGEDIT, SAYS IT IS BLOCKED BY ADMINISTRATOR.
I CANNOT ACCESS SYSTEM RESTORE, I HAVE TRIED THROUGH NOTEPAD, COMMAND
PROMPTS, ETC. PLEASE HELP!
WINDOWS XP SYSTEM[/list]

[rodi]

Hi,

Regedit fix: http://www.dougknox.com/security/scripts_desc/regtools.htm
if that won't work, then do this:
Go to: start-->run-->gpedit.msc-->user configuration -->administrative templates-->system-->ctrl+del+alt-->remove task manager-->double click -->set it to "disable"or "not configured" then your task manager will be back.

To remove MIRAR do the following:
Download KillBox: http://killbox.net/

Open KillBox, find these processes: mirarsetup.exe, 875455-NOSB.exe and delete them.
Run regedit and delete the following registry keys or values: (select Find command for faster search)

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onRunToolbarInstall=mirarsetup.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onSharedDLLsC:WindowsDownloadedProgramFilesmirarsetup. exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onSharedDLLsC:WindowsSystem32windmy.dll

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onModuleUsageC:/Windows/DownloadedProgramFiles/mirarse tup.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onModuleUsageC:/Windows/System32/windmy.dll

9A9C9B68-F908-4AAB-8D0C-10EA8997F37E

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper. 1

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand.1

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDu mmy

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDu mmy.1

179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF

8A0DCBDA-6E20-489C-9041-C1E8A0352E75

1037B06C-84B7-4240-8D80-485810A0497D

224302B0-94E9-45C2-9E5B-BA989EE556E1

54B287F9-FD90-4457-B65E-CB91560C021D

6E4C7AFC-9915-4036-B7F9-8B3F1710788F

566DEDE9-9ED8-45DA-9BE6-9B2EEAB17F49

F8310E7D-4C4D-46A4-A068-B5BB99411CC7

4035DE1B-D54A-411E-9EE7-923295D2E86E

753B9349-7E46-4E5C-A27F-A60A6BF1EAB5

9A9C9B69-F908-4AAB-8D0C-10EA8997F37E

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onInternetSettings > oneMapDomains

et-nucleus.com

Unregistering Mirar DLL Files:

To unregister DLL files, first search for their exact location on the system.
Next, run the regsvr32 /u FullDLLName.dll and press Enter. DLL name should include the exact location of the DLL file on the system.

To remove Mirar toolbar, you need to unregister the following DLL files:

windmy.dll
nn_bar.dll
nn_bar21.dll
nn_bar22.dll
nn_bar31.dll
winnb[X].dll
winnb40.dll
winnb41.dll

Finally, perform a search for the following files on your system and delete them:

installer.cab
mit3.tmp
mit3.tmp.cab

If there is still something left, then download Mirar removal tool:
http://www.2-spyware.com/remove-mirar.html

Good luck!