Register   FAQ   Login  

MIRAR & TROJANS FROM LIMEWIRE





AddThis Social Bookmark Button AddThis Feed Button

       2-spyware forum index -> HijackThis log analysis
Author Message
mer62



Joined: 14 Jul 2009
Posts: 1

Post Post subject: MIRAR & TROJANS FROM LIMEWIRE Reply with quote

I GOT MIRAR & VIRUS FROM LIMEWIRE , I HAVE RAN SPYBOT SEARCH & DESTROY &
AVG. I HAVE DISABLED THE MIRAR TOOLBAR BUT IT IS STILL INSTALLED. I CANNOT
ACCESS MY REGISTRY TO RUN REGEDIT, SAYS IT IS BLOCKED BY ADMINISTRATOR.
I CANNOT ACCESS SYSTEM RESTORE, I HAVE TRIED THROUGH NOTEPAD, COMMAND
PROMPTS, ETC. PLEASE HELP!
WINDOWS XP SYSTEM[/list]
Tue Jul 14, 2009 4:12 pm
Back to top
mer62 View user's profile Send private message
 
rodi
Site Admin


Joined: 23 Jun 2009
Posts: 128

Post Post subject: Reply with quote

Hi,

Regedit fix: http://www.dougknox.com/security/scripts_desc/regtools.htm
if that won't work, then do this:
Go to: start-->run-->gpedit.msc-->user configuration -->administrative templates-->system-->ctrl+del+alt-->remove task manager-->double click -->set it to "disable"or "not configured" then your task manager will be back.

To remove MIRAR do the following:
Download KillBox: http://killbox.net/

Open KillBox, find these processes: mirarsetup.exe, 875455-NOSB.exe and delete them.
Run regedit and delete the following registry keys or values: (select Find command for faster search)

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onRunToolbarInstall=mirarsetup.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onSharedDLLsC:WindowsDownloadedProgramFilesmirarsetup. exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onSharedDLLsC:WindowsSystem32windmy.dll

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onModuleUsageC:/Windows/DownloadedProgramFiles/mirarse tup.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onModuleUsageC:/Windows/System32/windmy.dll

9A9C9B68-F908-4AAB-8D0C-10EA8997F37E

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper. 1

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand.1

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDu mmy

HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDu mmy.1

179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF

8A0DCBDA-6E20-489C-9041-C1E8A0352E75

1037B06C-84B7-4240-8D80-485810A0497D

224302B0-94E9-45C2-9E5B-BA989EE556E1

54B287F9-FD90-4457-B65E-CB91560C021D

6E4C7AFC-9915-4036-B7F9-8B3F1710788F

566DEDE9-9ED8-45DA-9BE6-9B2EEAB17F49

F8310E7D-4C4D-46A4-A068-B5BB99411CC7

4035DE1B-D54A-411E-9EE7-923295D2E86E

753B9349-7E46-4E5C-A27F-A60A6BF1EAB5

9A9C9B69-F908-4AAB-8D0C-10EA8997F37E

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersi onInternetSettings > oneMapDomains

et-nucleus.com

Unregistering Mirar DLL Files:

To unregister DLL files, first search for their exact location on the system.
Next, run the regsvr32 /u FullDLLName.dll and press Enter. DLL name should include the exact location of the DLL file on the system.

To remove Mirar toolbar, you need to unregister the following DLL files:

windmy.dll
nn_bar.dll
nn_bar21.dll
nn_bar22.dll
nn_bar31.dll
winnb[X].dll
winnb40.dll
winnb41.dll

Finally, perform a search for the following files on your system and delete them:

installer.cab
mit3.tmp
mit3.tmp.cab

If there is still something left, then download Mirar removal tool:
http://www.2-spyware.com/remove-mirar.html

Good luck!
Thu Jul 16, 2009 9:23 am
Back to top
rodi View user's profile Send private message
 
       2-spyware forum index -> HijackThis log analysis All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




Recommended software:
Spyware Doctor
(91/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
Malwarebytes Anti Malware
(89/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
Spy Sweeper
(85/100)
Spy Sweeper is one of the most powerful and effective spyware removers available today. This Webroot Software's product uses unique, patent-pending parasite detection and removal...
Windows Defender
(80/100)
Windows Defender is a free anti-spyware program made by the leading software company to add native spyware protection to its most popular product - the Microsoft Windows operating...
SUPERAntiSpyware
(75/100)
SUPERAntiSpyware is a powerful, highly effective spyware remover introducing advanced parasite detection and removal features along with reliable real-time protection. The program is not...
Encyclopedia of parasites: