Help me please.

Discussion in 'privacy problems' started by CarolinaMoonshine, Apr 22, 2006.

Thread Status:
Not open for further replies.
  1. CarolinaMoonshine

    CarolinaMoonshine Registered Member

    Joined:
    May 3, 2002
    Posts:
    91
    An adware program has attached itself to my computer. It is named "Mirar".

    What is the correct product to use to find this and clean it from my system?

    I apologize if this is not correct place to put my question.
     
  2. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
    u can try products like spyware doctor or ewido anti-malware to see if they can remove it but heres some instructions just in case.

    Follow these removal instructions to remove Mirar from your computer:

    1. Click Start > Run , type 'regedit' and click Ok to open the Registry Editor.

    2. Locate the following key:
    HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar,
    in the right pane, delete the value {179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF} , if it exists.

    3. Locate the following key:
    HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar \ WebBrowser,
    in the right pane, delete the value {179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF} , if it exists.

    4. Delete the following key:
    HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ {179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF}

    HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ {8A0DCBDA-6E20-489C-9041-C1E8A0352E75}

    HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ {8A0DCBDA-6E20-489C-9041-C1E8A0352E75}

    5. Reboot the computer.

    6. Delete the following files (if exist ):

    %SystemDir%\NN_BAR.DLL
    %SystemDir%\NN_Bar21.dll
    %SystemDir%\NN_Bar22.dll
    %SystemDir%\NN_Bar31.dll

    Note: %System% is a variable, you should replace it with the System directory in your computer. By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

    7. Click Start > Settings > Control Panel, double click Internet Options, click the Programs tab, and then click on the Reset Web Settings .

    Instruction are a courtesy of spyany.com
     
  3. CarolinaMoonshine

    CarolinaMoonshine Registered Member

    Joined:
    May 3, 2002
    Posts:
    91
    Thank you so much.

    I guess I failed to add that in the past couple of days I have run SpyBot and Adaware - but have not seemed to be able to stop the progression of this stealth addition.

    I do have Norton Firewall and Anti-Virus, so I am a bit discouraged by the protection they have given me - or not given me.

    I have very recently run SpyBot again, and Mirar does not seem to be there. I will watch carefully, and look in registry as you have suggested also.

    Thanks again.
    Carolina
     
  4. TopperID

    TopperID Registered Member

    Joined:
    Oct 1, 2004
    Posts:
    1,527
    Location:
    London
    Hi CarolinaMoonshine,

    Norton might be able to help you get rid of Adware.Mirar:-

    http://www.symantec.com/avcenter/venc/data/adware.mirar.html

    But not all versions of Norton detect Adware (or 'Security Risk detection' as they call it). If your version of Norton lacks Security Risk detection it will not protect you from this kind of problem.

    What you really need to do initially is go through the following procedure:-

    1) Firstly, clear out all your temporary files and the easy way to do that is by downloading CCleaner from here:-

    http://www.ccleaner.com/

    Before running CCleaner you should configure it by clicking 'Options'/'Advanced' and unticking the box 'Only delete files in Windows Temp folders older than 48 hours'.

    2) Next, you should go into Safe Mode; see here:-

    http://www.bleepingcomputer.com/forums/tutorial61.html

    and do a full system scan with Norton AV, AdAware and Spybot (all of which should be updated beforehand to ensure you are using the latest definitions).

    3) Finally do an online scan to see if anything else can be found:-

    http://housecall.trendmicro.com/

    If you do need to manually remove files using Windows Explorer, you should be sure to unhide your 'Hidden' files first:-

    http://www.bleepingcomputer.com/forums/index.php?showtutorial=62

    If none of the above does the trick you could try downloading and scanning with ewido (in 'safe' mode of course):-

    http://www.ewido.net/en/download/

    Let us know how you get on.
     
Thread Status:
Not open for further replies.