Registry Help In XP

BanMe, Sun Jan 11 2009, 03:01PM

I removed mirar using spybot but it is still there. I took a dive into the registry and deleted all of its registry keys and data I could find. There are no files in any folder anywhere or in my registry. I'm still getting internet explorer pop-ups even when I use Firefox.

The only thing left of mirar that I can find is in add or remove programs. If i click on remove a blank white window pops up and nothing happens.

Does anyone know have to remove something from add/remove programs in the registry or some other location. Ive been searching for hours and using the internet is a pain because this thing has dropped my connection speed to around dial-up
Re: Registry Help In XP
Tranc3r, Sun Jan 11 2009, 05:35PM

Here's a good site you should go to, they always find a way to fix problems! You'll get a few solutions by the end of the day! I always go there! Trust me they have people better than Techs there and best part of it is that its for FREE: http://www.computerhope.com/forum/index.php

Just don't use Ban-me as an username, it'll look wrong.
Re: Registry Help In XP
BanMe, Sun Jan 11 2009, 05:46PM

Thanks for the link Tranc3r but I got the little sucker. I deleted it once but after restarting my computer it came back. This time i think i got it for good. My connection speed seams to be back to normal as well. This virus ate up my weekend.

If you ever see a program named Mirar. RUN AWAY AS FAST AS YOU CAN!!!
Re: Registry Help In XP
Tranc3r, Sun Jan 11 2009, 07:10PM

do you know HOW you got it?
Re: Registry Help In XP
BanMe, Sun Jan 11 2009, 08:34PM

I dont know. I opened internet when i woke up Saturday and a pop-up said "Thank You For Installing Mirar Toolbar" than a huge unremovable toolbar appeared. I was all WTF for 2 hours trying to remove it . Its gone but Mirar installs other programs and im still trying to find those and delete them. I get a ton of anti virus scan pop-ups now that are obviously fake.

Im still pinging 900s in superman and internet is still slugish. Checked my connection and im getting 5.2mbps. I think im gunna have to call my isp tomorrow.

I tried downloading AVG 8.0 but it stops downloading 7-8mg into the file. Windows keeps telling me i have no virus protection
Re: Registry Help In XP
ZELLIS, Sun Jan 11 2009, 08:59PM

be carefull, you may want to go AFK untill you fix this. i would unplug your internet connection ASAP. you could have a root.kit installed and it could be looking for credit card numbers and banking info buried in your comp. be carefull.
Re: Registry Help In XP
Mcflurry, Sun Jan 11 2009, 09:08PM

Sorry prolly a bad link.
Re: Registry Help In XP
BanMe, Mon Jan 12 2009, 07:24AM

Thanks Zellis ill try that. I downloaded windows defender and spybot S&D. Defender detects a zlob.trojan everytime i open ie7 or firefox and deletes it. than Spybot tells me an .exe file was added named (going off of memory) __A0064625.exe and than askes me to allow or deny the change it also trys to add a key to my registry. Its adding the file to C:\documents and settings\User\local settings\temp.

It comes back everytime i restart my computer or open internet. Slows connection down to dial up speeds. I decided to go into cmd and typed ping 69.90.115.67 (superman server) and the time was 2566ms since its normaly 55-60ms somthing is terrably wrong.
Re: Registry Help In XP
Tranc3r, Mon Jan 12 2009, 09:17AM

if you really want somthing worth your buck, get kaspersky internet Security. It's one of the best Anti-virus and anti-spyware I know, and i would recommend weekly scans of your WHOLE computer, that's what I do for my dad's and it keeps it clean.
Re: Registry Help In XP
Boogie Knight, Mon Jan 12 2009, 10:08AM

I think it may be time to reformat and reinstall. Although it's a headache, it's a smaller headache then trying to track all that crap down.
Re: Registry Help In XP
FSK405 Earl, Mon Jan 12 2009, 10:14AM

Yeah I agree with Boogie. WDclear your machine and reformat. Save what you can and dump the rest.
Re: Registry Help In XP
Gladi8r, Mon Jan 12 2009, 10:41AM

A boot-time AV scan with a very good AV program would be the place to start. In addition, any info you can Google on the particular virus message you got might be helpful, as there are often virus removal tools out there for a specific set of viruses. If your AV is currently disabled as indicated, stay off the internet on that machine. Use another, and unplug the infected one from your network. FWIW, I use Avast! for our machines here at home- It has served us well for 8 years, and updates daily- it has never missed a beat, and has caught some nasty stuff on occasion- and it's free.

You may find yourself installing the OS fresh and starting over- in which case, if you want to try salvaging files, why not use a new hard drive for the install, freshly formatted, and use your current drive as a slave. After making DAMN SURE your AV and firewalls are running on the new drive, and disconnecting from the internet, access the old drive and manually move files/folders, scanning each as you go. You may be able to salvage important stuff this way.
Re: Registry Help In XP
Gladi8r, Mon Jan 12 2009, 10:42AM

and for God's sake, stay off the porn and malware sites... ;-)
Re: Registry Help In XP
useless, Mon Jan 12 2009, 05:36PM

sometimes deleting things takes booting in safe mode so it doesn't start any of its components which will prevent deleting. been a while, but I used HiJackThis and was in and outta their forums and found the fixes from others with same issue without posting mine.
Re: Registry Help In XP
BanMe, Tue Jan 13 2009, 07:19AM

I found two files in my system32 folder added the day this started. When I go to delete them its says there alredey in use. Im not sure what proocees their under so im going to try a file unlocker and see if i can delete them.

These file create startup items on my computer. When i delete the startup items, surprise, they reapear 2 secounds later. It also creates a key in the registry under windows nt\winlogon\notify not sure what that does but its created by this virus or malware.

Wont be able to do the operating system reinstall until i find the cd. I dont have anything important on my computer except my moms pics so wiping my hardrive after i take those off is an option how would i do that.
Re: Registry Help In XP
Fear, Tue Jan 13 2009, 12:08PM

sorry if i havnt read it but have you booted in safe mode with networking and tried to kick the virus malware's ass!?
Re: Registry Help In XP
BanMe, Tue Jan 13 2009, 05:43PM

!!!FIXED FIXED FIXED FIXED!!!

!!!FIXED FIXED FIXED FIXED!!!

I KILLED IT!!!
Re: Registry Help In XP
Tranc3r, Tue Jan 13 2009, 08:02PM

nice.