Removing the Mirar spyware can be a little tricky, but following these steps will get that nasty piece of software off of your computer in no time. Just trying to uninstall it using “Add or Remove Programs” most likely will not get rid of the file in it’s entirety, so you’ll need to either manually remove it or download an automatic Mirar removal tool to remove Mirar

Automatic removal instructions

Simply click this link to download SpyHunter Scanner, will which detect Mirar and will remove it. It should be fairly simple and straightforward.

This method is extremely reccommended, and unless you’re confident in your ability to safely delete registry values and unregister DLLs, I would not suggest using the Manual removal method. However, if you feel that manually removing the malware is your best route, then proceed to the “Manual removal” section.

Manual Removal

First, kill the following processes: mirarsetup.exe, 875455-NOSB.exe (you may have either or both)

This can be done by opening up task manager by pressing ctrl-alt-delete and going to the “process” tab and clicking “End process” on each of the processes with the names stated above.

Next, delete the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ToolbarInstall
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar_Dummy.NN_BarDummy
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar_Dummy.NN_BarDummy.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar.NN_Bar_Helper
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar.NN_Bar_Helper.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar.NN_WebBand
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NN_Bar.NN_WebBand.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A0DCBDA-6E20-489C-9041-C1E8A0352E75}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1037B06C-84B7-4240-8D80-485810A0497D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{224302B0-94E9-45C2-9E5B-BA989EE556E1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{54B287F9-FD90-4457-B65E-CB91560C021D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6E4C7AFC-9915-4036-B7F9-8B3F1710788F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{566DEDE9-9ED8-45DA-9BE6-9B2EEAB17F49}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F8310E7D-4C4D-46A4-A068-B5BB99411CC7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4035DE1B-D54A-411E-9EE7-923295D2E86E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{753B9349-7E46-4E5C-A27F-A60A6BF1EAB5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE%\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\%System%\windmy.dll
HKEY_LOCAL_MACHINE%\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\%Windows%\Downloaded Program Files\mirarsetup.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%System%/windmy.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\%Windows%/Downloaded Program Files/mirarsetup.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\net-nucleus.com
HKEY_LOCAL_MACHINE\SOFTWARE\RelatedPageInstall
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8A0DCBDA-6E20-489C-9041-C1E8A0352E75}

How to delete registry entries:

1. Go to Start -> Run…
2. In the run prompt, type in “regedit” (without the parenthesis) and press enter.
3. This will bring up your registry. Make sure to find and delete the registry entries listed above only, as messing with any other values could seriously impair the use of your computer.
4. If you don’t see some of the values in your registry that listed above, just skip over them.
5. After you’ve went through the list, try the next set of instructions

Finally, try to unregister all of the following DLLs:

windmy.dll
nn_bar.dll
nn_bar21.dll
nn_bar22.dll
nn_bar31.dll
winnb[X].dll
winnb40.dll

This can be done by typing the name and path of the DLL in the “Run” dialog box and typing “regsvr32 /u <name_of_dll>”, where “<name_of_dll>” is contains the name of the DLL.

Also delete any files that have the following name:

mirarsetup.exe
windmy.dll
nn_bar.dll
nn_bar21.dll
nn_bar22.dll
nn_bar31.dll
winnb[X].dll
winnb40.dll
winnb41.dll
installer.cab
875455-NOSB.exe
mit3.tmp
mit3.tmp.cab

After you’ve finished all of these steps, your computer should be Mirar free!

Related posts:

1. Remove Recent Searches Few days back we discussed about the way to delete...
2. Get rid of boot.vbs error message and virus Sometime you may face an error message like “Cannot find...
3. Review of Internet Explorer 8 RC 1 Microsoft has launched the first release candidate of internet explorer...
4. Remove Show Hidden Files Problem and remove Autorun.inf Virus Often many of us come across problem like say Task...
5. Enable Task Manager from Registry Sometime, due to some malware or virus disable the Task...