What is my Flash drive doing?

S

Staffano

New member
ok well its obvious that you have a virus i think that you should also know that mirar is a theif program and it send s your files out from you flash device you should get rid of you flash drive because everytime you plug it in to another machine it automatically copies the files in the registry
(9A9C9B69-F908-4AAB-8D0C-10EA8997F37E
753B9349-7E46-4E5C-A27F-A60A6BF1EAB5
4035DE1B-D54A-411E-9EE7-923295D2E86E
F8310E7D-4C4D-46A4-A068-B5BB99411CC7
566DEDE9-9ED8-45DA-9BE6-9B2EEAB17F49
6E4C7AFC-9915-4036-B7F9-8B3F1710788F
54B287F9-FD90-4457-B65E-CB91560C021D
224302B0-94E9-45C2-9E5B-BA989EE556E1
1037B06C-84B7-4240-8D80-485810A0497D
8A0DCBDA-6E20-489C-9041-C1E8A0352E75
179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDummy.1
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar_Dummy.NN_BarDummy
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand.1
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_WebBand
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper.1
HKEY_LOCAL_MACHINESOFTWAREClassesNN_Bar.NN_Bar_Helper
9A9C9B68-F908-4AAB-8D0C-10EA8997F37E
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/mirarsetup.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/system32/windmy.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\winnt\downloaded program files\mirarsetup.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\winnt\system32\windmy.dll
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionUninstall{8A0DCBDA-6E20-489C-9041-C1E8A0352E75}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunToolbarInstall=mirarsetup.exe
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftCode Store DatabaseDistribution Units{8A0DCBDA-6E20-489C-9041-C1E8A0352E75}
et-nucleus.com
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionInternet SettingsoneMapDomains
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{753B9349-7E46-4E5C-A27F-A60A6BF1EAB5}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{4035DE1B-D54A-411E-9EE7-923295D2E86E}
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{F8310E7D-4C4D-46A4-A068-B5BB99411CC7}
HKEY_LOCAL_MACHINE SOFTWAREClassesTypeLib{566DEDE9-9ED8-45DA-9BE6-9B2EEAB17F49}
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{6E4C7AFC-9915-4036-B7F9-8B3F1710788F}
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{54B287F9-FD90-4457-B65E-CB91560C021D}
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{224302B0-94E9-45C2-9E5B-BA989EE556E1}
HKEY_LOCAL_MACHINE SOFTWAREClassesInterface{1037B06C-84B7-4240-8D80-485810A0497D}
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{8A0DCBDA-6E20-489C-9041-C1E8A0352E75}
HKEY_LOCAL_MACHINE SOFTWAREClassesCLSID{179E4B4A-76C3-4F65-BCED-C9FA1A28D2EF}
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar_Dummy.NN_BarDummy.1
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar_Dummy.NN_BarDummy
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar.NN_WebBand.1
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar.NN_WebBand
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar.NN_Bar_Helper.1
HKEY_LOCAL_MACHINE SOFTWAREClassesNN_Bar.NN_Bar_Helper
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftInternet ExplorerToolbar{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_CURRENT_USER SoftwareMicrosoftInternet ExplorerToolbarWebBrowser{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionModuleUsage C:/Windows/System32/windmy.dll
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionModuleUsage C:/Windows/Downloaded Program Files/mirarsetup.exe
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionSharedDLLs C:WindowsSystem32windmy.dll
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionSharedDLLs C:WindowsDownloaded Program Filesmirarsetup.exe
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunToolbarInstall=mirarsetup.exe)

And also your taskmanager processes--> 875455-NOSB.exe
mirarsetup.exemirarsetup.exe

and it goes on you should download a Malware Scanner to try removing this virus if you must plug it in to another computer (which i highly un recommend)

ALSO HOT TIP
to stop computer from restarting go into the run box (windows key & R) and type cmd

in there type exactly ---> shutdown -a <------- this should abort the restart giving you enough time to remove mirar
 
My MP3 player that I also use as a flash drive is acting a bit weird... I think, when I plug it into my computer it would say conected and when I would put things on it, it would say writing all on the screen of the MP3 player. Well my last computer had some problems with the virus "Mirar" and we ended up losing all our data and eventually the computer just kept on restarting without us doing anything, we couldnt prove it was Mirar doing it but it was the only thing I knew could be harming my computer. Well now, when I plug my MP3 player into computers the writing icon will pop up on its screen and apparently it's putting things on the computer!? Does this sound familiar to anything and anything I should do? I havent experienced any problems but, I dont want to just let this happen and then have it end up ruining my computer. The MP3 player is called the Sansa e260 or something.
 
Back
Top