Home Malware Programs Adware GetMirar

GetMirar

Posted: September 6, 2006

GetMirar, also known as Mirar Adware or Mirar webband, is a Browser Helper Object (BHO) that creates a toolbar below the menu bar of your browser. GetMirar may gather information such as search terms and URLs while you browse the Internet. GetMirar may also display ads and may hijack webpages to redirect you to third-party websites. GetMirar is a variant of Mirar, NetNucleus, NN_Bar.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 875455-NOSB.exe
    2 installer.cab
    3 mirarsetup.exe
    4 mit3.tmp
    5 mit3.tmp.cab
    6 nn_bar.dll
    7 nn_bar21.dll
    8 nn_bar22.dll
    9 nn_bar31.dll
    10 windmy.dll
    11 winnb40.dll
    12 winnb41.dll
    13 winnb[X].dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USER SoftwareMicrosoftInternet ExplorerToolbarWebBrowser{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionModuleUsage C:/Windows/Downloaded Program Files/mirarsetup.exeHKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionModuleUsage C:/Windows/System32/windmy.dllHKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunToolbarInstall=mirarsetup.exeHKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionSharedDLLs C:WindowsDownloaded Program Filesmirarsetup.exeHKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionSharedDLLs C:WindowsSystem32windmy.dll
Loading...