Go Back   Cyber Tech Help Support Forums > Operating Systems > Older Windows Versions > Windows Vista
Reload this Page Fake Screen Saver?
Register FAQ Calendar Today's Active Topics Search

Notices

Windows Vista Problem solving for the Windows Vista Operating System. Please remember to state which edition of Vista you are using - Home Basic, Home Premium, Business, Ultimate etc. and whether you are using the 32-bit or 64-bit version if you know.

Reply
Page 4 of 5 « First 23 4 5
 
Topic Tools
  #46  
Old August 22nd, 2008, 06:11 AM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
Okay after the malware is gone..n mediaforge did not respond to me..what should I do? The screen saver is still there..
Reply With Quote
  #47  
Old August 22nd, 2008, 06:53 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Give it a couple of days. You only sent the email yesterday.
Reply With Quote
  #48  
Old August 22nd, 2008, 12:39 PM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
BTW,since now I got the mirage screen saver instead of mediaforge, is it possible to remove it like the temporaryguest did? by removing any mirage registry manually?
Reply With Quote
  #49  
Old August 22nd, 2008, 11:16 PM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
But you said that you already tried that and it didnt work. Sure try it again if you want to. Post the entries here first. you should also search for xmirage.
Reply With Quote
  #50  
Old August 23rd, 2008, 03:45 AM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
Yeah I did try to remove it manually but previously it said "Mediaforge Screen Saver" instead of "Mirage Screen Saver". Since now it says Mirage I just wanna try it again. Sorry to make you confused,AnnMarie.

Umm..BTW,by manually I mean I search it one by one and delete any registry saying xMirage. Will this damage other programs?
Reply With Quote
  #51  
Old August 23rd, 2008, 05:09 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Use the utility I linked you too and post what you find here please. I wouldnt have a clue without seeing what you intend to delete.
Reply With Quote
  #52  
Old August 23rd, 2008, 04:22 PM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
This is the mirage search result.

Quote:
Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 24/08/2008 1:19:36 AM for strings:
; 'mirage'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}]
@="XMirage Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\InprocServer32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\ProgID]
@="XMIRAGE.XMirageCtrl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\ToolboxBitmap32]
@="C:\\Windows\\system32\\xmirage.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{23F0666 F-63A6-43A2-8F62-4D896624DB60}]
@="Xmirageu Property Page"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{23F0666 F-63A6-43A2-8F62-4D896624DB60}\InprocServer32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B666CF5 A-B50A-49E4-8354-37AC595C5B7E}]
@="XMirage Property Page"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B666CF5 A-B50A-49E4-8354-37AC595C5B7E}\InprocServer32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}]
@="Xmirageu Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\InprocServer32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\ProgID]
@="XMIRAGEU.XmirageuCtrl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\ToolboxBitmap32]
@="C:\\Windows\\system32\\xmirageu.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{718 9773D-1302-4C96-9CDA-8CA6F6DD0E24}]
@="_DXMirage"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8B7 0B528-1756-4184-99FC-59326072681E}]
@="_DXmirageu"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A9E 9446E-1CD2-44E1-891C-AB3F75F48C20}]
@="_DXMirageEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E B2CA6-BAB9-4B7B-98C6-DA028834C60F}]
@="_DXmirageuEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MediaForgeLigh tProject\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MirageLightPro ject]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MirageLightPro ject]
@="MirageLightProject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MirageLightPro ject\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MirageLightPro ject\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-337"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{04F4C 5F2-5C70-4B05-9A25-E462FEC6328C}\1.0]
@="xmirageu ActiveX Control module"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{04F4C 5F2-5C70-4B05-9A25-E462FEC6328C}\1.0\0\win32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6043F 8F5-4FBE-47DA-A789-146B02AE6FA0}\1.0]
@="XMirage ActiveX Control module"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6043F 8F5-4FBE-47DA-A789-146B02AE6FA0}\1.0\0\win32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WraPlayerProje ct\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-338"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WraPlayerProje ct\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMediaForgeCon solidatedProject\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1]
@="XMirage Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject]
@="XMirageConsolidatedProject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-336"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl]
@="Xmirageu Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@xmlaut hor.com/downloads]
"Path"="C:\\Windows\\system32\\npmirage.dll"
"Description"="Visual Mirage Runtime Player Plugin"
"ProductName"="Mirage Runtime Player Plugin"

[HKEY_LOCAL_MACHINE\SOFTWARE\XMLAuthor Inc.\Mirage]

[HKEY_LOCAL_MACHINE\SOFTWARE\XMLAuthor Inc.\Mirage\Pace]

[HKEY_CURRENT_USER\Software\DownloadManager\664]
"LocalFileName"="C:\\Users\\S.A.P.T.O\\AppData\\Ro aming\\IDM\\DwnlData\\S.A.P.T.O\\Mirage_664\\Mirag e.reg"
"LocalPath"="C:\\Users\\S.A.P.T.O\\AppData\\Roamin g\\IDM\\DwnlData\\S.A.P.T.O\\Mirage_664\\"
"LogFileName"="C:\\Users\\S.A.P.T.O\\AppData\\Roam ing\\IDM\\DwnlData\\S.A.P.T.O\\Mirage_664\\Mirage_ 664.log"
"FileName"="Mirage.reg"
"LocalNameForSave"="C:\\Users\\S.A.P.T.O\\Desktop\ \Mirage.reg"

[HKEY_CURRENT_USER\Software\XMLAuthor Inc.\Mirage]

[HKEY_CURRENT_USER\Software\XMLAuthor Inc.\Mirage\Logging]

[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Windows\\screengenie.scr"="Mirage Runtime Player"

[HKEY_CURRENT_USER\Software\Classes\VirtualStore\MA CHINE\SOFTWARE\XMLAuthor Inc.\Mirage]

[HKEY_CURRENT_USER\Software\Classes\VirtualStore\MA CHINE\SOFTWARE\XMLAuthor Inc.\Mirage\Pace]

; End Of The Log...
Reply With Quote
  #53  
Old August 23rd, 2008, 04:24 PM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
This is the Xmirage search result.

Quote:
Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 24/08/2008 1:22:14 AM for strings:
; 'xmirage'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}]
@="XMirage Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\InprocServer32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\ProgID]
@="XMIRAGE.XMirageCtrl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21F1676 7-8DA7-4113-BEB0-F161B313407F}\ToolboxBitmap32]
@="C:\\Windows\\system32\\xmirage.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{23F0666 F-63A6-43A2-8F62-4D896624DB60}]
@="Xmirageu Property Page"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{23F0666 F-63A6-43A2-8F62-4D896624DB60}\InprocServer32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B666CF5 A-B50A-49E4-8354-37AC595C5B7E}]
@="XMirage Property Page"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B666CF5 A-B50A-49E4-8354-37AC595C5B7E}\InprocServer32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}]
@="Xmirageu Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\InprocServer32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\ProgID]
@="XMIRAGEU.XmirageuCtrl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C342940 A-54AB-4950-8602-CCC859AB058B}\ToolboxBitmap32]
@="C:\\Windows\\system32\\xmirageu.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{718 9773D-1302-4C96-9CDA-8CA6F6DD0E24}]
@="_DXMirage"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8B7 0B528-1756-4184-99FC-59326072681E}]
@="_DXmirageu"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A9E 9446E-1CD2-44E1-891C-AB3F75F48C20}]
@="_DXMirageEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E2E B2CA6-BAB9-4B7B-98C6-DA028834C60F}]
@="_DXmirageuEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MediaForgeLigh tProject\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MirageLightPro ject\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-337"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{04F4C 5F2-5C70-4B05-9A25-E462FEC6328C}\1.0]
@="xmirageu ActiveX Control module"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{04F4C 5F2-5C70-4B05-9A25-E462FEC6328C}\1.0\0\win32]
@="C:\\Windows\\system32\\xmirageu.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6043F 8F5-4FBE-47DA-A789-146B02AE6FA0}\1.0]
@="XMirage ActiveX Control module"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6043F 8F5-4FBE-47DA-A789-146B02AE6FA0}\1.0\0\win32]
@="C:\\Windows\\system32\\xmirage.ocx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WraPlayerProje ct\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-338"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WraPlayerProje ct\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMediaForgeCon solidatedProject\shell\open\command]
@="C:\\Windows\\system32\\xmirage.exe %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1]
@="XMirage Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGE.XMirag eCtrl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject]
@="XMirageConsolidatedProject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject\DefaultIcon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMirageConsoli datedProject\DefaultIcon]
@="C:\\Windows\\system32\\xmirage.exe,-336"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl]
@="Xmirageu Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XMIRAGEU.Xmira geuCtrl\CLSID]

; End Of The Log...

Is there by any chance possible for you to tell me which reg I can delete,AnnMarie?
Last edited by 13th; August 23rd, 2008 at 04:41 PM.
Reply With Quote
  #54  
Old August 24th, 2008, 01:21 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Go here and download Mirage1.reg to your Desktop. Rightclick on it and choose "Merge".

When you have done this, make sure that you can view view hidden files and folders and delete all of the below files if they are present.

c:\WINDOWS\screengenie.scr
c:\WINDOWS\screengenie.xml
c:\WINDOWS\system32\clsncx22.dll
c:\WINDOWS\system32\clsnol22.dll
c:\WINDOWS\system32\clsnpb22.dll
c:\WINDOWS\system32\clsnrn22.dll
c:\WINDOWS\system32\Decln.dll
c:\WINDOWS\system32\Declw.dll
c:\WINDOWS\system32\mfimage.dll
c:\WINDOWS\system32\npmirage.dll
c:\WINDOWS\system32\xmforgert.exe
c:\WINDOWS\system32\xmirage.ocx
c:\WINDOWS\system32\xmirageu.ocx

Reboot now. Has it gone?
Reply With Quote
  #55  
Old August 24th, 2008, 02:50 PM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
I cannot download the mirage1.reg file. Did I do somethin wrong?
Reply With Quote
  #56  
Old August 24th, 2008, 10:42 PM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Try again please 13th.
Reply With Quote
  #57  
Old August 25th, 2008, 03:13 AM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
It's gone!!!!
Woohooo!!!!!!
I just delete the *.scr file and its gone!!!
Hahahaha..
Thank You soooo much,AnnMarie.
Problem solved..
Reply With Quote
  #58  
Old August 25th, 2008, 05:24 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
  
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
That's good news 13th and you are welcome.
Reply With Quote
  #59  
Old August 30th, 2008, 11:57 PM
elephant007's Avatar
elephant007 elephant007 is offline
Member
  
Join Date: Aug 2008
O/S: Windows Vista 32-bit
Location: Abilene, TX
Posts: 63
you have tons of malware/spyware/crap installed on your computer, there's no telling which one installed that ScreenSaver.
My thought is if it's not making your system act weird, which I'm surprised it's not, I'd just leave it alone.
Wow, I can't get over how many things you have installed, truly mind boggling to me personally... I know, to each their own.
Reply With Quote
  #60  
Old August 31st, 2008, 03:15 AM
13th 13th is offline
New Member
  
Join Date: Aug 2008
Posts: 27
My computer is surprisingly working out just find..haha..
But is it true that I got plenty of crap in my computer?
I just install some programs that I thought gonna be useful..n some of the apps r just installed automatically with the apps..
Reply With Quote
Reply
Page 4 of 5 « First 23 4 5

Bookmarks

« Previous Topic | Next Topic »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Topics
Topic Topic Starter Forum Replies Last Post
Screen saver dakotarayne The Anything Else Board 0 January 1st, 2008 08:29 AM
Screen Saver Rookie2788 Windows XP 2 August 13th, 2005 02:06 AM
screen saver doowooper Windows ME 7 March 13th, 2003 10:56 PM
Screen Saver Simple plus Naive Windows 98 9 July 12th, 2002 12:03 AM


All times are GMT +1. The time now is 06:31 PM.