Aurora ABI Network, can someone help please?

  • Thread starter Thread starter lx_maria
  • Start date Start date
Here's a fix for Aurora :


First you need Adaware SE :

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-
8022_4-10045910.html

Then close Ad-aware SE and download the new VX2 Cleaner
(Not the one of thier site as it will not detect Aurora)

http://updates.ls-servers.com/vx2cleaner.zip

Save the file where you can find it easily then Extract
the files and copy them (Left click and cover the files
and then right click and copy) then open Lavasoft's Ad-
Aware "Plugins" folder and paste them into there(Right
click and paste).

(C:\Program Files\Lavasoft\Ad-Aware SE\Plugins)

Run Ad-Aware and click the Add-ons button in the main
window.Select VX2 Cleaner from the list.

Click the "Run Tool" button in the lower right corner of
the window.Click "OK" when asked if you want to execute
this tool.It will say VX2 variant found then press
clean.Next it will say to reboot and run a smart scan
with Adaware.Follow this but run a full scan to check for
any other problems.

Then Delete these if found after the scan finishes:

C:\WINDOWS\ffsnvqmgpiy.exe
C:\WINDOWS\rramcx.exe

Then you can clear the Temp Internet files and the
contents of the prefetch folder to remove the final
traces if you wish:

Goto start menu and run and type %temp% delete the
contents of this folder or at least the files that are
not in use then start and run and type prefetch and
delete the contents of this folder and its done !

Let us know if you have any problems

Regards Andy
 
Hi Andy, I followed all the steps, and for the moment no
Aurora pop-ups!

Thanks a lot for your help!!!

Maria
 
Hi Andy

Have you tried MSAS removal with 5749 ?

Maybe time again to meet our
Nail fiend ;)

But one test PC is enough !
 
i still found
C:\WINDOWS\grmozoaqmfm.exe after the scan... and manually
deleted it.

thanks for your help

maria
 
Hi Again lx maria

Glad it went well ;)

With the entry you found this now appears to be a random
name, Any time I test Aurora its always called
ffsnvqmgpiy.exe but I've noticed alot of people said this
cannot be found. Thankyou for letting me know its called
grmozoaqmfm.exe on yours as this confirms its different
for each user. This is the pop up window for Aurora but
isnt active after the clean up so can be removed easily.
I will change the fix to include the random name next
time.

It can be found without problems as its a gray Globe icon
with a thin orange strip going around it and then when
you move the mouse over this it shows: Description-Aurora
Company-DirectRevenue so at least they make one part of
this easy to spot ;)

That should now be fixed for you Maria, The Lavasoft fix
works great for this but if you have any problems just
let us know

Plun,

Ive not tried the latest definitions on Aurora but can do
as its on my test machine as well as all the other junk
it bundles with on some sites when it does the silent
installs. I will test this soon and repost ;)

Regards Andy
 
Hey Plun

MSAS is just looping on the updates again, Its not done
that for a while so I cannot test it in detail but will
try uninstalling MSAS and try it again then give Spybot a
go and see what they have to offer
 
AndyManchesta brought next idea :
Hey Plun

MSAS is just looping on the updates again, Its not done
that for a while so I cannot test it in detail but will
try uninstalling MSAS and try it again then give Spybot a
go and see what they have to offer

Hi Andy

Also had this looping within 2 other PCs but after 2 or 3
updates its was OK.

Perhaps do it manually ?
 
Back
Top