Aurora Adware

  • Thread starter Thread starter eyal
  • Start date Start date
E

eyal

how can I get rid of transponder.AbetterInternet.Auroro
Adware?
The spyware finds it and removes it, but it keeps coming
back (seconds after it had been removed!)
Thanks
 
From Andy:
Download Nailfix to your desktop

Primary:
http://www.noidea.us/easyfile/file.php?
download=20050515010747824

mirror:
http://www.dknoppix.com/cgi-bin/download.cgi?Nailfix


Reboot into safe mode (Reboot and keep tapping F8 then
choose safe mode from the list)

in Safe Mode, double-click on nailfix.bat. Your desktop
and icons will disappear and reappear, and a window
should open and close very quickly.

This will stop and delete nail.exe and svcproc.exe


Then run MS Antispy on a full system scan to remove any
other files.Ewido Security Suite and Adaware SE both
target Aurora so maybe worth trying them if you have more
problems with it.The problem is the random named file in
the system folder which will act as a re-installer each
time you reboot.Plus it changes its name whenever you
reboot.Ewido will remove those entries.Adaware will
remove Bolger and Drpmon.dll so again it could help.

AndyManchesta

Evido:
http://www.ewido.net/en/

Lavasofts Adaware:
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022-10399602.html?tag=list

-- Andre Extended64 | http://www.extended64.com Blog |
http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta FAQ for MS AntiSpy
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

eyal schreef:
 
An easy solution is to go to c:\windows\prefetch and
shred any files whose filename contains abetterineternet.

Alan
 
-----Original Message-----
how can I get rid of transponder.AbetterInternet.Auroro
Adware?
The spyware finds it and removes it, but it keeps coming
back (seconds after it had been removed!)
Thanks
.
you need to first read this on how to download, install,
Click to expand...
scan. and post a hijackthis log file
http://www.tomcoyote.org/hjt/
then where to post it on the forum.....please read forum
rules to better understand
them....http://forums.tomcoyote.org/index.php?showforum=83
 
Looks like your recommended fix didn't do the job. It all
comes back. It was good in safe mode. Although there was
a lingering Trojan.Startup.Nameshifter.BK that couldn't
stay deleted. And was good after regular boot (except for
the above trojan). But after starting IE, IE crashed, and
shortly after that all of the spyware was back again.

Any other ideas?

J
 
I had the same problem and was able to fix the problem by
using recommendation from this site. Go to www.ewido.net
and download free trial. It worked on your very problem
you have described. Took 90 minutes to scan--well worth
the wait.
 
Back
Top