General discussion

Locked

adware/spyware/malware

By d4dar ·
I visited a website that installed this annoying adware on my system. The official name of the adware is called 'A BETTER INTERNET'. i have webroot spysweeper - it finds it, but it doesnt stay gone. I also tried Xoftware - it found even less than Webroot. I will now detail everyting I have done. WARNING: THIS IS A LONG LIST...

SYSINFO: WinXP (pro) SP2

ADWARE INFO:

It starts 'Explorer' with a command line telling Windows to run a prog called 'Nail.exe'
(i used 'regmon' to find this out)

It shows up in Add/Remove Programs as 'A Better Internet', but if you try uninstalling it from there - it just pops up saying if you want to remove it then got to website blah-blah. I decided not to trust them since they installed this without my permission in the first place.

Here are the steps taken to remove manually
1) Ended task on the following processes in taskmanager: adbitzun.exe, aurora.exe, aurora-wise1.exe, auroraco.exe, nail.exe, svcproc.exe & deleted the files in the Windows directory

2) Deleted following reg keys:
HKU\S-1-5-21-2000478354-1957994488-725345543-500\software\aurora\ & aurorahandler
HKLM\system\currentcontrolset\control\print\monitors\zepmon
HKEY_CLASSES_ROOT\aurorahandlerdll.aurorahandlerdllobj
HKEY_CLASSES_ROOT\clsid\{4aa870ac-8427-42a4-b92e-ecd956197489}
HKEY_CLASSES_ROOT\interface\{544b6a3f-4024-4403-9661-69b8410be505}\iaurorahandlerdllobj
HKEY_CLASSES_ROOT\typelib\{6d992**1-b563-47fc-ab29-437f42d1c729}\1.1
HKEY_CURRENT_USER\software\aurora
HKEY_CURRENT_USER\software\aurorahandler

3) in command prompt, ran regsvr32 & tried to unregister 'aurorahandler.dll' but got an error with failure address '0x8002801c'

Please help me get this stinky little program off my system.

Thank you,
~Darla

This conversation is currently closed to new comments.

23 total posts (Page 3 of 3)   Prev   01 | 02 | 03
| Thread display: Collapse - | Expand +

All Comments

Back to Windows Forum
23 total posts (Page 3 of 3)   Prev   01 | 02 | 03

Related Discussions

Related Forums