abetterinternet

[glenguyhart]

Working in the filed and seeing 10 to 15 spyware infected
PC's a week the most difficult varient I've come accross
to try and remove is related to:

abetterinternet aka Aurora with association to nails.exe.
Every time I see Aurora I sink in my chair because
ussually I've already put in over an hour on cleaning a
PC. While I hate doing relads, they seem to be the only
way to get a system clean of this horrible Adware
application.

I use a standard MS. Antispyware, Ad-Aware and Spybot. I
throw in and updated Norton AV or AVG is client's PC has
no Antivirus as both these apps seem to find Adware
varients.
The last couple time I've tried out an app called
ABremover, but it seems to have no effect and there's not
documentation I found on it to know what it's really doing.

Anyone run across this one?

 

[Steven]

The problem is that this trojan runs even in safe mode.
You can delete nail.exe from the windows directory in
safe mode - command prompt. Then reboot into safe mode
and run your scans.

 

[JohnF.]

Only way I have beat this successfully is by going into the windows and
system32 folders and attacking the pest where it lives - renaming the files
and deleting them in safe mode or by killbox. The ABIRemover isn't working
anymore from what I can tell.

 

[Guest]

consider using spysweeper, but you'll have to pay for it
i got infectected with some abetterinternet variant and
spysweeper completely remove it.

 

[Bill Sanderson]

Ewido is another app with a trial which has been successful against some
versions of aurora, as I recall.

--