not removing definitively

[benoit]

Hello,
-i run antispyware , found dnscatcher adware,
transponder.abetterinternet.aurora adware and egroup
dialer dialer
-i confirm the remove
-(i specify i am not on internet)
-i run twice the antispyware and the program found the
same spyware again ???
-is it a bug?
-the program remove the spyware but not the program that
create the spyware ?

 

[Tom Emmelot]

Hello Benoit,

I quote Andy Manchesta:

Hi Gary just incase its needed by anyone heres a fix for
aurora

(Copy it to notepad so you can still view it in safe
mode )

----------------------------------------------------------
Download Nailfix to your desktop (This has now been
included as a official mirror as the main sites were
hacked into)

Nailfix

http://xsorbit26.com/users5/andymanchesta/index.php?
action=dlattach;topic=3719.0;id=303

or


http://andymanchesta.com/Downloads/Nailfix.zip


----------------------------------------------------------
Download The ABI remover (Better Internet Remover)

http://andymanchesta.com/Downloads/ABIremover.zip


Download the Remover to your desktop
----------------------------------------------------------

Download Ewido Security Suite

http://download.ewido.net/ewido-setup.exe

install and get all updates while in normal mode & run in
safe mode

----------------------------------------------------------
Download AD-Aware SE

http://www.download.com/3000-2144-10045910.html

install and get all updates while in normal mode & run in
safe mode

----------------------------------------------------------
Download Ccleaner

http://download.ccleaner.com/download121bino.asp

----------------------------------------------------------

You may need to empty your system restore points,Drpmon &
Bolger.dll is sometimes left in the restore area.To turn
off system restore goto start then right click my
computer then goto properties then system restore.
Check the box 'Turn off system restore' then press apply
and exit


Reboot into Safe Mode by hitting the F8 key repeatedly
until a menu shows up (and choose Safe Mode from the list)


start the ABIRemover.exe, press install, wait (explorer
window will disapear)


in Safe Mode, double-click on nailfix.bat. Your desktop
and icons will disappear and reappear, and a window
should open and close very quickly.


Next run a full scan with Ewido & Ad-aware SE (Ewido will
find the random named files in the system folder and
windows/last good folder if they exist.Ad-aware will
detect and remove DrPmon and Bolger.dll )


Goto start then run and type

prefetch

delete the contents of this folder


Run Ccleaner and remove anything found,also use
the 'issues' button and fix any problems that are
detected.

Reboot & Re-Enable System Restore (Goto start again,then
right click my computer,then choose properties & goto
system restore) Un-check the box 'turn off system
restore' and press apply


Your done !


Let me know if you have any problems


Regards

Andy

Regards >*< TOM >*<

benoit schreef:

 

[benoit]

thanks a lot Tom

-----Original Message-----
Hello Benoit,

I quote Andy Manchesta:

Hi Gary just incase its needed by anyone heres a fix for
aurora

(Copy it to notepad so you can still view it in safe
mode )

--------------------------------------------------------- -
Download Nailfix to your desktop (This has now been
included as a official mirror as the main sites were
hacked into)

Nailfix

http://xsorbit26.com/users5/andymanchesta/index.php?
action=dlattach;topic=3719.0;id=303

or


http://andymanchesta.com/Downloads/Nailfix.zip


--------------------------------------------------------- -
Download The ABI remover (Better Internet Remover)

http://andymanchesta.com/Downloads/ABIremover.zip


Download the Remover to your desktop
--------------------------------------------------------- -

Download Ewido Security Suite

http://download.ewido.net/ewido-setup.exe

install and get all updates while in normal mode & run in
safe mode

--------------------------------------------------------- -
Download AD-Aware SE

http://www.download.com/3000-2144-10045910.html

install and get all updates while in normal mode & run in
safe mode

--------------------------------------------------------- -
Download Ccleaner

http://download.ccleaner.com/download121bino.asp

--------------------------------------------------------- -

You may need to empty your system restore points,Drpmon &
Bolger.dll is sometimes left in the restore area.To turn
off system restore goto start then right click my
computer then goto properties then system restore.
Check the box 'Turn off system restore' then press apply
and exit


Reboot into Safe Mode by hitting the F8 key repeatedly
until a menu shows up (and choose Safe Mode from the list)


start the ABIRemover.exe, press install, wait (explorer
window will disapear)


in Safe Mode, double-click on nailfix.bat. Your desktop
and icons will disappear and reappear, and a window
should open and close very quickly.


Next run a full scan with Ewido & Ad-aware SE (Ewido will
find the random named files in the system folder and
windows/last good folder if they exist.Ad-aware will
detect and remove DrPmon and Bolger.dll )


Goto start then run and type

prefetch

delete the contents of this folder


Run Ccleaner and remove anything found,also use
the 'issues' button and fix any problems that are
detected.

Reboot & Re-Enable System Restore (Goto start again,then
right click my computer,then choose properties & goto
system restore) Un-check the box 'turn off system
restore' and press apply


Your done !


Let me know if you have any problems


Regards

Andy

Regards >*< TOM >*<

benoit schreef:
.

 

[Ron Chamberlin]

Hi Benoit,

Should that fail, the 615 version of MWAS, particularly when run from Safe
Mode (F8 at startup) does whack ABI now.

Ron Chamberlin
MS-MVP

 

[Guest]

Thanks Ron

i try that before the way from Tom

benoit

 

[benoit]

Hello Ron,

no it does'nt work when i run in safe mode with ver.615

MWAS detect well, set in quarantine, i remove from
quarantine en when i restart de computer and MWAS, dns
catcher, abetterinternet and egroup dialer are always
detect.

are you sur that MWAS work ???!!!

i try the other solution but later i have no more time now

thanks to you
benoit