getting popups

[Brian]

keep gettimg popup from Aurora, have run ad-adware sp
personal to clear but comes back when i reboot also my
dailup box appears on boot-up not showing in start-up

 

[Janice]

after a clean scan I am getting Aurora pop ups too. has
anyone tried the unistall tool at mypctuneup.com? Is it
for real...or another spyware trick?!

 

[plun]

Janice explained on 2005-05-07 :

after a clean scan I am getting Aurora pop ups too. has
anyone tried the unistall tool at mypctuneup.com? Is it
for real...or another spyware trick?!

Hi

"Guru" Bill Sanderson wrote this in another message about
mypctuneup.com

"Be careful indeed:

This site is run by the producers of the technology underlying the
infection--i.e. "the vendors" of Aurora.

They might deny this, in that their technology is used by third partys,
perhaps, to actually display the ads in question--but I don't think I'm
being wildly inaccurate.

Using such an uninstaller is problematical. Even if a version of it
has been downloaded, analyzed carefully by a third party, and vetted by
them as adhering to the statements made at the website about its
safety--there's no assurance that the version you download today is the
same on that was analyzed yesterday."


Have you done any fullscans in safe mode with all options checked ?

After this I think it?s time for HijackThis to solve this and
go to a forum specialized in these logs.

http://www.aumha.org/a/quickfix.htm (step 7)

or one of these.

http://www.merijn.org/forums.html


HijackThis can be downloaded from:

http://www.merijn.org/files/hijackthis.zip

About HijackThis:

http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

 

[Engel]

http://webhelper4u.com/tnewswritigs/bolger_aurora.html

 

[Bill Sanderson]

And, Ron Kinner has a recipe that seems to be successful--I've not looked at
it myself so I don't know how complicated it might be, but here it is:
=-------------------------
Just successfully removed two nail.exe infections today
with the procedure at:

http://forum.hijackthis.de/showthread.php?t=3172

The ABIRemover.exe is a miracle worker!

Ron