problems removing "aBetterInternet"

[Jay]

I have used the Microsoft anti-spyware program and
Webroot's SpySweeper. Both would find "ABetterInternet"
and indicate that the remove was done. However, each time
on the next scan, it would be found again.

Microsoft's program indicated that it was deleting
C:\windows\nail.exe

I tried to delete it from a DOS prompt and found that it
came back within a minute. Does anyone know what is
causing this and how to make it stop ?

The best I could do was mitigate the effect by copying
notepad.exe over nail.exe. The only visibile effect now
is that notepad pops up every time I start my computer.

 

[Guest]

are you using spysweeper 4.0 and how many user account do
you have on your computer? spysweeper will definetly
remove aBetterInternet.

 

[plun]

Hi

Follow this thread:

http://www.daniweb.com/techtalkforums/thread25443.html


CCleaner
www.ccleaner.com

About HijackThis:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

Download:
http://www.merijn.org/files/hijackthis.zip

Forums with HijackThis specialists:
http://www.merijn.org/forums.html


--
plun



Jay used his keyboard to write :

 

[Andre Da Costa [Extended64]]

I quote Andy Manchesta,


The ABI remover will fail on Aurora you will need to use
Nailfix then Ccleaner and Adaware SE to clean up.


Save Nailfix to desktop.


http://www.noidea.us/easyfile/file.php?
download=20050515010747824

or :

http://www.dknoppix.com/cgi-bin/download.cgi?Nailfix


Download Adaware SE and get all updates :

http://www.download.com/3000-2144-10045910.html


Download Ccleaner:

http://download.ccleaner.com/download119bin.asp



Reboot into Safe Mode by hitting the F8 key repeatedly
until a menu shows up (and choose Safe Mode from the
list).

Once in Safe Mode,double-click on nailfix.bat. Your
desktop and icons will disappear and reappear, and a
window should open and close very quickly thats then
finished.

Run Adaware SE on a full system scan and remove anything
found

Run Ccleaner on all 3 settings (windows , applications &
issues ) and remove anything found.

Reboot and all should be fixed ,You may need to flush
your system restore if Aurora has entries in there , when
i tested Aurora last it left DrPmon.dll & Bolger.dll in
my restore area.

To reset the system restore goto start > then right click
my computer > goto properties > then system restore >
check the box ' turn off system restore ' then press
apply and exit, reboot . Go back to system restore and
uncheck the box ' turn off system restore ' then press
apply


Also clear your prefetch folder to remove any
thnall1ac.html. files

goto start then run and type

prefetch

check for any files named thnall1ac and remove if found
you can delete all the contents of this folder if you are
unsure as any genuine programs will use it again when its
needed .
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

 

[ColTom2]

I had a friend that had the same problem as you.
Installed Spy Sweeper 4.0 and it cleaned it out with no
further problems on the first scan.

 

[Alan]

Now make absolutely certain that there are no files
located in c:\windows\prefetch (XP only) that contain the
string abetterinternet.

If so, close any browsers you have currently open. Now
shred them using a FREE file shredder from download.com.
You might have to boot into Safe Mode (F8 before Windows
screen during boot/reboot). Make certain to select the
option that only states Safe Mode with no other words.

Alan