View Full Version : Aurora website. Popups


hutch
02-06-2005, 19:42
Recently I have Aurora coming on screen offering different services [unwanted] which is annoying as I then cancel I have blocked popups but this makes no difference I have AOL WITH MCFEE HOW DO I STOP THIS? any advice would be wellcome.:confused:

Scutts
02-06-2005, 20:57
My friend has had the same problem earlier this week. I didn't have time to try and clear it completely but I came across the following using Google:

Original Webpage (http://forums.maddoktor2.com/index.php?showtopic=4239&st=0&#entry23709)

++++++++++++++++++++++++++++++++++++++++++++++++++
Download the trial version of Ewido Security Suite here (http://www.ewido.net/en/download/)

Install it, and update the definitions to the newest files. Do NOT run a scan yet.

Please run Notepad and copy the following text into a new file:



@ECHO OFF
cd %windir%
Nail.exe /FULLREMOVE
sc config SvcProc start= disabled
sc stop SvcProc
sc delete SvcProc
attrib -s -r -h nail.exe
attrib -s -r -h svcproc.exe
del nail.exe
del svcproc.exe
cd %windir%\system32
attrib -s -r -h DrPMon.dll
del DrPMon.dll
exit


Save the file to the desktop as remove.bat and make sure the "Save as type" field says "All files".

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer

2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml


Once in Safe Mode, please double-click on remove.bat. A window should open and close very quickly --- this is normal.

Then please run Ewido, and run a full scan. Post the log from the scan here for me.

Then please run HijackThis, click Scan, and check:

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe

Close all open windows except for HijackThis and click Fix Checked.

Restart your computer in normal mode.




The key to the whole thing of course is to make sure you get rid of this entry

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe

in the hijackthis log..after all else is in the process of being cleaned
++++++++++++++++++++++++++++++++++++++++++++++++++

Let me know if it works. I can't get to my friends PC yet but when I do I'll give it a go and let you know the result if you haven't tried it yet :thumbsup:

vidster
03-06-2005, 02:25
Great info scutts! :thumbsup:

If this doesn't work hutch, get back to us and we'll try to remove this pest another way :wink:

melthebell
03-06-2005, 18:06
Use mozilla firefox instead of Internet popups lover explorer

Zinger549
04-06-2005, 10:50
try a program called hijack this it's really good

hutch
04-06-2005, 10:56
Thanks everyone for the help I have removed the programme from my control panel using mypctune.com/Aurora this appeares to have worked.:clap: