The following is a detail page of Virtual Grub Street's Adware & Malware Identifier Index:
The information in the Adware & Malware Identifier Index is the result of thousands of web searches. It can not, however, possibly be complete. The subject is vast and constantly changing. Moreover, vendor uninstall tools and other removal tools do not necessarily remove all of an infection from your computer. Vendor uninstall tools, for instance, may silently leave cookies or other tracking software installed. It is suggestible to follow up a removal with one or more adware scans and/or to do an inspection using a HijackThis log. The information on the page is not guaranteed correct and any use you may choose to make of it is entirely at your own risk.
ABetterInternet, ABetterInternet.transponder, Aurora, Nail.exe.- Associated Worms/Trojans: Trojan.Win32.Stervis.b, Win32.Afrootix, Troj/Dropper.Agent.AG, Trojan horse Dropper.Agent.AG, TROJ_AGENT.QW , Trojan.Aurora, Trojan.Bolger, Dloader.LI, Trojan horse Generic.CZ, Trojan horse Generic.EA, Troj/Generic, Hacktool.Rootkit, Trojan.Win32.Madtol.a, TROJ_MADTOL.A, Troj/Nail, Trojan.Nail
- Executable Files: adbltzun.exe; aurareco.exe; aurora.exe; aurora-wise1.exe; bho_prob.exe; biprep.exe; buddy.exe; morphrec.exe; nail.exe; newdevin.exe; polall1b.exe; poller.exe; svcproc.exe; thnall~1.exe (thnall1b.exe; thnall1p.exe; thnall2r.exe; thnall2r.exe); uacupg.exe; and many more.
- Dynamic Link Libraries: aurorahandler.dll; banner.dll; bi.dll; bolger.dll; ceres.dll; drpmon.dll; imgiant.dll; zserv.dll; and many more.
- Directory/Search Page: http://www.abetterinternet.com/
- Uninstall Page URL:
- Related Articles: Important Removal Tool Note. Fighting Malware with Standard Windows Tools (February 25, 2007). You may have more in your bag of tricks than you realize.
- Notes: Aurora.ABetterInternet and Nail.exe are two separate items that are generally bundled together -- so generally that they are widely addressed as the same infection. BI.dll, ceres.dll, host.dll and newdevin.exe have been identified as transponder files.
- Nail.exe can be removed by running the NailFix.exe tool followed by the Ewido Security Suite. This should be followed by running CCleaner or CleanUp! (on prefetch files and recycle bins for all users). All tools should be run with Windows in Safe Mode.
- The Nail.exe file itself can be removed by NailFix.exe or the Ewido Security Suite. Many or all of the active components of Aurora or ABetterInternet can be removed by the Ewido Security Suite. Again, all tools should be run with Windows in Safe Mode.
- Trlokom claims that its 15 day trialware product, SpyWall, can remove Aurora. This presumably includes the file Nail.exe.
Also See:
Labels: Adware/Spyware
Comments are displayed on individual pages only.
Access individual pages by clicking post title.
|
1 Comments:
I remember having the problem of the aurora nail.exe file on my cousins computer. He asked me to have a look as his computer was virtually unsuable running rediculously slow. I did some research into removing this nasty problem and found my own way of doing it.
I found the aurora "nail.exe file" and deleted about three quaters of the code in the file. I then deleted the file. After a reboot i noticed the file didn't come back at all.
Not taking any chances i downloaded ewido, deleted all my cookies, which also got rid of any other files associated with nail.exe
I then did a complete virus scan of my computer with antiviri XP just to make sure.
Rebooted the computer once again and bingo.
To this day 3 months on there is no trace of the aurora nail.exe file. Took me about 3 hours to come up with this solution but it worked.
If you are continually getting spyware/adware and malware and would like some help in combatting these types of issues please read my adware/spyware removal guide. It explains how to set up your computer to minimise these types of threats as well as some great programs to protect your system. I have the same setup i use on three computers and i have virtually NONE of these problems anymore.
Here is the link
www.adwarespywareremoval.blogspot.com
Post a Comment