Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Winfixer and ABS Network problem (adaware and avg wont get rid of it)
me again ^ | 8/7/2005 | Me

Posted on 08/07/2005 6:48:23 PM PDT by MetalHeadConservative35

my computer has spyware from winfixer 2005 and the aurora ABS network and neither AVG virus nor Adaware can fix it what should i do?


TOPICS:
KEYWORDS: computerproblems; techhelp
Navigation: use the links below to view more comments.
first 1-2021 next last
im thinking to reload windows but i really dont wanna do that
1 posted on 08/07/2005 6:48:24 PM PDT by MetalHeadConservative35
[ Post Reply | Private Reply | View Replies]

To: MetalHeadConservative35

SpyBot..finds stuff Ad-aware misses...

http://www.safer-networking.org/en/download/


2 posted on 08/07/2005 6:50:19 PM PDT by etcetera
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

I had that problem too. I had to get on the phone to Symantic to get rid of it, and even after that, I found another part or two of it. Good luck. (I really hate those people!)


3 posted on 08/07/2005 6:51:06 PM PDT by MizSterious (Now, if only we could convince them all to put on their bomb-vests and meet in Mecca...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: MizSterious

Go to Giant software, This is a new company Microsoft purchased. You can ge a free download and it cleans up alot of crap.


4 posted on 08/07/2005 6:53:01 PM PDT by 54skylark
[ Post Reply | Private Reply | To 3 | View Replies]

To: MizSterious
norton spiders itself into your computer making it impossible to remove

i think most people know that AVG is better than norton by far

anyways im downloading spybot..hopefully it fixes this thing

5 posted on 08/07/2005 6:53:18 PM PDT by MetalHeadConservative35 (Happiness Is A Belt Fed Weapon)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Ramius

Is this the crap you were cussin' at the other day?


6 posted on 08/07/2005 6:55:23 PM PDT by Overtaxed
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

http://www.mcse.ms/message1765635.html

Also, a lot of forums suggest "Hijack This"


7 posted on 08/07/2005 7:04:53 PM PDT by Abcdefg
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

I tried Spybot. Nada.


8 posted on 08/07/2005 7:15:51 PM PDT by MizSterious (Now, if only we could convince them all to put on their bomb-vests and meet in Mecca...)
[ Post Reply | Private Reply | To 5 | View Replies]

To: 54skylark

Mine seems to be clean enough now--but it wouldn't hurt to have something on hand if it happens again. Do you have the url?


9 posted on 08/07/2005 7:17:02 PM PDT by MizSterious (Now, if only we could convince them all to put on their bomb-vests and meet in Mecca...)
[ Post Reply | Private Reply | To 4 | View Replies]

To: MizSterious
i think spybot is gonna work...it found it when adaware didnt,

freaking leet-hackers....god they make me mad

10 posted on 08/07/2005 7:18:36 PM PDT by MetalHeadConservative35 (Happiness Is A Belt Fed Weapon)
[ Post Reply | Private Reply | To 8 | View Replies]

To: MizSterious

http://www.giantcompany.com/default.htm


11 posted on 08/07/2005 7:18:59 PM PDT by Keith in Iowa (Liberals...they're so quixotic - not to mention the #1 source of #2.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: Keith in Iowa

Bookmarked! Thank you!


12 posted on 08/07/2005 7:22:28 PM PDT by MizSterious (Now, if only we could convince them all to put on their bomb-vests and meet in Mecca...)
[ Post Reply | Private Reply | To 11 | View Replies]

To: Abcdefg

Yes, I used Hijackthis, too, at the behest of the man on the other end of the phone. That was how we found out where the malware was. However, as the "winfixer" was uninstalled, it installed yet another piece of it, which Nortons did find and removed. Something called "blackbox" something or other.


13 posted on 08/07/2005 7:25:02 PM PDT by MizSterious (Now, if only we could convince them all to put on their bomb-vests and meet in Mecca...)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Keith in Iowa
Thanks for the link.  This could come in very handy.
14 posted on 08/07/2005 7:36:43 PM PDT by softwarecreator (Facts are to liberals as holy water is to vampires)
[ Post Reply | Private Reply | To 11 | View Replies]

To: All

thanks everyone,


15 posted on 08/07/2005 8:02:11 PM PDT by MetalHeadConservative35 (Happiness Is A Belt Fed Weapon)
[ Post Reply | Private Reply | To 14 | View Replies]

To: MetalHeadConservative35
Join this forum:

-SWI Forums-

16 posted on 08/08/2005 1:19:27 AM PDT by backhoe
[ Post Reply | Private Reply | To 1 | View Replies]

To: MetalHeadConservative35

You don't need to reload windows. Just a minute, and I'll paste in a post I made about this the other day...


17 posted on 08/08/2005 9:48:23 AM PDT by Ramius (Buy blades for war fighters: http://freeper.the-hobbit-hole.net)
[ Post Reply | Private Reply | To 15 | View Replies]

To: MetalHeadConservative35

Spybot doesn't fix it, or Adaware or MS Antispyware, or anything else that I know of. They all find parts of it, but there's a respawning process that doesn't go away, and it'll just keep coming back.


18 posted on 08/08/2005 9:50:32 AM PDT by Ramius (Buy blades for war fighters: http://freeper.the-hobbit-hole.net)
[ Post Reply | Private Reply | To 10 | View Replies]

To: MetalHeadConservative35

At the root of this problem is a little executable they've stuck in your windows directory called "nail.exe" along with a couple of other little bits of nastiness. You can't just locate it and delete it. It respawns under different names, and redownloads the malware.

There is an uninstaller for nail.exe (the aurora hijacker) but... and it's a big but... it is offered by the same outfit that wrote the malmare in the first place: Direct Revenue, LLC.

I was unsure of it, and tried lots of other fixes first, but out of desperation I did finally decide to give it a try, and it did appear to work, and it didn't appear to do anything else. But nobody trusts them, and rightfully so. If you google on "aurora" or "nail.exe" you see dozens of help sites about this thing. Much of the language is [ahem] colorful. I tried lots of other methods that I found posted on lots of various tech help sites... with no joy.

The uninstaller is here:
http://www.mypctuneup.com/evaluate.php?b=aurora

I felt a little uncomfortable recommending it, but I don't know of anything else that works. An uninstaller that ~requires~ you to be connected to the internet to run, and politely asks you to disable your firewall and antivirus-- this just *screams* suspicions.

I ran it with my firewall up and with my antivirus running, and it worked just fine and nothing appears to have been left behind.

It's been several days now, and I'm now pretty confident that the uninstaller did work as promised, and I haven't seen any evidence that anything untoward was done in the background.

Regards,


19 posted on 08/08/2005 9:59:28 AM PDT by Ramius (Buy blades for war fighters: http://freeper.the-hobbit-hole.net)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Ramius

Just wanted to let everyone know. I had a user with this same problem. ( winfixer 2005 ). I searched the registry for the following: atea, winfixer & uwfx5. Deleted all instances of these key's, as well as deleted the cookie & the shortcut on the desktop & it's no longer coming up. Prior to this I also installed a trial version of McAfee Spyware Blocker which didn't fix the issue on it's own, but found the files.


20 posted on 08/12/2005 7:45:25 AM PDT by denda
[ Post Reply | Private Reply | To 19 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson