Aurora/alwaysup???

Discussion in 'Malware Help (A Specialist Will Reply)' started by Douggiefresh32, Jun 10, 2005.

  1. Douggiefresh32

    Douggiefresh32 Private E-2

    For the past few weeks, my computer has been running more slowly than usual, and every few minutes random pop-ups occur, some saying Aurora, some saying other things. Norton Anti-Virus occasionally displays a mention about Trojan.Alwaysup that it can't remove. Also, random applications appear on the desktop saying things like "Play poker" or "online games" etc.

    I've tried all the things required in the read me first, and nothing works.

    I'd be greatly oblidged if anyone can help!

    The computer is an HP 2.08Gz 2600+ AMD Athlon XP processor with 512MB ram, and Windows XP. If you need any more info, let me know.

    Also, I've downloaded Hijack this, and installed it in C:\program files\HJT, but haven't done anything with it yet. Thanks!!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the steps below:

    - download Nail/Bolder/Aurora Remover 0.3.1 Beta and save it to its own folder like c:\ABIremover

    - Now extract the abiremover.exe file from the ZIP file into the folder you created but do not run the EXE yet. We will run it later.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates for all programs.

    - Now while still in safe mode, run the abiremover.exe but make sure you are physically disconnected from the internet (unplug your cable to be sure). Just click install, wait (explorer window will disapear)

    - When abiremover finishes just reboot into normal and continue with the below steps.

    - Note: If ABIremover fails to remove the nail.exe problem, use the below uninstaller:

    Nail Uninstaller






    Download HostsXpert and then follow the below steps.
    • Unzip HostsXpert.zip
    • It will create a folder named HostsXpert in whatever folder you extract it to.
    • Run HostsXpert.exe by double clicking on it.
    • Click the Make Writeable? button. (if you only see a Make Read-Only selection, it is already writeable so skip this button).
    • Click Restore Microsoft's Hosts File and then click OK.
    • Click the X to exit the program
    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.



    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis
     
    Last edited: Aug 14, 2008

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds