What is Aurora and how to remove this spyware
Aurora is an adware parasite that displays undesirable commercial advertisements using Internet Explorer web browser. It also tracks user activity in the Internet and sends gathered data to certain web servers. Aurora can download and install its additional malicious components. The parasite can get into the system along with some ad-supported software. It also can be manually installed. Once executed, Aurora creates several files (some of them have random names) and modifies the registry, so that the threat runs on every Windows startup.
How to remove Aurora - Aurora Removal
Instructions
|
Delete these registry entries SYSTEM\ControlSet005\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet004\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet003\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet002\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet001\Control\Print\Monitors\ZepMon
SYSTEM\CurrentControlSet\Control\Print\Monitors\ZepMon
TypeLib\
TypeLib\
trfdsk.ohb
trfdsk.momo
trfdsk.iiittt
trfdsk.amo
SYSTEM\CurrentControlSet\Services\SvcProc
SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet005\Services\SvcProc
SYSTEM\ControlSet005\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet004\Services\SvcProc
SYSTEM\ControlSet004\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet003\Services\SvcProc
SYSTEM\ControlSet003\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet002\Services\SvcProc
SYSTEM\ControlSet002\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet001\Services\SvcProc
SYSTEM\ControlSet001\Enum\Root\LEGACY_SvcProc
Software\microsoft\windows\currentversion\explorer\browser helper objects\
Software\Bolger
Software\aurora
Software\_rtneg3
Interface\
Interface\
Interface\
Interface\
Interface\
Interface\
Interface\
CurrentControlSet\Control\Print\Monitors\ZepMon
ControlSet002\Control\Print\Monitors\ZepMon
ControlSet001\Control\Print\Monitors\ZepMon
Software\Classes\CLSID\
Software\Classes\CLSID\
Software\Classes\CLSID\
Software\Classes\CLSID\
Software\Classes\CLSID\
BolgerDll.BolgerDllObj
|
|
Remove the following files aurora.exe, DrPMon.dll, Nail.exe, Poller.exe, svcproc.exe, thnall1a.html, thnall1ac.html, uacupg.exe in download.abetterinternet.com/download/UAC/
aurareco.exe in Temp\
aurora.exe, Bolger.dll, DrPMon.dll, nail.exe, Poller.exe, svcproc.exe, thnall1a.html, thnall1ac.html, uacupg.exe in Windows\
aurora.exe, bobcfisjwuavb.exe, DrPMon.dll, mtrkwwjf.exe, Poller.exe, thnall1a.html, thnall1ac.html, uacupg.exe, zrzhqut.exe in Windows\system\
| |