Computing.Net > Forums > Windows XP > Aurora pop-ups??

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Aurora pop-ups??

Reply to Message Icon

Name: MCshadyPL
Date: April 17, 2005 at 11:09:18 Pacific
OS: XP
CPU/Ram: 1.5
Comment:

When surfing the net, I constantly receive random pop-up advertisements, which say "Aurora" at the top on the bar. This is clearly some type of spyware/virus, and I was wondering whether anyone has any clue how to get rid of this. I've tried Ad-aware, Spybot, HijackThis, CWShredder, Norton Antivirus 2004, all with no success...



Sponsored Link
Ads by Google

Response Number 1
Name: MCshadyPL
Date: April 17, 2005 at 11:13:02 Pacific
Reply:

Sorry, I didn't realize that there was a "security" section on this site. I will move the topic there.


0

Response Number 2
Name: foreverloved
Date: April 18, 2005 at 16:31:43 Pacific
Reply:

I am also having this same problem! I have tried running, spy sweeper, Microsoft anti spyware, Ad-Aware, and AVG antivirus, nothing works. I don't know where they come from or why they aren't detected. But they are driving my crazy!


0

Response Number 3
Name: PCMom
Date: April 19, 2005 at 19:52:04 Pacific
Reply:

Go to the following link and download the "uninstall" program to get rid of the Aurora adware. It is not spyware and was received by you when you downloaded free software from somewhere. I had the same problem -- none of my anti-virus programs worked against it. It had to be uninstalled. When I ran the uninstall -- the aurora's disappeared!! :)

Go to: mypctuneup.com/aurora


0

Response Number 4
Name: c2r2
Date: April 24, 2005 at 01:18:26 Pacific
Reply:

I went to mypctuneup.com/aurora and did what I was told. But I couldn'y go through with it. I got this terrible sense of foreboding that in my despair of failing to fight the aurora menace, I was being suckered into getting something just as bad or even worse into my computer. Why would I trust "mypctuneup.com"? Who can tell me reliably that this isnt a front for another scumbag group of people haters.


huh


0

Response Number 5
Name: BrettPR
Date: April 24, 2005 at 02:35:17 Pacific
Reply:

It's OK. It seems a bit weird, I can only hope that they are only collecting stats by needing to have your PC connected to the web when you run the tool, and it doesn't give much feedback as it's running either. But the aurora popups have stopped and the oddly named .exe that was running and would restart under a different name when killed has gone as well.

So, it seems OK.



0

Related Posts

See More



Response Number 6
Name: c2r2
Date: April 24, 2005 at 20:34:21 Pacific
Reply:

You are braver than I am. Let's suppose that the folks at mypctuneup.com are part of the aurora dissemination plot, or worse, have some insidious, evil malware of their own that they want us suckers to have in our systems. Let's suppose that. So I start to wonder, who put the post on here to use it. And if that was an attempt to sucker us in, why would it not be expected that another post appears that says, "go ahead suckers, I used it, it's ok". It seems that this aurora/nail menace has only emerged this month (April 2005) because none of the money making heavyweight sleeping giants, Norton, McAfee, MS, and so on seem to know anything about it.

huh


0

Response Number 7
Name: dumb85
Date: April 26, 2005 at 06:52:15 Pacific
Reply:

it's much easier than all that, all you need to do is click on the question mark in the top right corner of the pop up n it will explain how to remove the pop up


0

Response Number 8
Name: Machi712
Date: April 28, 2005 at 19:01:25 Pacific
Reply:

I also have this problem, though I do not recall downloading any "free" software recently. I did try to uninstall it and followed all of directions it gave. Nothing changed. That was a few days ago so I'm about to try it again just for the h*ll of it.


0

Response Number 9
Name: Machi712
Date: April 28, 2005 at 20:29:42 Pacific
Reply:

I tried it again. Still nothing.... If any of you have better luck I'd like to know what I did wrong.


0

Response Number 10
Name: jen42ks
Date: May 1, 2005 at 13:06:41 Pacific
Reply:

I'm having same problem here. Aurora popups just pop up even if i'm playing a game on my computer. This is a strange one.


0

Response Number 11
Name: knot4ewe
Date: May 2, 2005 at 22:12:31 Pacific
Reply:

I used the tool and it removed the Aurora crapware with no problem. This Aurora was one of the hardest spyware/adware I've yet to come across to remove.


0

Response Number 12
Name: No1Bobo
Date: May 3, 2005 at 17:09:26 Pacific
Reply:

I used the tool and it seems to have worked thus far. I ran Spybot s&d immediately after using it (after the reboot), and I had 'No Immediate Threats'. I will post if I get any more.
By The Way...If you were surfing on any of the following websites, you likely got the malware/ spyware from at least one of them:
iconcave.com
animeim.com
arcadetown.com
coolbuddy.com
funnyjunk.com
originalicons.com
freevibe.com
gamespot.com
picgames.com

As you have probably figured, these sites were the only unrecognized sights in my browser history when I got the Aurora problem.


No1Bobo@Yahoo.com


0

Response Number 13
Name: Bob77511
Date: May 7, 2005 at 17:20:20 Pacific
Reply:

Has anyone tried this guy's fix? I tried it and so far, so good. Just seems too easy!
http://www.computertalkamerica.com/modules.php?name=News&new_topic=12


0

Response Number 14
Name: codenamehunny
Date: May 8, 2005 at 01:00:34 Pacific
Reply:

I went to where bob77511 recomended to go and it worked. It took like 3 easy steps to type! I cleaned my computer 3 times and ran norton and ad ware and nothing worked. I looked at other soluations but they seemed too hard and too risky but this was simple and you didn't have to go to any site to download anything. so here it is 4 in the morning but no more aurora pop ups. thank you!


0

Response Number 15
Name: AvalonsAngel
Date: May 8, 2005 at 08:59:39 Pacific
Reply:

I tried Bob77511's suggest as well, and it worked wonderfully .. so far no more of those terribly annoying aurora pop up's have bothered me. I also like that I was able to remove it with out having to use aurora's own *special* removal program. Thanks for the great info Bob77511!


0

Response Number 16
Name: AvalonsAngel
Date: May 8, 2005 at 18:13:10 Pacific
Reply:

Well, unfortunately I am back to report that the suggestion from Bob77511 seems to be only a temporary fix. (sorry Bob, it was worth a try, and I still truly appreciate your help). Though it worked well for awhile, I have gotten some aurora pops ups here and there since then. However, they don't seem to be happening near as much. I'd much rather be totally rid of them though, so if anyone comes across anything that is a permanent fix, please share. I may end up breaking down and using the actual program for removal that aurora provided .. I'm just not ready to try that yet though, we'll see. Keep us posted. Thanks


0

Response Number 17
Name: xctm39
Date: May 12, 2005 at 15:31:54 Pacific
Reply:

I agree with D Cook. Bit the bullet and ran mypctuneup.com/aurora uninstall and it appears to have solved the problem. The interesting thing about this little piece of possessed binary is that there is another executable in the works that has not yet been identified. Another file has to keep reloading the nail.exe file back into the windows directory. I'd be interested to know its name. That's what makes it so hard to eradicate. Nail.exe is the second in the chain and the 6 random letter named file that actually runs and is visible in the task manager is the third.


0

Response Number 18
Name: bethpa
Date: May 14, 2005 at 13:44:29 Pacific
Reply:

Try a free download of Webroot's Spysweeper and run it. I think you can find them at webroot.com. Seems to have done the trick, at least for now. My computer had hundreds of these things in it, all removed by Spysweeper. Thank you Spysweeper! I will buy your stock.

I was REALLY hesitant to go to the link suggested above (mypctuneup.com/aurora). Brought to you by the same people who bring you the damn pop-up in the first place. The link came up in its own pop-up - this benevolent company wants to ensure you get a "better internet experience" by downloading their uninstall program!! It that the greatest?



0

Response Number 19
Name: lonewolfcelica
Date: May 17, 2005 at 09:30:01 Pacific
Reply:

I haven't tried the uninstaller yet. But plan to. I've been using ad aware along with ad watch that comes with it. So far it keeps the pop-up from appearing. I would recommend using this combination, even if you used the uninstaller, to keep from getting it again. Make sure to check the
necessary settings in ad watch and have it load on start up.


James Meeks


0

Response Number 20
Name: Rilo Kiley
Date: May 17, 2005 at 13:33:53 Pacific
Reply:

I gave in and went to mypctuneup.com/aurora (clicking on question mark)...it's been 2 weeks now and no pops and no other issues. Spyware Doctor can't find anything.

Check out...
http://mypctuneup.com/privacy.php
and
http://mypctuneup.com/

"The MyPCTuneUp uninstaller program will never collect any personally identifiable information, it will not install any additional programs, and it will delete itself once it finishes the uninstall process." As far as I can tell, this is true.

Also, along with removing the nail.exe, it found and removed this file that had the aurora icon:
"wtsvizptwu.exe"
Description: Buddy
Version: 1.0.2.4

Best of luck to all.


0

Response Number 21
Name: bethpa
Date: May 17, 2005 at 17:46:09 Pacific
Reply:

I went to the site mypctuneup.com\aurora and downloaded the uninstall program (as the pop-ups suggested). I was really hesitant to do this so I did it first on a friend's work computer (ha ha!) and it seemed to do no damage. So, I downloaded it onto my pc and so far so good (it's been only five minutes though).

Webroot Spysweeper only seemed to take care of the problem temporarily.

Anyway, good luck!



0

Response Number 22
Name: bishop9127
Date: May 17, 2005 at 18:39:04 Pacific
Reply:

Here is the most reliable info I have seen to remove this adware, it comes from the Hijackthis blog. Just follow the link to review the article:

http://forum.hijackthis.de/showthread.php?t=3172

Good luck out there

Tim


0

Response Number 23
Name: Confrusion
Date: May 18, 2005 at 16:45:37 Pacific
Reply:

I did ctrl, alt,delete while the pop up was still up to access Windows task manager, found "aurora" and hilighted it. Then I selected the processes tab and it showed me this "mefrtjkbw.exe". After searching my system I found it in my windows folder as it's logo icon "mefrtjkbw.exe" and a piece of it in windows prefetch folder under the same .exe name. I have just right clicked and deleted these and haven't had a problem.


0

Response Number 24
Name: Confrusion
Date: May 18, 2005 at 21:36:34 Pacific
Reply:

Nevermind my last post. It came back.


0

Response Number 25
Name: cloudyone
Date: May 20, 2005 at 14:36:24 Pacific
Reply:

well, i just got my computer brand new two days ago and i already have aurora..and the only thing i have downloaded so far is... Kazaa, Napster, and 2FindMP3. And like, 1 .mp3 file from Kazaa. That's all that i think i downloaded since i got it. I guessing it's from one of those unless you get it just from visiting websites. I'm clueless but i'm about to try that Uninstall Program. Also ran Ad-Aware, SpyBot:S&D, and Norton, none of those worked.


0

Response Number 26
Name: Girl
Date: May 24, 2005 at 01:49:26 Pacific
Reply:

argh I'm ready to effing SCREAM!!!! I've been getting these damn aurora pop ups for the past week and when I go to www.mypctuneup.com/aurora it says HTTP 403 (Forbidden) You are not authorized to view this page. So I guess I'm stuck with these stupid things? Can someone please help me?


0

Response Number 27
Name: Fraggedout
Date: May 24, 2005 at 15:29:56 Pacific
Reply:

Fully-updated MS Antispyware detects aurora as transponder.abetterinternet.aurora and runs from the files c:\winnt\nail.exe and c:\winnt\svcproc.exe.

Download nailfix for XP at
http://users/pandora.be/bluepatchy/nailfix.zip and nailfix for Win2K at
http://users/pandora.be/bluepatchy/nailfix2k.zip
Reboot into safemode prior to running the fix. After running the fix, reboot into normal mode and run a full scan with MS Antispyware (fully updated) and see if aurora is detected.

The foregoing procedures worked for me. After several reboots and internet connections, I still get clean HiJackthis logs, clean prefetch, and no aurora popups.
Fraggedout


0

Response Number 28
Name: the rushian
Date: May 28, 2005 at 03:49:24 Pacific
Reply:

Aurora is run by a co. in New York.
Their website is www.direct-revenue.com
If you go to this site it will give you a link to the mypctuneup uninstaller program.,and also a forum to tell them what you think of their `product`.
However the uninstall program is easy to download and run and seems to be working ok.


0

Response Number 29
Name: couchguy
Date: May 30, 2005 at 09:42:54 Pacific
Reply:

I used the mypctuneup.com uninstaller program and, for the moment, the popups have not come back yet. I do have another problem that I have not yet heard people talk about. I have system mechanic 5 pro. When I check for updates my computer (with Aurora previously on it) can't find the kaspersky antivirus website. This same problem happens when I try to go to the symantec.com website. I noticed this right after I got the aurora problem. Now, on my other computer which did not have aurora, it goes directly to the designated websites with no problems. It's almost as if aurora is keeping me from viewing these anti virus websites so that it cannot be removed. Is anybody having a similar problem such as this?


0

Response Number 30
Name: KYLE1871
Date: May 30, 2005 at 21:11:29 Pacific
Reply:

Adware alert gets rid of that annoying pop up. i tried everything before and nothing else worked. its a really good program


0

Response Number 31
Name: brel
Date: December 6, 2005 at 16:50:25 Pacific
Reply:

well i had the virus on my comp i used zonealrm to blok it from poping up it worked and now i know longer have the problem but now i cant acess secure sites and java scrip dont work on my comp


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Aurora pop-ups??

Aurora Pop up www.computing.net/answers/windows-xp/aurora-pop-up/132455.html

Pop-ups, Aurora keeps coming back. www.computing.net/answers/windows-xp/popups-aurora-keeps-coming-back/134734.html

Aurora pop up help www.computing.net/answers/windows-xp/aurora-pop-up-help/137143.html