 
--MF--
@covad.net
| Toll-Free number for their ISP Here's a couple of toll-free numbers for their ISP.
I spoke with Larry. He said he had only received a couple complaints. I think he needs to hear a lot more.
I encourage everyone to call him with your complaints.
OrgAbuseHandle: ABOVE-ARIN
OrgAbuseName: AboveNet Abuse
OrgAbusePhone: +1-888-636-2778
OrgAbuseEmail: abuse@above.net
OrgNOCHandle: NOC41-ORG-ARIN
OrgNOCName: AboveNet NOC
OrgNOCPhone: +1-877-479-7378
OrgNOCEmail: noc@above.net | |
|
AntiNail man
@bezeqint.net
| Nail.exe Hi, sorry for my english, but....
Not possible to delete Nail.exe without problem in continue. In start Windows will up error message "Nail.exe bla-bla-bla".
You must to go to Regedit (start->run->regedit) and go to
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
In key "Shell" leave value Explorer.exe ONLY and delete
C:\Windows\Nail.exe. Close regedit and restart you computer (No must). End  | |
|
TheJackalCFH
@rr.com | I think i shall sign up all there emails for lots and LOTS and LOTS of porn. | |
|
phqu2
join:2005-07-17
Jacksonville, FL | i thought osama was the terrorist??????!!!!!!!!!!!!!! | |
|
wsrcr
@snet.net
| Any info on class action suits?
I have about a dozen people that are demanding financial restitution. I own a computer company (and I am partnered in others) and our customers are furious! NUMEROUS HOURS to kill (no guarantee) this sh** from the PC's! VERY expensive.
Please let me know where / how to join a lawsuit!
BTW: seems the terrorist slant would also apply!
If it matters I am in Connecticut!
Thanks! | |
|
|
kerry7
join:2005-07-30
Wimberley, TX
| I've been through a 48 hour battle with this awful Aurora virus/spyware also called ABI VX2 and Transponder. Another 5 MB file rode in with it called WinFixer 2005 which also repeatedly installed itself - freezing my browser while it was downloading - and then cheerfully took over my computer while claiming to check for "Registry Errors" (my a**). So I could not work the entire time I was fighting this because it took control of my computer.
Here is the list of what I tried so perhaps you will not have to go through what I did.
I tried Ad Aware, Spybot Search & Destroy, and Security Task Manager. They all detected and removed it, but allowed it to reinstall itself. No good.
I also spent hours following MSimcox@qwest.net's instructions for manual Aurora removal (in this same thread) and it was the same as the above - I can remove it, but it always comes back.
Hijack This identified the files but obviously couldn't identify all of them, since it kept coming back.
I also tried Trend Microsystems Anti Spyware program but it too allowed it to come back.
Finally my fiance told me he had heard Kim Komando talking about Webroot Spy Sweeper. I resisted it for about two more hours of manual labor trying to remove and outsmart the thing before in desperation going to the Webroot.com site. (By now I've spent about $100 for programs that had not helped.) $29 more and I've got their Spy Sweeper program picking up ALL KINDS of things that other programs had not!
The sad thing is... Spy Sweeper is successfully able to block it, but Aurora does keep trying to come back. A little Alert goes off each time it attempts to return. That's about once an hour now.
And I have Security Task Manager set to warn on Registry Change, and that goes off about every 30 minutes. That's the exe file in Windows/System32 that keeps changing names. I have to click Deny again and it's fine.
Between these two programs, I am keeping Aurora at bay. It is a bit like learning to live with an Alien inside you. It is still taking my system resources, but I should be able to get some work done now. Hopefully there will be a full inocculation soon that can fully remove it rather than simply block it. I just can't face a format and reinstall.
Nobody's talked about where this weasel comes in, but I suspect it came riding in on a birthday card I received 2 days ago on 123greetings dot com, or possibly from a free download I did from coffeecup dot com. What a birthday present.
I am going to bill these jerkheads who wrote this insidious program at my standard billing rates for the 48 hours of my life they stole from me as well as for the continuous drain on my system resources until they are forthcoming with a solution. They are NO better than any virus creator and deserve to be jailed for this.
Kerry | |
|
FireOne
@69.156.x.x
| I think the government should alow an open season on companies & corporations that create these spyware crap. I believe all employees of that company should be hanged, or burned at the stake. Nuff said...  | |
|
Snowman tony
@cox.net
| I noticed this bastard around 3 pm today, ever since then I've been searching like crazy. I remind you that I use the computer a lot, and like to handle these problems with regedit. I found myself lost against this asshole, I downloaded some of the latest antispyware, one anti virus, and nothing. I went to the "geeks to go" forum and asked for help. (»www.geekstogo.com/forum/Aurora-M···625.html)
6 hours later, nothing. I bit my lip and swallowed my pride, I went to the D-R site and got the mypctuneup, it worked. I posted the same thing on Geeks To Go to help other people save time. I am currently in shock, I have wasted 6 fucking hours to this and fixed it in 3 minutes. This fucking bastard of a virus has cost me a lot of time, and I have an assignment thats due in 2 hours. I am posting here instead of spending my time on my assignment because I think it would do a great deal more good.
»www.mypctuneup.com/evaluate.php
Thats the link of the instructions I followed, just let it uninstall, then you can remove it with adaware like I did. I really need to get started now on this damned assignment, I'll check back in a few hours. Good luck. | |
|
BBIB2U
join:2002-01-24
Fontana, CA
| After trying nearly every fix along with risky registry editing for days on end; I ran across this very small but highly effective fix to the terroristic takeover by aurora.. By highly effective, I'm mean an absolute end to aurora-everything in mere seconds. I've rebooted a few times and still no problems whatsoever. It worked for me.
Is this guy, Steve Herbert, a genius or what?
To quote:
First, check for Nail.exe in the C:\Windows directory. If it's there, delete it. If it reappears, Aurora is at work on your system. The other place to check is in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon. The Shell key will have the value "Explorer.exe c:\windows\nail.exe". If you try to modify this setting back to c:\windows\explorer.exe, the aurora software automatically renames it back to include the reference to nail.exe.
The latest Symatec definition identifies this virus as "BetterInternet" and provides a remover that doesn't stop the behavior noted above. To stop the behavior noted above, I took the following steps:
(1) From a command prompt, go to the Windows/System directory and type dir>nail.exe (this changes the contents of nail.exe and their software doesn't try to remedy this situation)
(2) Reboot. Upon startup you'll get an error message, but ignore it. You can now delete Nail.exe and it will not reappear.
(3) Finally, using RegEdit, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and change the shell key to "c:\windows\explorer.exe"
Reboot and your system is now clean.
Found at: »codebetter.com/blogs/steve.heber···335.aspx
--
And What Color Is The Sky In Your World | |
|
shriprem
@bellsouth.net
| Here is an approach that worked for me to get rid of aurora on a friend's computer:
1. Boot up your computer in Safe Mode with Command Prompt. (This is important because by doing this, you are not instantiating explorer.exe or the SHELL that is embedded with nail.exe)
2. From the Safe Mode Command Prompt, go to C:\Windows and delete nail.exe. Run dir nail*.exe to check if it comes back. (Or you could even try using dir > nail.exe in C:\Windows to neuter nail.exe and fooling the aurora process)
3. Now, here is the hidden Windows feature you need to use. From the Command Prompt, press CTRL + SHIFT + ESCAPE to launch Windows Task Manager. From the Task Manager menu, use the Run option to launch Regedit.exe and clear the Windows Shell setting altered by nail.exe at HKLM/Software/WindowNT/CurrentVersion/WinLogon
Reboot to see the nail.exe gone
In fact, this method can be used to clean other sticky spywares as well | |
|
orbi
join:2005-05-23 | if you are still having problems with aurora and nail.exe you can remove it by following the instructions here: remove nail.exe | |
|
|
SpyH8R
@mchsi.com | If anyone knows what they did or how they got infected please post. I am looking for a file to install on a test machine. | |
|
Aussie Dude
join:2005-09-19
Australia | Just got Nail.exe on my PC here in Australia. Must get VOIP to call the US and complain lots to total randoms. I'll have to use words like "Crikey", "Struth", and "Stone the crows, this is a load of sh*t!". Maybe then i'll get a little respect...... | |
|
broadbanned9
join:2005-11-02
Calgary, AB
| DO NOT RE-IMAGE/GHOST/RE-FORMAT until you've tried this. Very painless, and i bet mypctuneup somehow makes the bastards money.
From »codebetter.com/blogs/steve.heber···335.aspx
(1) From a command prompt, go to the Windows/System directory and type dir>nail.exe (this changes the contents of nail.exe and their software doesn't try to remedy this situation)
(2) Reboot. Upon startup you'll get an error message, but ignore it. You can now delete Nail.exe and it will not reappear.
(3) Finally, using RegEdit, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and change the shell key to "c:\windows\explorer.exe"
Reboot and your system is now clean. | |
|
|
|
|
