Hijack by ABI Network

I think I got it when I signed on to the Golden Palace Casino. It is the only thing I can think of that I did around the time the pop-ups started.

Side note: I posted the mypctuneup.com on the Geeks to Go Forum since there were a lot of folks on there having the same problem. An Admininstrator closed my post saying that the solution I posted has been tried time and time again and has never worked. Reading some of the posts it seems they are promoting a program that needs to be downloaded to wipe it out but it doesn't seem to have helped anyone, just slowed down their computer. Just FYI

ibrachels, That virus comes from many sources - not just Golden Palace Casino. As for "mypctuneup," I have written to Symantec to find out if it's a safe program to use. Haven't heard from them yet, but will post their answer once received.

c.i., I know you don't trust me, but I have no idea why other than our political differences.

That "mypctuneup" site was created by the same turds who created the hijack. Listen to Timber and follow his advice.

yah know that wouldn't suprise me cause i tried that "mypctuneup" and it did get rid of the pop ups but when i used Microsoft antispyware it picked up like 7 or more ABI's and more stuff then it use to. It use to only be 2 ABI's. So yah not doing that again.....

I don't know about anyone else but since I ran the ABI uninstall software I have been good to go. None of my anti-virus software or firewall have been going nuts or registering anything, FYI.

An easy "fix"
Hi,

I am having the Aurora - Part of the Abi Network pop ups for ages now and after a lot of time spending into looking for others with the same problem and downloading/installing/running a billion of programs/spyware removers and scanners of all kind I descovered the easiest way to fix it.

Whenever you get another pop up, open your Task Mgr and look for a file with a really retarded name in the "process" tab (in my case it was "lshxfttanjw.exe").
It was located in C:\Windows
Close the popup, copy the filename, delete the file and create a new textfile with the same name. Enable write protection for this file. Done. Havent head a pop up anymore.

In case you should get another pop up , simply check the filename again and repeat the steps.

It's at least a temporary fix.

Might help some of you guys who are completely annoyed by this software, like I am.

Greetings


(Sorry for that unprofessional fix, but since here are so many people who have the same problem, I thought I'd share my suggestion).

IhateSpyware, Welcome to a2kl, and thanks for your suggestion. It sounds like a workable solution for now.

That's at best a temporary fix. To eradicate the pest, and its ilk, it is necessary to track down and eliminate the many interlocked, self-protected, self-replicating instances of themselves they scatter throughout the system as files, folders, and registry entries, and to harden the system against future reinfestation. There are no "quick fixes" - the detail route is the only sure way to go.

I disabled the system restore on my computer then went to regedit and deleted the entire aurora file and i haven't gotten a popup from aurora since. Remember to turn on system restore after u have deleted aurora.

c.i. seems to have joined the "Let's ignore cjhsa because he insulted Canada" club.

cjh, You are free to post anything you wish on this or any other thread. Your message is being received by those that wish to follow your information. I followed timber's step-by-step instruction, and that seems to have eliminated my spyware/adware problems. Post away as much as you please.

Regarding the ABI Network/Aurora Spyware
Spent quite a bit of time trying to get rid of this bastard. Think I finally did it. Here's how:

1. Boot into Safe Mode
2. Create a text file called kadptbqxana.exe and place it in the c:\windows directory. Over write the existing file and set its' attributes to read-only.
3. Create a text file called nail.exe and place it in the c:\windows directory. Over write the existing file and set its' attributes to read-only.
4. Reboot into Safe Mode again.
5. Run Regedit. Search for all references to above mentioned files. Also, search for ABI-1. If you find anything fitting that description, blow it away as well.
6. Reboot into regular mode. Run Ad Aware and Spybot S&D and remove all lingering crap.
7. Reboot one more time.

No guarantees. But so far, this procedure has worked for me where spyware removal programs alone have failed. Best of luck.... Giffmeister

giffmeister, Thanks for your contribution.

Whois info for, mypctuneup.com:
Registrant:
Thinking Media LP
275 Madison Avenue
New York, NY 10016
US

Whois info for, thinkingmedia.net:
Registrant:
Thinking Media LP
275 Madison Avenue
New York, NY 10016
US

here's some interesting stuff
http://www.aurora.com/support/malware.html

damned aurora, aurora be damned
Ive had this annoying pop up for about a week and today i finally flipped and set out to remove it. I have tried almost everything including regrun, adaware, spybot and even microsofts tools (see how desperate i was!). Eventually i gave up, bit the bullet and downloaded the mypctuneup remover. It worked! but then it should as its their company that installed this c**p on my machine in the first place. Im less than happy about it and thoroughly recommend that anyone affected by the Aurora program goes to http://www.mypctuneup.com/contacts.php and registers their displeasure with the companies underhand tactics. Of course im not suggesting anyone spams the company, after all that would be unfair......wouldnt it?..............but please i think its only fair that we give them some 'feedback'

keeefer, Welcome to a2k. Glad you were able to rid of those popup ads by using mypctuneup. However, I'm curious to find out if you followed timber's instruction (computer forum on a2k) on how to remove all spyware/adware from your computer? It seems to have worked for me.

mypctuneup
There is no question. Mypctuneup.com's popup was the first adware popup of many ever displayed on my pc, starting about 10 days ago. Clearly they installed the ABI Network adware virus to promote sales. But paying them to remove it is plain wrong. This practice is criminal and must be stopped! Let me know where to show up to testify in court!

The mypctuneup uninstall program is free and it works.