vx2 spyware remove process comes back

28 Aug

> I’m cutting and pasting from another group here. It looks as if it may be relelvant.
> Subject of the post is “Aurora Fix”, posted by AndyManchesta
> ———————————————————————————
> Lavasoft have come to the rescue and released a new VX2
> cleaner that kills Aurora, After many weeks of testing
> and being involved in different fixes for this I have to
> hand it to them, there’s is the best fix for Aurora at
> present and shows us all how it should be done.
>
> This is a beta test so even though I will post the link
> (which may change in the next couple of weeks when it
> comes out of beta) anyone who wants to use it should
> consider signing up to Lavasoft as a beta tester to help
> them improve applications and definition files, You can
> sign up at this address then choose definitions or
> programs to take part:
>
> http://www.lavasoftresearch.com/betaprogram
>
> First you need Adaware SE :
>
> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910..html?part=dl-ad-aware&subj=dl&tag=top5
>
> Then close Ad-aware SE and download the new VX2 Cleaner
> (Not the one of thier site as it will not detect Aurora)
>
> http://www.lavasoftresearch.com/upload/app/vx2cleaner.zip
>
> Save the file where you can find it easily then Extract
> the files and copy them (Left click and cover the files
> and then right click and copy) then open Lavasoft’s Ad-
> Aware “Plugins” folder and paste them into there(Right
> click and paste).
>
> (C:\Program Files\Lavasoft\Ad-Aware SE\Plugins)
>
> Run Ad-Aware and click the Add-ons button in the main
> window.Select VX2 Cleaner from the list.
>
> Click the “Run Tool” button in the lower right corner of
> the window.Click “OK” when asked if you want to execute
> this tool.It will say VX2 variant found then press
> clean.Next it will say to reboot and run a smart scan
> with Adaware.
>
> It does miss acouple of traces which I will list below
> but it kills the Nail infection and makes it look so easy.
>
> Delete these if found:
>
> C:\WINDOWS\ffsnvqmgpiy.exe
> C:\WINDOWS\rramcx.exe
>
> Then you can clear the Temp Internet files and the
> contents of the prefetch folder to remove the final
> traces if you wish:
>
> goto start menu and run and type %temp% delete the
> contents of this folder or at least the files that are
> not in use then start and run and type prefetch and
> delete the contents of this folder and its finished !
>
> Good Work Lavasoft
>
> Regards Andy
>