i need help asap

Question

i just ran spyware search and destroy and it said my computer didnt have a virus or that it was alright or whatever. but it isnt. here are the problems i am having:  kpvudmi.exe error keeps popping up. aurora-part of the ABI network is the spyware that is infecting my computer and i dont know how to uninstall it? i dont know if this makes sense but this is what i think a generic looking error message pops up that reads 'Internet Explorer has encountered a problem and needs to close. we are sorry for the inconvience, if you were in the middle of something, what you were working on might be lost' I NEVER got this error message before so i guess it is part of the spyware. then a blue screen pops up that says 'A Problem has been detected and windows has been shut down to prevent damage to your computer'   i really am lost and do not know what to do. anyone at all have any suggestions??

Skipmcc · Answer

I am going to point you to http://forums.techguy.org/showthread.php?t=389913 which discusses the Aurora/ABI popup problem.  It suggests using the 'uninstaller' at  http://www.mypctuneup.com/evaluate.php.   I have never had this problem, and I don't know if I trust the 'uninstaller' completely, but if desperate, I would give it a shot.   From your previous post, if you are not running an anti-virus / spyware blaster / spyware Guard set of programs, you should assemble a suite of applications.   Good luck.

ky331 · Answer

there is some controversy about that pctuneup website... the point being, that the company behind pctuneup is the same company that put aurora/abi/nail on your system in the first place! some people have used the site indicated, and CLAIM it successfully took care of their problem. others, however, including most (if not all) of the HiJackThis-forum-experts, have asserted that there are problems associated with this site's alleged removal tool.

So here's an alternative [and more accepted] approach:

If you don't already have it, download Ad-Aware SE Personal 1.06 from http://www.majorgeeks.com/Ad-Aware_SE_Personal_d506.html

[If you have an older version, please be sure to upgrade to this version, SE 1.06]

Install the program. [As part of the installation, it will check to see if you already have an older version of ad-aware installed, and if one is found, it will ask (advise) you to allow the older one to be removed. so if asked, allow the removal]

Start Ad-aware. Click on Check for Updates Now, and Connect . if found, follow the directions to download/install the latest reference file, till you FINISH.

After updating, from the STATUS screen, click on START.

then make sure you have a RED X in front of "Search for negligible risk entries"

(if you see a GREEN CHECK, then CLICK on it, to change it to the RED X. )

then hit NEXT to perform a S mart Scan. Allow it to remove any problems founds.

Close-down Ad-aware.

then download the VX2-cleaner add-on from

http://www.majorgeeks.com/Ad-Aware_VX2_Cleaner_Plug-In_d4283.html

This comes as a ZIP file. You need to UNzip ("extract") the files into your Lavasoft Ad-Aware
"Plugins" folder. [I believe if you accept the default installation, the full path name would be

C:\Program Files\Lavasoft\Ad-Aware SE Personal\Plugins ]

It is critical that you extract the files here, and not to another location!

(Note: If you had an earlier version of the VX2 cleaner already installed, the UNzip process will ask you if you want to replace these earlier files... so if asked whether to replace, click "YES to all" ).

Start Ad-Aware again. Click on the Add-Ons button. Click on the VX2-Cleaner. Click on Run Tool, and then click OK . If it finds any VX2 problems, follow all the directions to CLEAN things. (I believe this will include a reboot, and directions to run another smart scan. Follow all indicated directions [i.e., various/multiple scans] until it tells you you're clean of VX2.

NEXT, we move on to HiJackThis analysis:

Download the latest version of HJT(hijackthis) (version 1.99.1) from

http://majorgeeks.com/download3155.html

you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP.

The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )

After Unzipping, double click on HiJackThis.EXE

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!! Improper use of this tool can severely damage your system.

Supplemental note: The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people. Nevertheless, it seems that many individuals try to be "creative", and make some variations. It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.

Specifically, the following are 3 very common BAD deviations which will cause delays:

a) BAD: using an older/outdated version of HiJackThis...

The experts only work with the current version. So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.

b) BAD: using a TEMP directory or your DESKTOP for HJT....

Some experts may insist you move HJT before they'll begin working with you. Others will start the repair process, advising you to move HJT as one of the very first steps. Failure to do so can result in losing potentially critical information. So please, just use the suggested C:\HJT directory, rather than try to be creative.

c) BAD: posting your log in the wrong forum...

if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log... in the HiJackThis forum.

Virus & Spyware

Was this post helpful?