FOR AROURA **ONLY**Below listed processes, dlls, registry entries, files and directories

Removal Instructions

Kill the following processes

Unregister the following DLLs and reboot

Delete the following registry entries
SYSTEM\ControlSet005\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet004\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet003\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet002\Control\Print\Monitors\ZepMon
SYSTEM\ControlSet001\Control\Print\Monitors\ZepMon
SYSTEM\CurrentControlSet\Control\Print\Monitors\ZepMon
TypeLib\{DA15C9A2-C30A-4761-922A-5DFE7C9A1F67}
TypeLib\{92DAF5C1-2135-4E0C-B7A0-259ABFCD3904}
trfdsk.ohb
trfdsk.momo
trfdsk.iiittt
trfdsk.amo
SYSTEM\CurrentControlSet\Services\SvcProc
SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet005\Services\SvcProc
SYSTEM\ControlSet005\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet004\Services\SvcProc
SYSTEM\ControlSet004\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet003\Services\SvcProc
SYSTEM\ControlSet003\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet002\Services\SvcProc
SYSTEM\ControlSet002\Enum\Root\LEGACY_SvcProc
SYSTEM\ControlSet001\Services\SvcProc
SYSTEM\ControlSet001\Enum\Root\LEGACY_SvcProc
Software\microsoft\windows\currentversion\explorer\browser helper objects\{302A3240-4805-4a34-97D7-1
Software\Classes\CLSID\{302A3240-4805-4a34-97D7-1645A0B08410}
Software\Bolger
Software\aurora
Software\_rtneg3
Interface\{DA4B919F-B757-4E32-8D79-DEC5C2704C4B}
Interface\{C93CC79D-02D5-45B0-BE39-7F5B0E5DDA31}
Interface\{BB0D5ADC-028D-4185-9288-722DDCE2C757}
Interface\{4562B6F3-DAF8-464E-87B7-5464575F0D6A}
Interface\{32A9D21F-F510-44DC-9EA6-0456EDA04668}
Interface\{0A7FC040-F84A-4AD7-9439-798B6C0F861E}
Interface\{018C5406-AEE6-4A68-980F-2CEB1E9416FB}
CurrentControlSet\Control\Print\Monitors\ZepMon
ControlSet002\Control\Print\Monitors\ZepMon
ControlSet001\Control\Print\Monitors\ZepMon
Software\Classes\CLSID\{999A06FF-10EF-4A29-8640-69E99882C26B}
Software\Classes\CLSID\{52ADD86D-9561-4C40-B561-4204DBC139D1}
Software\Classes\CLSID\{356B2BD0-D206-4E21-8C85-C6F49409C6A9}
Software\Classes\CLSID\{302A3240-4805-4a34-97D7-1645A0B08410}
Software\Classes\CLSID\{0962DA67-DB64-465C-8CD7-CBB357CAF825}
BolgerDll.BolgerDllObj.1
BolgerDll.BolgerDllObj

Remove the following files
download.abetterinternet.com/download/UAC/thnall1a.html
download.abetterinternet.com/download/UAC/svcproc.exe
download.abetterinternet.com/download/UAC/aurora.exe
download.abetterinternet.com/download/UAC/DrPMon.dll
download.abetterinternet.com/download/UAC/thnall1ac.html
download.abetterinternet.com/download/UAC/Nail.exe
download.abetterinternet.com/download/UAC/uacupg.exe
download.abetterinternet.com/download/UAC/Poller.exe
Windows\system\thnall1a.html
Windows\system\aurora.exe
Windows\system\DrPMon.dll
Windows\system\thnall1ac.html
Windows\system\uacupg.exe
Windows\system\zrzhqut.exe
Windows\system\mtrkwwjf.exe
Windows\system\bobcfisjwuavb.exe
Windows\system\Poller.exe
Windows\thnall1a.html
Windows\aurora.exe
Windows\DrPMon.dll
Windows\thnall1ac.html
Windows\uacupg.exe
Windows\Poller.exe
Windows\Bolger.dll
Windows\nail.exe
Windows\svcproc.exe
Temp\aurareco.exe

Remove the following directories