Aurora infection

[Adrian]

MS AntiSpyware doesn't seem to help at all with the Aurora
malware, which infected my computer two or three days ago.

I've been frequenting a couple of newgroups, where the
resident experts have been trying to excise this malware,
but so far without success.

In addition I've run AVG Free, Ad-Aware Personal Edn, and
Spybot, without success.

Can we expect MS AntiSpyware to help with this misery?

Thanks, Adrian

 

[JohnF.]

www.mypctuneup.com/aurora

Be careful if they ask for any personal info, just get the uninstaller.

 

[Bill Sanderson]

Be careful indeed:

This site is run by the producers of the technology underlying the
infection--i.e. "the vendors" of Aurora.

They might deny this, in that their technology is used by third partys,
perhaps, to actually display the ads in question--but I don't think I'm
being wildly inaccurate.

Using such an uninstaller is problematical. Even if a version of it has
been downloaded, analyzed carefully by a third party, and vetted by them as
adhering to the statements made at the website about its safety--there's no
assurance that the version you download today is the same on that was
analyzed yesterday.

 

[Engel]

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then send
it to Ron Kinner as an attachment. He can probably
identify the problem and tell you how to get rid of it for
good.

Ron email address. (e-mail address removed)
He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

For information
HijackThis tutorial:
http://www.bleepingcomputer.com/forums/index.php?
showtutorial=42

If the malware problem comes back further specialised
assistance is available via the Hijackthis forum at
http://forum.aumha.org - make sure you read the top
announcements about pre-post steps you should take before
generating a hijackthis log.

 

[Adrian]

Hello Engel,

I contacted Ron as you advised, and he came up with a plan
of action, which seems to have worked.

Many thanks for the lead.

All the best, Adrian