TODO

[fields]

Does anyone know something about that spy ? : it create an
..exe in the windows system 32. At every time you kill the
task, a new name of .exe is created. It includes in
HKLM/Ms/W/cv/run a task with every new name. It seems to
provide you pop-up from Net sites.

 

[Monitor]

Please submit a Tools, suspected spyware report from the
infected machine!


Have you tried scanning with Microsoft Antispyware in safe
mode?
Run a full system scan, check the 3 boxes

Post your results to the newsgroup. Share with others.
----Original Message-----

 

[Bill Sanderson]

There are some useful threads in other groups about this spyware.

It is a current VX2 variant, I believe.

Names to look for in the subjects of threads are "aurora" or "nail.exe"

I believe there is a useful thread in .announcements about this one.