"Jim" <junk@junk.com> wrote in message
news:O5V7e.1311$Qu2.295@tornado.ohiordc.rr.com...
>
> "Mich" <Mich8hb@netscape.net> wrote in message
> news:RxU7e.8533$ff4.3535@trndny08...
> >
> > "Jim" <junk@junk.com> wrote in message
> > news:t4U7e.1306$Qu2.32@tornado.ohiordc.rr.com...
> >> I've run ad-aware, XSoftspy, Microsoft antispyware, killed suspect
> > registry
> >> keys and like Jason it keeps coming back. Does someone know of a tool
> > that
> >> will fer sure remove this?
> >>
> >> --
> >> "God put us on Earth so that we will accomplish certain things in a
> >> lifetime - so far, I am so behind I will never die." - anon.
> >>
> >>
> > ************************
> > If ya know what date you got infected setup your explorer to see all
files
> > and search that date, check the file properties of the files found and
> > check that they are safe to delete or rename the extention (like .exe to
> > .ggg )
> >
> > Have you googled "remove aurora"
> >
> > Mich...
> >
> >
>
> I'm not sure sometime within the last 2 days. I googled but "aurora" is
> several different programs also. I'll look at the files on the machine.
>

Try spybot search and destroy
http://www.safer-networking.org/en/mirrors/index.html
If the file comes back download hijackthis and it has a delete on reboot
option or find Killbox that does the same.
http://www.merijn.org/files/hijackthis.zip
http://www.bleepingcomputer.com/file...re/KillBox.zip

After you load Spybot update it then reboot into safe mode and run it.
also clear all your temp files before hand .

good luck
Mich...