aurareco.exe & thnall1ac.exe

  • Thread starter Thread starter McCallsNW
  • Start date Start date
M

McCallsNW

I'm having trouble finding and deleting two spyware flies.
thnall1ac.exe and aurareco.exe. Both randomly attempt to
dial out. My Norton AV catches them and I can block, but
I'm getting tired of the continuous interruptions.

Any ideas from anyone about how to rid myself of these
little parasites would be very appreciated.
 
Search the .announcements group for a thread on Aurora.

Useful keywords for googling: Aurora, nail.exe

I haven't met your variant--and am not completely certain that the two
executables you name are the same critter, but web references I've read
indicate they are the same family, anyway.

This is a three-part critter, so you need the third part. In some variants,
this part is randomly named and changing with each execution.

Use the tools, advanced tools, process explorers to look for a process named
TODO......

That'll be your randomly named third part. You must kill all three at once.

One or more of these parts is active even in safe mode.
 
Back
Top