Janice explained on 2005-05-07 :
after a clean scan I am getting Aurora pop ups too. has
anyone tried the unistall tool at mypctuneup.com? Is it
for real...or another spyware trick?!
Hi
"Guru" Bill Sanderson wrote this in another message about
mypctuneup.com
"Be careful indeed:
This site is run by the producers of the technology underlying the
infection--i.e. "the vendors" of Aurora.
They might deny this, in that their technology is used by third partys,
perhaps, to actually display the ads in question--but I don't think I'm
being wildly inaccurate.
Using such an uninstaller is problematical. Even if a version of it
has been downloaded, analyzed carefully by a third party, and vetted by
them as adhering to the statements made at the website about its
safety--there's no assurance that the version you download today is the
same on that was analyzed yesterday."
Have you done any fullscans in safe mode with all options checked ?
After this I think it?s time for HijackThis to solve this and
go to a forum specialized in these logs.
http://www.aumha.org/a/quickfix.htm (step 7)
or one of these.
http://www.merijn.org/forums.html
HijackThis can be downloaded from:
http://www.merijn.org/files/hijackthis.zip
About HijackThis:
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42