This is probably Aurora related so check the hijack log
for these:
F2 - REG:system.ini: Shell=Explorer.exe
C:\WINDOWS\Nail.exe
O2 - BHO: BolgerObj Class - {302A3240-4805-4a34-97D7-
1645A0B08410} - C:\WINDOWS\Bolger.dll
O4 - HKLM\..\Run: [random] C:\WINDOWS\eysvtqz.exe(this
is a random name but it will be in the same place in the
log)
O23 - Service: System Startup Service (SvcProc) - Unknown
owner - C:\WINDOWS\svcproc.exe
Your best following Andre's advise and getting hijack
this and ABI Remover if you find the above entries in
hijack this also add these :
Download Ewido Security Suite
http://download.ewido.net/ewido-setup.exe
install Ewido..after install run Ewido and press Update -
Start Update
Download CCleaner
http://download.ccleaner.com/download119bin.asp
For Xp Download Nailfix
http://xsorbit26.com/users5/andymanchesta/index.php?
action=dlattach;topic=3261.0;id=294
Download the Remover to your desktop
For windows 2000 download nailfix2k
http://xsorbit26.com/users5/andymanchesta/index.php?
action=dlattach;topic=3261.0;id=295
(copy this to notepad and save it so you can still use it
in safe mode)
Aurora Removal :
Turn off System restore (start,right click my
computer,then properties,then system restore and turn it
off then press apply and exit)
Reboot to "Safe mode" (reboot and keep tapping F8 till
you see the opions page then choose safe mode)
Scans:
run ABI Remover
double-click on nailfix.bat (or
nailfix2k.bat if you have Windows 2000).
Your desktop and icons will disappear and reappear, and a
window should open and close very quickly.
run scan with Ewido
Cleaning
run CCleaner on all 3 settings (windows,applications &
issues)
Enable System restore (reverse progress of disabling)
Reboot
run a online virus scan to check for any other malware
Trend Micro
http://housecall.antivirus.com/
Panda
http://www.pandasoftware.com/activescan/co...n_principal.h
tm
If you need any help let me know
Regards Andy
