Please help me get rid of this spyware.

[mikysee]

Im not sure how I got it but it started today. When I use IE, a popup ad comes up. I tried using Spybot S&D and Ad-Aware but both cannot get rid of it. In the task manager, the application shows up as Aurora and the process name is ebshsruoj.exe. ZoneAlarm picks it up as Buddy. When I click on more info, ZA says its a Malware??? I tried delecting the ebshsruoj.exe file but it keeps returning. Does anyone know how to fix this perticular problem? I tried searching on google for ebshsruoj but got nothing.

Im not a rookie when it comes to dealing with these things but this time I'm stumped. Thanks for any help.

 

[myjaja]

Download firefox!

 

[thehstrybean]

Reformat.....



























J/K..........
Try ending the process....clean out your cookies, temp, application folder (in the documents & settings for your username) for anything you don't recognize...Go through add/remove programs...

 

[CaptnKirk]

AVast

Run all the scans in 'SafeMode' - hit PF8 to get into safe mode

 

[conjur]

You don't have a virus checker?

Try HijackThis, too.

 

[Iron Woode]

Originally posted by: mikysee
Im not sure how I got it but it started today. When I use IE, a popup ad comes up. I tried using Spybot S&D and Ad-Aware but both cannot get rid of it. In the task manager, the application shows up as Aurora and the process name is ebshsruoj.exe. ZoneAlarm picks it up as Buddy. When I click on more info, ZA says its a Malware??? I tried delecting the ebshsruoj.exe file but it keeps returning. Does anyone know how to fix this perticular problem? I tried searching on google for ebshsruoj but got nothing.

Im not a rookie when it comes to dealing with these things but this time I'm stumped. Thanks for any help.

get the trial version of counterspy and it will remove it.

 

[Nocturnal]

Good luck, sometimes Aurora can be a bitch.

 

[aplefka]

Did you get this from AIM? There are one or two new ones floating around that a lot of my friends have been sending me since yesterday.

 

[thehstrybean]

Originally posted by: aplefka
Did you get this from AIM? There are one or two new ones floating around that a lot of my friends have been sending me since yesterday.

I got the same thing...it's a DOS program that runs at startup...Luckily, Windows Firewall caught it and stopped it...just end the process and delete the file...Virus=teh sux0rs...

 

[mikysee]

Thanks for the advise but nothing has worked. Im just gonna reformat.