The easiest way to detect if your computer is infected with Aurora spyware is to look for occasional windows that pop-up outside of the browser with an Aurora title bar. However, if you use HijackThis, MSConfig, Regedit or Sysinternals Process Explorer or Sysinternals Autoruns the processes listed below are typical indicators of the Aurora spyware:
- Nail.exe
- WindowsNail.exe
- Aurora.exe
- Buddy.exe
- ceres.dll
- svcproc.exe