Callender, Look at "Trojan Win10 Info 11.zip", page 3. They were not created by Aura. Also look at page 2. The Trojan is modifying the Data Created ... not the Date Modified.
The link you provided definitely has the same Trojan.
I think the only solution is to re-format the hard drive.
- - - Updated - - -
Samuria, That is not an extension in Add-ons.
Hello @bhs67:
Since you already have Malwarebytes installed, please consider opening your topic in their Windows Malware Removal Help & Support subforum (after carefully reading their FAQs) and have their professionals clean your system for free.
Hopefully, you will also have run Malwarebytes' AdwCleaner and afterward, install Malwarebytes Browser Guard and uBlock Origin if you haven't already.
Your “wait time” is generally less than an hour or so for the forum.
Cheers
I'd still suggest uninstalling Aura then maybe run some other virus removal tools. I can't make suggestions on which ones to use.
Just disable malware altogether, 11 is already doing it by disabling vbs. Run CMD as admin and copy/paste:
Code:reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f reg add "HKLM\Software\WOW6432Node\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
I think the source of the Trojan was the Firefox add-ons extension "AdBlock Plus".
I removed it, after the Trojan appeared, and replaced it with "uBlock Origin".
I plan to reformat the drive and install Win11 from a USB flash stick.
Quote