List of Aurora / Hydraq / Roarur files

I see multiple searches for Hydraq MD5 information leading to this post -Trojan.Hydraq detection and naming so I am adding a few things now.

McAfee issued a guide outlining all the symptoms of Aurora infection "How Can I Tell if I Was Infected By Aurora?"

Links to Virustotal

The list of files provided by McAfee is the following

securmon.dll             E3798C71D25816611A4CAB031AE3C27A      (Wed Dec 16 13:20:28 2009)

Rasmon.dll               0F9C5408335833E72FE73E6166B5A01B         (Tue Jul 21 01:38:07 2009)

a.exe                       CD36A3071A315C3BE6AC3366D80BB59C

b.exe                       9F880AC607CBD7CDFFFA609C5883C708     (Tue Jul 21 01:38:27 2009)

AppMgmt.dll           6A89FBE7B0D526E3D97B0DA8418BF851       (Sat Sep 19 02:36:44 2009)

A0029670.dll          3A33013A47C5DD8D1B92A4CFDCDA3765    (Wed Dec 16 05:55:31 2009)

msconfig32.sys        7A62295F70642FEDF0D5A5637FEB7986

VedioDriver.dll        467EEF090DEB3517F05A48310FCFD4EE        (Wed Jun 7 05:41:49 2006)--Download*

acelpvc.dll               4A47404FC21FFF4A1BC492F9CD23139C       (Tue May 23 17:32:58 2006)--Download*

You also may have the following files or same name files but different MD5 hash

Additional - list from ANTY Security

30755.malware*(?) 1B59487D4DC029D92B61ABD4F69C9923        (Tue Jul 21 01:38:27 2009)
1.bin*                      BCBEF5AB2C75C171FEDCCA0A33BCF7F7   (Tue Jul 21 01:38:27 2009)

Rasmon.dll               32CC9F9DA93DD4E9FD3D203881197CBF      (Tue Jul 21 01:38:07 2009)
Rasmon.dll               2CFCD8C34F22FFB772C99C9293C21BDA     (Tue Jul 21 01:38:07 2009)

Rasmon.dll               3A33013A47C5DD8D1B92A4CFDCDA3765     (Wed Dec 16 05:55:31 2009)

Rasmon.dll               4A069A20B8262B20E7440C8AB9C54E11        (Tue Jul 21 01:38:07 2009)

Rasmon.dll               80FC413CF908CD4506C3F790E484822E         (Tue Jul 21 01:38:07 2009)

c_1758.nls               BA3545841D8A40ED8493E22C0E70A72C       (Tue Aug 15 16:18:27 2006)--Download*

Additional - list from Security.nl

jucheck.exe            79ABBA920201031147566F5418E45F34             (Sun Nov 22 18:25:44 2009)

AdobeUpdateManager.exe 9A7FCEE7FF6035B141390204613209DA(Sun Nov 22 18:10:09 2009)

zf32.dll                    EB4ECA9943DA94E09D22134EA20DC602        (Fri Mar 5 18:29:00 2004)       

I can also add the following files that you may find

Rasmon.dll               FCFCE3EAF930B907B3CBE45CD41F73C5       (Sat Aug 26 18:49:32 2006)--Download*

c_8540.nls               50CDA594DB832F4F98A5E5D2065192DF -      (Sat Aug 26 18:37:47 2006)--Download*

* Password protected archive, please contact me for the password if you need it.