Results 1 to 11 of 11

Thread: trojan:DOS/Alureon.A :(     submit to reddit submit to twitter

  1. #1
    Salvage Bans
    Join Date
    Sep 2008
    Posts
    955
    BG Level
    5
    FFXI Server
    Ragnarok

    trojan:DOS/Alureon.A :(

    So my PC is infected with this guy. I've done the steps in the sticky post as well as tried TDSSkiller but it's always popping up that the trojan is still there (from MSE). At a loss of where to go from here as I don't want to reformat again. So could anyone help me out?

  2. #2
    Member since 2006 and still can't think of a title.
    Join Date
    Oct 2006
    Posts
    28,433
    BG Level
    10
    FFXIV Character
    Acanis Lindri
    FFXIV Server
    Midgardsormr
    FFXI Server
    Bismarck
    WoW Realm
    Kil'jaeden

    Can try the typical malwarebytes/mse/spybot/adaware/whatever else good free anti virus software is around and see if you can kill it that way. Honestly though, as someone who used to rape people for money when it comes to virus scans when I worked at fry's, if your system is that fubar'd, your better off just formatting.

  3. #3
    Salvage Bans
    Join Date
    Sep 2008
    Posts
    955
    BG Level
    5
    FFXI Server
    Ragnarok

    Someone recommended Hitman pro http://www.surfright.nl/en/hitmanpro which I went ahead and used, so far it seems to have gotten rid of it. I'm hopeful but we'll see, gonna keep an eye on my PC for a while.

  4. #4
    Relic Shield
    Join Date
    Nov 2006
    Posts
    1,778
    BG Level
    6

    Hate to suggest something from Microsoft but Security Essentials Offline has worked well for a few stubborn viruses in the past.

  5. #5
    Nidhogg
    Join Date
    Feb 2008
    Posts
    3,790
    BG Level
    7
    FFXIV Character
    Tsugaru Mifra
    FFXIV Server
    Hyperion
    FFXI Server
    Ragnarok

    Quote Originally Posted by Siya View Post
    Someone recommended Hitman pro http://www.surfright.nl/en/hitmanpro which I went ahead and used, so far it seems to have gotten rid of it. I'm hopeful but we'll see, gonna keep an eye on my PC for a while.

    Hitman Pro is fucking awesome and I was going to suggest it to you. It's probably the best rootkit remover I've seen.

  6. #6
    Salvage Bans
    Join Date
    Sep 2008
    Posts
    955
    BG Level
    5
    FFXI Server
    Ragnarok

    Welp PC got infected with something else. Some fake AV crap. Got rid of it but seems my firewall was damaged. It was turned off and when I tried to turn it back on got error code 0x80070424. Researched it on the Microsoft site which "fixed" some registries. Now when I try to go to turn the firewall on it begins to process then stops after a few seconds, but no error code. Any ideas?

  7. #7
    A. Body
    Join Date
    Nov 2005
    Posts
    4,315
    BG Level
    7
    FFXI Server
    Leviathan

    Nuke from orbit, it's the only way to be sure.

    There are variants of the malware you named that mess with the MBR and install to a small partition. If you do reformat, redo partitions as well. If you don't, it'll actually survive a reformat (not kidding, ran into it myself).

  8. #8
    Nidhogg
    Join Date
    Feb 2008
    Posts
    3,790
    BG Level
    7
    FFXIV Character
    Tsugaru Mifra
    FFXIV Server
    Hyperion
    FFXI Server
    Ragnarok

    Are you using a router with a hardware firewall? No need for Windows firewall if so.

    Windows firewall is shit and everyone turns it off anyway.

    If you really want to fix it, pop a windows disc in your drive and run sfc from command prompt.

  9. #9
    Corwens a slot
    Join Date
    Apr 2006
    Posts
    4,115
    BG Level
    7

    The virus makes a partition on the hard drive. You have to kill that first before removing it or it will just create itself again. You need to scan with something that removes rootkits. If you google rootkit + alureon you will find the program. I don't remember the name. After you run that, run MSE and clear anything else out. Reboot and it should be gone.

  10. #10
    Nidhogg
    Join Date
    Feb 2008
    Posts
    3,790
    BG Level
    7
    FFXIV Character
    Tsugaru Mifra
    FFXIV Server
    Hyperion
    FFXI Server
    Ragnarok

    He already ran Hitman Pro which removes that particular rootkit. Unfortunately removing said rootkit can sometimes damage parts of the OS.

  11. #11
    Cerberus
    Join Date
    Sep 2006
    Posts
    433
    BG Level
    4
    FFXIV Character
    Windred Sayna
    FFXIV Server
    Hyperion
    FFXI Server
    Phoenix

    My dad got this a few weeks ago. TDSS cleaned it right up. http://support.kaspersky.com/viruses...?qid=208280684