Alureon.gen!U

AMG

New member
Power User
Local time
4:14 AM
Messages
88
Location
Johannesburg South Africa
I cant get rid of this Trojan. I use MSE and even tried Mcafee 8.7i( which didnt pick it up). Help someone please...

virus.PNG
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download
Download, install and run full sweeps with both Malware bytes and spybot S&D

Malwarebytes.org

The home of Spybot-S&D!

Post back the results

The other thing to try is select the Quarantined items entry and see if you can select the item and choose delete
 

My Computers

System One System Two

  • Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    ChillBlast - Custom to my design
    OS
    Windows 11 Pro x64 [Latest Release and Release Preview]
    CPU
    Ryzen 9 5950X, 3.8 - 5.2 MHz
    Motherboard
    Asus Prime X570-Pro
    Memory
    64GB [2 x 32GB] DDR4 3200MHz
    Graphics Card(s)
    4GB NVIDIA GEFORCE GTX 1650 Ti
    Sound Card
    On-board SPDIF to 5.1 System + HDMI [5.1 system]
    Monitor(s) Displays
    32" UHD 32 Bit HDR Monitor + 43" UHD 4K 32Bit HDR TV
    Screen Resolution
    2 x 3840 x 2160 @60Hz
    Hard Drives
    1TB M2 SSD OS, 500GB Fast Access SSD, 2 x 8TB Data + Various Externals from 1TB to 4TB, 10TB NAS
    PSU
    NZXT C750 80 PLUS Gold 750W Modular PSU
    Case
    Workstation Case [Matt Black]
    Cooling
    NZXT Kraken X63 280mm CPU Cooler +2x Quiet Case fans
    Keyboard
    Logitech Wireless MX Keys & K400 + others
    Mouse
    Logitech Wireless MX Master 3S
    Internet Speed
    920 MB Down 50 MB Up
    Antivirus
    BitDefender Total Security Pro
    Browser
    Chrome (always run latest Non-Beta)
    Other Info
    Also run ...
    Laptop - Quad 8GB - Windows 10 Pro x64
    Nexus 7 Android tablet x2
    Samsung 10.2" tablet
    Blackview TAB 8 4G Android Tablet c/w Keyboard
    Wacom Intuos Pro Medium Pen Pad
    Wacom Intuos Pro Small Pen Pad
    Wacom Expresskeys Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control
  • Computer type
    Laptop
    System Manufacturer/Model Number
    Dell XPS 17 10750H
    OS
    Windows 11 Pro x64 Latest RP
    CPU
    Intel I7 10750H 5.0GHz
    Motherboard
    Dell XPS
    Memory
    32GB [2x16GB] DDR4 2933 MHz
    Graphics Card(s)
    nVidia GTX1650Ti 4 GB GDDR6
    Sound Card
    Stock [Realtek] 4 Speaker
    Monitor(s) Displays
    17" IPS UHD+ Infinity Edge Touchscreen
    Screen Resolution
    3840 x 2400
    Hard Drives
    2TB M2 NVMe, 4TB External + various 500GB & 1TB External NVMe (also have access to spinner HDD from
    PSU
    Stock
    Case
    Stock XPS Aluminium & Carbon Fibre
    Cooling
    Stock - Active Fan Control
    Keyboard
    Backlit + Various Logitech
    Mouse
    Stock Track Pad + Logitech MX Trackball
    Internet Speed
    72 MB Down 18MB Up
    Browser
    Chrome
    Other Info
    Also run ...
    Laptop - Quad 8GB - Windows 10 Pro x64
    Nexus 7 Android tablet x2
    10.2" tablet
    Sony Z3 Android Smartphone
    Wacom Intuos Pro Medium Pen Pad
    Wacom Intuos Pro Small Pen Pad
    Wacom Expresskeys Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control Pad
    10TB NAS
Be sure to run Spybot during the boot sequence before the trojan is loaded, otherwise, you may never get rid of it... and be more careful where you go on the net... you had an entire page of infections, and the rest of us would rather not become a part of a bot network....
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
LENOVO K450 @3.0GHZ
OS
64-bit Windows 8.1 Pro
CPU
Core(TM) i5 CPU 4330 Haswell @ 3.20GHz
Motherboard
LENOVO
Memory
12.00 GB
Graphics Card(s)
Intel(R) HD Graphics
Sound Card
Intel HD integtrated
Monitor(s) Displays
HP 25' ISP Monitor
Screen Resolution
1900/1020
Hard Drives
(1) ST1000DM003-1CH162 (2) Generic STORAGE DEVICE USB Device (3) Generic STORAGE DEVICE USB Device
Internet Speed
100mb down/10mb up
Well, you have a 'backdoor Trojan' and most likely the Rootkit, TDSS along with it ...

I don't know where or how you downloaded your version of Windows 7, but if it was through a Torrent Server and not an official RTM download then, you would be wise to go to a known 'clean' computer and change all your personal identifying passwords.

Wipe your system clean, and re-install the legit version of Windows that came with your computer.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
MBAM and SAS should be able to get rid of it. Once that's done, download and run Prevx to confirm the integrity of your system.
 

My Computer

Computer Manufacturer/Model Number
Self Assembled
OS
Win7 RTM, XP Pro, Arch Linux, Puppy (Quad boot)
CPU
Core i7 920 (OCed @ 3.8Ghz)
Motherboard
ASUS P6T Dlx
Memory
OCZ Gold 6GB DDR3-1600
Graphics Card(s)
Sapphire Radeon HD 5870 1GB (OCed @ 935/1300)
Sound Card
On-board
Monitor(s) Displays
Samsung 24"
Hard Drives
WD Caviar Black 1TB, WD Velociraptor 300GB, Maxtor 250GB
PSU
Corsair HX620W
Case
Antec 1200
Cooling
Noctua U12P
I'v just downloaded both programs and will run them now. Those other infections came back from lending my external drive to someone with a virus filled pc. My windows 7 came virus-free.
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download

My Computer

Computer Manufacturer/Model Number
Samsung NP530U4B-S02IN
OS
Windows® 8 Pro (64-bit)
CPU
Intel® Core™ i5 Processor 2467M (1.60GHz, 3MB L3 Cache)
Motherboard
Samsung Electronics
Memory
6GB DDR3 System Memory at 1,333MHz (on BD 4GB + 2GB x 1)
Graphics Card(s)
AMD Radeon™ HD7550M 1GB DDR3 (Ext. Graphic)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
35.56cm (14.0) SuperBright 300nit HD LED Display
Screen Resolution
1366x768
Hard Drives
1TB S-ATA II Hard Drive (5400RPM) with ExpressCache 16GB SSD
Internet Speed
sucks
Antivirus
Microsoft Security Essentials
Browser
Google Chrome (Sync enabled)
  • Like
Reactions: AMG
MBAM and SAS didnt work but it seems Avast Antiroot kit has...will confirm later
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download

My Computer

Computer type
Laptop
Computer Manufacturer/Model Number
Acer V3-551G
OS
Windows 7 Ultimate 32bit
CPU
AMD Quad-Core A8-4500M with Turbo Core up to 2.80GHz
Memory
8 GB DDR 3
Graphics Card(s)
AMD Radeon HD 7640G + 7670M (2GB dedicated VRAM)
Sound Card
AMD HD Audio device / Realtek HD Audio
Monitor(s) Displays
15.6" HD LED
Screen Resolution
1366 x 768 (32bit)
Hard Drives
1 TB HDD
Antivirus
AVG 2013 free edition
Browser
Google Chrome
Other Info
WEI scores:

Base score= 5.9

-Processor 6.7
-Memory (RAM) 7.2
-Graphics 5.9
-Gaming Graphics 6.2
-Primary hard disk 5.9
  • Like
Reactions: AMG
I tried all the above and somehow Alureon.gen!U disappeared but Alureon.gen!CT showed up. I had enough so I just did a clean install again.
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Do I really have to change all my passwords? Its atleast a dozen of them.
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download
Would you rather risk someone else having access to your private data - Only you can decide
 

My Computers

System One System Two

  • Computer type
    PC/Desktop
    Computer Manufacturer/Model Number
    ChillBlast - Custom to my design
    OS
    Windows 11 Pro x64 [Latest Release and Release Preview]
    CPU
    Ryzen 9 5950X, 3.8 - 5.2 MHz
    Motherboard
    Asus Prime X570-Pro
    Memory
    64GB [2 x 32GB] DDR4 3200MHz
    Graphics Card(s)
    4GB NVIDIA GEFORCE GTX 1650 Ti
    Sound Card
    On-board SPDIF to 5.1 System + HDMI [5.1 system]
    Monitor(s) Displays
    32" UHD 32 Bit HDR Monitor + 43" UHD 4K 32Bit HDR TV
    Screen Resolution
    2 x 3840 x 2160 @60Hz
    Hard Drives
    1TB M2 SSD OS, 500GB Fast Access SSD, 2 x 8TB Data + Various Externals from 1TB to 4TB, 10TB NAS
    PSU
    NZXT C750 80 PLUS Gold 750W Modular PSU
    Case
    Workstation Case [Matt Black]
    Cooling
    NZXT Kraken X63 280mm CPU Cooler +2x Quiet Case fans
    Keyboard
    Logitech Wireless MX Keys & K400 + others
    Mouse
    Logitech Wireless MX Master 3S
    Internet Speed
    920 MB Down 50 MB Up
    Antivirus
    BitDefender Total Security Pro
    Browser
    Chrome (always run latest Non-Beta)
    Other Info
    Also run ...
    Laptop - Quad 8GB - Windows 10 Pro x64
    Nexus 7 Android tablet x2
    Samsung 10.2" tablet
    Blackview TAB 8 4G Android Tablet c/w Keyboard
    Wacom Intuos Pro Medium Pen Pad
    Wacom Intuos Pro Small Pen Pad
    Wacom Expresskeys Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control
  • Computer type
    Laptop
    System Manufacturer/Model Number
    Dell XPS 17 10750H
    OS
    Windows 11 Pro x64 Latest RP
    CPU
    Intel I7 10750H 5.0GHz
    Motherboard
    Dell XPS
    Memory
    32GB [2x16GB] DDR4 2933 MHz
    Graphics Card(s)
    nVidia GTX1650Ti 4 GB GDDR6
    Sound Card
    Stock [Realtek] 4 Speaker
    Monitor(s) Displays
    17" IPS UHD+ Infinity Edge Touchscreen
    Screen Resolution
    3840 x 2400
    Hard Drives
    2TB M2 NVMe, 4TB External + various 500GB & 1TB External NVMe (also have access to spinner HDD from
    PSU
    Stock
    Case
    Stock XPS Aluminium & Carbon Fibre
    Cooling
    Stock - Active Fan Control
    Keyboard
    Backlit + Various Logitech
    Mouse
    Stock Track Pad + Logitech MX Trackball
    Internet Speed
    72 MB Down 18MB Up
    Browser
    Chrome
    Other Info
    Also run ...
    Laptop - Quad 8GB - Windows 10 Pro x64
    Nexus 7 Android tablet x2
    10.2" tablet
    Sony Z3 Android Smartphone
    Wacom Intuos Pro Medium Pen Pad
    Wacom Intuos Pro Small Pen Pad
    Wacom Expresskeys Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control Pad
    10TB NAS
Do I really have to change all my passwords? Its atleast a dozen of them.
You obviously downloaded something (rootkit) that has taken over your main machine. If you want to continue with Data stealing/password stealing Trojan, you can.... too bad for anyone else that you have on your network (file sharing)

We used to call this 'Ruins' or 'Wareout'. You need to flush your DNS cash,
Open a command prompt....from the Start menu, select Run > In the box/"open field", enter cmd.exe
enter ipconfig /flushdns press 'enter

and


download HostsXpert 4.3 - Hosts File Manager.
  • Unzip HostsXpert 4.3 - Hosts File Manager to a convenient folder such as C:\HostsXpert
  • Click HostsXpert.exe to Run HostsXpert 4.3 - Hosts File Manager from its new home
  • Click "Make Hosts Writable?" in the upper right corner (If available).
  • Click Restore Microsoft's Hosts file and then click OK.
  • Click the X to exit the program.
  • Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
  • Like
Reactions: AMG
Dang trojans... Trojans aren't too difficult to get rid of, don't worry. At least it isn't conflicker. ;)
 

My Computer

Computer Manufacturer/Model Number
eMachines ET1161-07
OS
Windows Vista Ultimate
CPU
AMD Athlon(tm) Dual Core Processor 4050e 2.10GHz
Memory
4GB
Graphics Card(s)
nVidia Geforce 6150SE
Monitor(s) Displays
eMachines E181H
That would be 'Conficker' ;)
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
I thought by doing a clean install all would be well. I have not picked up anything in almost 3 days. But to be extra sure I flushed the DNS and followed the Host file manager steps. Thanks for the help Jacee.
 

My Computer

Computer Manufacturer/Model Number
Acer Aspire E571-MB70
OS
Win 7 RTM Ultimate x86
CPU
Intel Core 2 Duo 2.13 Ghz
Memory
1Gb DDR2 667
Monitor(s) Displays
Samsung 2333
Screen Resolution
1920x1080 (Full HD)
Hard Drives
WD 320GB internal
WD 1TB External
Keyboard
Logitech Cordless Internet Pro
Mouse
Logitech Cordless Optical
Internet Speed
4MB Download
You're welcome AMG, keep it safe :D
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Back
Top