Win32/Alureon.gen

[elander]

My Windows XP system got MS Malicious Removal Tool installed automatically after running the windows updates yesterday. I don’t know why it is necessary when I already have AVG as well as Spybot or HJT installed on my system.

Anyways, that’s not the problem. My concern is while scanning with this Malicious Removal Tool it detected a Trojan named “Win32/Alureon.gen”. There were no details about its location or threat. So I scanned the system with both AVG and Spybot but they were unable to detect it.

Now how can I delete it and why only MS tool is detecting and not my antivirus? All helps appreciated.

[teenvar83]

I have faced problems with this trojan on my PC earlier and in my case I was able to delete it successfully using avast antivirus. When you will install Avast on your system it will prompt you asking for boot scan and restart. Simply click on “Yes but start later”. Now make sure your internet connection is working, update the Antivirus first and restart the computer. This will start boot scan. During this process Avast will detect that Trojan and delete it completely from the system.

[Qdog]

I too struggling to remove Win32/Alureon.gen. As suggested by few people, I generated Logfile of Trend Micro HijackThis v2.0.2. Here it is:

Scan saved at 11:18:20 AM, on 7/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Razer\Lycosa\razerhid.exe

Somebody please help.

[grundic]

Just wanted to thank marijne, coz I've been struggling with this pesky piece of malware (Alureon.gen) and was finally able to get rid of it with Hitman Pro 3.5! If someone actually uses it, it's not freeware, but you have like a one free run of this awesome software, so it's good enough to get rid of the crap you could have caught.