locked
OneCare cannot remove Virus:Win32/Alureon.H

    Frage

  • If OneCare cannot remove this virus, what are my next steps? I cannot access internet for help with this particular infected PC. I assume I will save what I can in SafeMode and use startup disks. If all else fails...buy a Mac.
    Dienstag, 20. April 2010 16:58

Antworten

Alle Antworten

  • You can contact support for help with malware One Care is unable to remove. How to reach support - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

    Jim


    Microsoft MVP Consumer Security - Forum Moderator - Live One Care - Live Mesh - Microsoft Security Essentials
    Dienstag, 20. April 2010 17:58
    Moderator
  • Alureon is a very nasty virus - it is very difficult to remove as it involves root kit components and usually also opens the door for many other infections.
    http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Alureon http://en.wikipedia.org/wiki/Alureon

    http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

     

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Dienstag, 20. April 2010 18:01
    Moderator
  • Hi, I went for full reinstall option. This virus is sticky and I'm not so sure it can be completly removed without a reinstall. If somebody has succeeded please let me know.
    Freitag, 16. Juli 2010 13:35
  • Hi, I went for full reinstall option. This virus is sticky and I'm not so sure it can be completly removed without a reinstall. If somebody has succeeded please let me know.


    For this infection the format and full Windows install is the best solution at this point.

    -steve


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Freitag, 16. Juli 2010 15:23
    Moderator
  • Hi, I have the same Virus, but there is a twist My Norton Security said "Backdoor.Tidserv!inf detected by Auto_Protect" 3 times with 3 more Trojens after it. Now, the Status on all of them is "Quarantined". Now i downloaded Microsoft Security Essentials did a full scan came out with "Exploit:Java" 3 times with different numeration and the fourth one is "VirusWin32/Alureon.H" . So i tried to clean the computer but Norton blocks the action. I actually checked the History on Norton and it's been blocking MSE actions the whole day. Should I still worry because MSE detected them or leave it alone? I mean i herd that this virus can steal info and i have a lot of valuables it can steal. Or should i get Norton to let MSE clean it?   Thank you!
    Donnerstag, 29. Juli 2010 06:45
  • Hi, I have the same Virus, but there is a twist My Norton Security said "Backdoor.Tidserv!inf detected by Auto_Protect" 3 times with 3 more Trojens after it. Now, the Status on all of them is "Quarantined". Now i downloaded Microsoft Security Essentials did a full scan came out with "Exploit:Java" 3 times with different numeration and the fourth one is "VirusWin32/Alureon.H" . So i tried to clean the computer but Norton blocks the action. I actually checked the History on Norton and it's been blocking MSE actions the whole day. Should I still worry because MSE detected them or leave it alone? I mean i herd that this virus can steal info and i have a lot of valuables it can steal. Or should i get Norton to let MSE clean it?   Thank you!


    You're off topic for this forum, which is dedicated to Windows Live OneCare

    You should never have more than one security product installed on the PC providing active protection/scanning. This can cause performance issues, system instability, and can hinder the effectiveness of both products at providing protection.

     

    See: http://social.answers.microsoft.com/Forums/en-US/msescan/thread/87058857-d181-4019-a723-efd9a49d9275
     
    Start here - https://support.microsoftsecurityessentials.com/
    and select the link that says - I think my computer is infected - and then select the support option for phone (or email if phone is not offered for your region)
     
    Or for email support in English: https://consumersecuritysupport.microsoft.com/eform.aspx?productKey=pcsafetymalware&ct=eformts&supportLinkeformts=E-mail
     
    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    -steve


    ~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
    Montag, 16. August 2010 12:38
    Moderator