OneCare cannot remove Virus:Win32/Alureon.H

Geblokkeerd

20 April 2010 16:58

0

If OneCare cannot remove this virus, what are my next steps? I cannot access internet for help with this particular infected PC. I assume I will save what I can in SafeMode and use startup disks. If all else fails...buy a Mac.

Semua Balasan

20 April 2010 17:58

Moderator

0

You can contact support for help with malware One Care is unable to remove. How to reach support - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

Jim
Microsoft MVP Consumer Security - Forum Moderator - Live One Care - Live Mesh - Microsoft Security Essentials
20 April 2010 18:01

Moderator

0
Alureon is a very nasty virus - it is very difficult to remove as it involves root kit components and usually also opens the door for many other infections.
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Alureon http://en.wikipedia.org/wiki/Alureon

http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller

If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.
~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
- Ditandai sebagai Jawaban oleh Stephen BootsMVP, Moderator 20 April 2010 18:01
16 Juli 2010 13:35

0

Hi, I went for full reinstall option. This virus is sticky and I'm not so sure it can be completly removed without a reinstall. If somebody has succeeded please let me know.
16 Juli 2010 15:23

Moderator

0

Hi, I went for full reinstall option. This virus is sticky and I'm not so sure it can be completly removed without a reinstall. If somebody has succeeded please let me know.

For this infection the format and full Windows install is the best solution at this point.

-steve
~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~
29 Juli 2010 6:45

0

Hi, I have the same Virus, but there is a twist My Norton Security said "Backdoor.Tidserv!inf detected by Auto_Protect" 3 times with 3 more Trojens after it. Now, the Status on all of them is "Quarantined". Now i downloaded Microsoft Security Essentials did a full scan came out with "Exploit:Java" 3 times with different numeration and the fourth one is "VirusWin32/Alureon.H" . So i tried to clean the computer but Norton blocks the action. I actually checked the History on Norton and it's been blocking MSE actions the whole day. Should I still worry because MSE detected them or leave it alone? I mean i herd that this virus can steal info and i have a lot of valuables it can steal. Or should i get Norton to let MSE clean it? Thank you!
16 Agustus 2010 12:38

Moderator

0

Hi, I have the same Virus, but there is a twist My Norton Security said "Backdoor.Tidserv!inf detected by Auto_Protect" 3 times with 3 more Trojens after it. Now, the Status on all of them is "Quarantined". Now i downloaded Microsoft Security Essentials did a full scan came out with "Exploit:Java" 3 times with different numeration and the fourth one is "VirusWin32/Alureon.H" . So i tried to clean the computer but Norton blocks the action. I actually checked the History on Norton and it's been blocking MSE actions the whole day. Should I still worry because MSE detected them or leave it alone? I mean i herd that this virus can steal info and i have a lot of valuables it can steal. Or should i get Norton to let MSE clean it? Thank you!

You're off topic for this forum, which is dedicated to Windows Live OneCare.

You should never have more than one security product installed on the PC providing active protection/scanning. This can cause performance issues, system instability, and can hinder the effectiveness of both products at providing protection.

See: http://social.answers.microsoft.com/Forums/en-US/msescan/thread/87058857-d181-4019-a723-efd9a49d9275

Start here - https://support.microsoftsecurityessentials.com/
and select the link that says - I think my computer is infected - and then select the support option for phone (or email if phone is not offered for your region)

Or for email support in English: https://consumersecuritysupport.microsoft.com/eform.aspx?productKey=pcsafetymalware&ct=eformts&supportLinkeformts=E-mail

If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

-steve
~ Microsoft MVP Windows Live ~ Windows Live OneCare| Live Mesh|MS Security Essentials Forums Moderator ~