Nasty Virus

Sailor Steve · 04-25-11, 12:25 PM

Okay, MSE says the actual name of the thing was WinNT/Alureon.s.

Quote:

Originally Posted by Castout

Need to create backup Steve. Regularly like once a week. Ideally to external HDD.

Did you miss the part where I do back up my work to two different externals? Sometimes I forget, because I'm old, but I know I need to to do that.

Sailor Steve · 04-25-11, 04:12 PM

Good news! I figured out where the Favorites thing was, and now it's unhidden as well!

I have almost all my files back.

Jan Kyster · 04-25-11, 06:10 PM

That's odd MSE did let it pass? Do you keep updates on auto?
http://www.microsoft.com/security/po...NT%2FAlureon.S

Safe removal of above trojan horse: http://www.removespywaresupport.com/...alureon-s.html

Sailor Steve · 04-26-11, 12:30 AM

Not odd at all if I accidentally told it too. Idiot.

I've now run MSE, SpyBot and Malwarebytes, and it mostly seems to be back to normal. I have a couple of registry fixers, and will run those later tonight.

Jan Kyster · 04-26-11, 01:20 AM

Sailor Steve just called me an idiot!

But still I think MSE should have prevented the thing installing itself, even if you said "yes, please"? Strange...

/edit:
Found a nice guide to remove the Alureon here (post #3 and #5): http://forums.techguy.org/virus-othe...reon-even.html

Sailor Steve · 04-26-11, 12:16 PM

Just ran the one from post #3 - no threats detected.

Am running the online scan from post #5 now.

I have all my files, folders and histories back. The only problem I'm having right now is that every once in awhile Windows Explorer will malfunction, locking everything up and forcing me to reboot the hard way. I'm looking for solutions.

One more thing: What on Earth does DrWatson do other than to tell me it has encountered a problem and needs to shut down?

nikimcbee · 04-26-11, 02:18 PM

Red seat for you sailor.

(sorry couldn't resist

)

Jan Kyster · 04-26-11, 04:07 PM

Quote:

Originally Posted by Sailor Steve

One more thing: What on Earth does DrWatson do other than to tell me it has encountered a problem and needs to shut down?

Ah! Good old Dr. Obvious!

Perhaps try running a System File Check: http://www.sevenforums.com/tutorials...e-checker.html

Won't do any harm and may solve your IE problems... but good to hear you weren't badly hurt!

04-25-11, 04:12 PM	#2
Sailor Steve Eternal Patrol Join Date: Nov 2002 Location: High in the mountains of Utah Posts: 50,369 Downloads: 745 Uploads: 249	Good news! I figured out where the Favorites thing was, and now it's unhidden as well! I have almost all my files back. __________________ “Never do anything you can't take back.” —Rocky Russo

04-26-11, 12:30 AM	#4
Sailor Steve Eternal Patrol Join Date: Nov 2002 Location: High in the mountains of Utah Posts: 50,369 Downloads: 745 Uploads: 249	Not odd at all if I accidentally told it too. Idiot. I've now run MSE, SpyBot and Malwarebytes, and it mostly seems to be back to normal. I have a couple of registry fixers, and will run those later tonight. __________________ “Never do anything you can't take back.” —Rocky Russo

04-26-11, 12:16 PM	#6
Sailor Steve Eternal Patrol Join Date: Nov 2002 Location: High in the mountains of Utah Posts: 50,369 Downloads: 745 Uploads: 249	Just ran the one from post #3 - no threats detected. Am running the online scan from post #5 now. I have all my files, folders and histories back. The only problem I'm having right now is that every once in awhile Windows Explorer will malfunction, locking everything up and forcing me to reboot the hard way. I'm looking for solutions. One more thing: What on Earth does DrWatson do other than to tell me it has encountered a problem and needs to shut down? __________________ “Never do anything you can't take back.” —Rocky Russo

04-26-11, 02:18 PM	#7
nikimcbee Fleet Admiral Join Date: Jul 2003 Location: Patroling the Slot. Posts: 17,952 Downloads: 90 Uploads: 0	Red seat for you sailor. (sorry couldn't resist) __________________

04-25-11, 06:10 PM	#3
Jan Kyster Ace of the Deep Join Date: Oct 2006 Posts: 1,151 Downloads: 152 Uploads: 0	That's odd MSE did let it pass? Do you keep updates on auto? http://www.microsoft.com/security/po...NT%2FAlureon.S Safe removal of above trojan horse: http://www.removespywaresupport.com/...alureon-s.html

04-26-11, 01:20 AM	#5
Jan Kyster Ace of the Deep Join Date: Oct 2006 Posts: 1,151 Downloads: 152 Uploads: 0	Sailor Steve just called me an idiot! But still I think MSE should have prevented the thing installing itself, even if you said "yes, please"? Strange... /edit: Found a nice guide to remove the Alureon here (post #3 and #5): http://forums.techguy.org/virus-othe...reon-even.html