Can't get rid of Trojan:DOS/Alureon.E Rootkit
My avast security first detected this rootkit but it unable to remove it. Microsoft security essentials is able to identify it and when it prompts me to remove this item. When I click on apply, it starts to remove it, and then an error is encountered and stops midway. It then prompts me to reboot to clean my computer. This does nothing. Using Vista. Tried the TDSSKiller and it only took 1.5 minutes to run with no rootkit identificatiion. Any suggestions?
February 18th, 2012 12:29pm

Use a working machine to download Microsofts Standalone System Sweeper. Although its still at the beta testing stage, it runs very well indeed. Download the appropriate 32-bit or 64-bit version here https://connect.microsoft.com/systemsweeper and burn a CD. Boot from the CD and run a full scan. Anyone who repairs viruses, rootkits and the like should use this program. It also has a nice Windows interface, unlike the older, clumsy Linux equivalents.
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2012 3:17am

Use Malwarebytes Anti-Malware Free edition, that will clean all the infections. http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html Thanks, Being Human
February 20th, 2012 9:21am

Malwarebytes didn't catch it!
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 3:04am

Were still waiting for the new variant of Trojan:DOS/Alureon.E to be given its own classification, and for the Microsoft threat encyclopedia to be updated. The new variant takes control of the operating system by creating its own boot partition rather than by injecting its code into the MBR, so the only way to remove it at this point is to delete the hijacked partition: http://answers.microsoft.com/en-us/protect/forum/protect_scanning/mse-is-unable-to-remove-alureon/ee00d0f9-d5a5-40eb-b464-f29a041ed318?page=2 GreginMich
February 22nd, 2012 10:05am

Probably in the wrong forum but with a Windows XP SP3 machine I used http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller and it worked like a charm to remove the dos/alureon.e Trojan. Even removed the "fake" partition. The partition the Trojan set up was only 2MB. I was still concerned about deleting it so I gave TDSSKiller a try. It worked. It is true though at this time, Security Essentials did not catch it in time before it created a boot sector.
Free Windows Admin Tool Kit Click here and download it now
June 15th, 2012 5:07pm

Struggled with this for two days. MSE: Nada, Norton Power Eraser: Zilch, McAfee Stinger: No result. Alureon took Malwarebytes out behind the building and slapped it around, called it names and made it cry. Manually removing it, attempting to delete the partition, combing through the registry didn't work either, but it ate up a lot of time. TDSSKiller got it done in about 25 seconds. It's now hanging around my neck on a jump drive for the next user that comes to me with one of these nasty little pieces of malware. Thank you very much!
January 7th, 2013 3:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics