PDA

View Full Version : Infected with a rootkit named Alureon ?



Snajper
2009-10-22, 11:16
Hi there,

my windows security center notificated me that it found a trojan named "Alureon" (dont know the exact name right now).
Now (2 days later) it seems that the notifications aren't regulary. Today 'till now I got no messages.
But, and there is where the fun starts, I did not manage to delete the trojan; I've installed AntiVir, Spybot, SUPERAntispyware and Malwarebytes' Anti-Malware. No found anything; just the notification annoyed me.

I've added a scanlog of Hijackthis, maybe somebody can tell me what I've done wrong (or right). Is it deleted ?

Thanks for your help
Snajper

Snajper
2009-10-22, 14:40
sry for another post, but I just got another message:
"Trojan:Win32/Alureon.gen!U" was detected in

file:
globalroot\Device\Ide\IdePort5\ppqpwrnk\ppqpwrnk\tdlwsp.dll

Snajper
2009-10-23, 15:16
can nobody help me ?

tashi
2009-10-23, 18:04
Hello Snajper,

Please see this FAQ, "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288) and start a new topic copy/pasting the HJT log into it. Do not attach.

Bump and Topic Will Be Closed (http://forums.spybot.info/showpost.php?p=219168&postcount=6)

Best regards.