Alureon.J stays for the past 2 weeks

[snvasanth]

Hi there,



I have both Microsoft Security essentials and McAffee Antivirus for the past couple of years with no issues. Couple of weeks ago Security essentials started finding Alureon.J and keeps quarantining it at login and atleast once in an hour. Now for the past 1 week, it detects it every time I launch an application or run some exe file. Quarantine or Remove as the default action doesn't make any difference.



TDSSKiller -> this found 6 unsigned other items (not Alureon.J). Removed them. It did find Alureon.J once but I was able to only Skip it. When I found it one another time, I tried deleting it, bunch of 4 or 5 viruses were found. Now, it doesn't find this for the past 1 week.




Malware bytes, Super Antisypware, Malware byte anti rootkit, NPE, Offline Windows Defender from Flash Drive -> nothing helps.



Partition Table from Malware Byte Anti RootKit:

===============================
Partition 0 Type is Other (0xde)
NOT ACTIVE
Starts at LBA: 63, Numsec = 160587

Partition 1 Type is Primary (0x7)
ACTIVE
Starts at LBA: 161792, Numsec = 1536000
bootable

Partition 2 Type is Primary (0x7)
NOT ACTIVE
Starts at LBA: 1697792, Numsec = 975073280

Partition 3 Type is Empty (0x0)
NOT ACTIVE
Starts at LBA: 0, Numsec = 0


Any suggestions?



Thanks,

Vasanth

 

[COLGeek]

Have you tried running Malwarebytes with Windows in Safe Mode to successfully remove?

If so, you may need to try an off-line scanner like the AVG Rescue CD. Get it here:

http/www.avg.com/us-en/avg-rescue-cd

Download the ISO and burn to CD. Boot from CD. Update when asked and perform a full scan.

Remove all found.

Good luck!

 

[mdd1963]

a quick google search says it is a rootkit infection, not easily removed....

http/www.enigmasoftware.com/trojandosalureonj-removal/

and here....

http/www.selectrealsecurity.com/malware-removal-guide

 

[Paul NZ]

What if you run tdsskiller again. Make sure its the latest version too