w32/alureon.co virus, need help (updated with hijack and malwarebytes)

aliEnRIK

Assuming youve now reset the hosts file, id say your clean (Never a guarantee, just what I believe)

Give it a spring clean
Download CCLEANER
http://www.piriform.com/ccleaner/download/slim
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)

and id say your good to go (Unless youve any questions?)

aliEnRIK

silkyuk9 wrote: »

when i do that it asks me

which user account do you want to use this program to run.

current user, or the following user, but the following users requires a user name and password, which i do not know, i put in admin for both but it says login failure.

Glary resets it at some point if memory serves

Download GLARY UTILITIES
http://www.glaryutilities.com/download/gusetup_slim.exe
Run the ONE CLICK scan
Goto MODULES / SYSTEM TOOLS / WINDOWS STANDARD TOOLS / then run SYSTEM FILE CHECKER

silkyuk9

great so im just about there, now i only have microsoft essentials running, is there anything else i need to keep out the nasties, i have malwarebytes but is not running i only start it to sca pc, should i have this running all the time?

anything else i can dl that will help my pc monitor attacks??

aliEnRIK

silkyuk9 wrote: »

great so im just about there, now i only have microsoft essentials running, is there anything else i need to keep out the nasties, i have malwarebytes but is not running i only start it to sca pc, should i have this running all the time?

anything else i can dl that will help my pc monitor attacks??

You still ned to reset that hosts file, so run glarys (if it doesnt reset then let us know)

malwarebytes is just an 'on demand' scanner. run it every few weeks or whatever (Remember to UPDATE it first)

I noticed you have vuse and limewire. Almost certainly one of those (probably limewire) is whats caused you to get infected

When you download anything, SCAN it with your antivirus before actually opening it (Still no guarantee if the av doesnt recognise it as a trojan, but its the best you can do)

To prevent webpage based attacks id recommend using FIREFOX
http://www.mozilla-europe.org/en/firefox/
with the NOSCRIPT plugin
https://addons.mozilla.org/en-US/firefox/addon/722/
(needs to be installed from WITHIN firefox)
NOSCRIPT auto blocks ALL webpages. So you manually unlock them (it remembers, so you dont need to do it more than once unles the actual webpage is reprogrammed)
It also prevents redirects to bogus webpages etc

silkyuk9

aliEnRIK wrote: »

You still ned to reset that hosts file, so run glarys (if it doesnt reset then let us know)

malwarebytes is just an 'on demand' scanner. run it every few weeks or whatever (Remember to UPDATE it first)

I noticed you have vuse and limewire. Almost certainly one of those (probably limewire) is whats caused you to get infected

When you download anything, SCAN it with your antivirus before actually opening it (Still no guarantee if the av doesnt recognise it as a trojan, but its the best you can do)

To prevent webpage based attacks id recommend using FIREFOX
http://www.mozilla-europe.org/en/firefox/
with the NOSCRIPT plugin
https://addons.mozilla.org/en-US/firefox/addon/722/
(needs to be installed from WITHIN firefox)
NOSCRIPT auto blocks ALL webpages. So you manually unlock them (it remembers, so you dont need to do it more than once unles the actual webpage is reprogrammed)
It also prevents redirects to bogus webpages etc

ive run glarys but not sure what its done buts its run and scanned things so im hoping thats sorted. can i delite all those things ive downloaded now or will i need them again at some point.

silkyuk9

limewire has been uninstalled last week daughter put that on and i took it off, maybe there is still files in my pc i will check, Vuse is on but i do not use it i will uninstall now.

aliEnRIK

silkyuk9 wrote: »

ive run glarys but not sure what its done buts its run and scanned things so im hoping thats sorted. can i delite all those things ive downloaded now or will i need them again at some point.

See how you get on

You can remove everything if you like, but id definitely keep malwarebytes if I were you (And ccleaner for a clean every now and then)

silkyuk9

aliEnRIK wrote: »

See how you get on

You can remove everything if you like, but id definitely keep malwarebytes if I were you (And ccleaner for a clean every now and then)

thanks very much, so is microsoft essentials enough for defence anything else i can dl to use in the background?

aliEnRIK

silkyuk9 wrote: »

thanks very much, so is microsoft essentials enough for defence anything else i can dl to use in the background?

ALL the av programs are very poor with malware. So use malwarebytes periodically

If you want to be safer then I personally also use SPYBOT. mainly for its IMMUNISE feature (Auto blocks known nasty webpages and links), and run a scan every now and then (again, needs UPDATING first)
If you run spybot, DONT use its TEATIMER mode when installing

best thing you can do is play safe. Dont use dodgy P2P programs like limewire (Obviously)
Dont click dodgy links in msn messenger or emails
If you think anythings dodgy (Like an email attachement for example), put it on your desktop and SCAN it before actually opening it
NOSCRIPT would stop you getting infected online if you use it wisely. If you dont then be careful about visiting dodgy websites

silkyuk9

aliEnRIK wrote: »

ALL the av programs are very poor with malware. So use malwarebytes periodically

If you want to be safer then I personally also use SPYBOT. mainly for its IMMUNISE feature (Auto blocks known nasty webpages and links), and run a scan every now and then (again, needs UPDATING first)
If you run spybot, DONT use its TEATIMER mode when installing

best thing you can do is play safe. Dont use dodgy P2P programs like limewire (Obviously)
Dont click dodgy links in msn messenger or emails
If you think anythings dodgy (Like an email attachement for example), put it on your desktop and SCAN it before actually opening it
NOSCRIPT would stop you getting infected online if you use it wisely. If you dont then be careful about visiting dodgy websites

cheers very much for all your help