First post here, and what a doozy of a virus my brand new system has picked up - the Win64 Alureon B@mbr. It seemed to have been gotten rid of by Avast (although in Safe Mode, I had to just delete it, as when I selected the Move to Chest option, it wouldn’t start up - might this be to do with the fact that it appears to be running in demo in Safe Mode, even though I renewed my licence recently?), and I used MBAM and OTP afterwards to see if anything was turned up, but looking at these threads, I was just waiting for it re-occur…I turn my PC on this morning, and it has.
I’ve currently sitting in Safe Mode. Slightly worryingly, MBAM turns up nothing (and I’ve no idea how to read OTP’s results ). Avast, however, has now picked up a new variant: Win64:Alureon-C [Trj] . I tried moving it to the virus chest, but as last time, got this message: Virus Chest Server not running. RPC communication failed. Even thought I’ve deleted it again, I suspect a new variant will be back soon, and so on and so on. Dear me, what a mess.
I’m a newcomer to dealing with malware, so let me know if I’ve neglected to mention anything obvious! I’ve attached the log from MBAM, but the OTS one proved to be too big, so here it is linked from my own webspace: http://nickparton.co.uk/misc/
welcome to the forum. lets hope someone check your log there I’m no expert on them.
but i could recommend you to do a boot scan sens you report avast is detected malware but unable to do anything with them.
Ruddy awesome. Thanks to everyone for their help and advice - especially Essexboy, of course! I genuinely appreciate the assistance in digging myself out of this largely self-inflicted hole. Hopefully, I can pass the favour on at some point. Other than an issue with Avast that I think I’ve found an existing thread to help me with, I think I’m all clear…
). Avast, however, has now picked up a new variant: Win64:Alureon-C [Trj] . I tried moving it to the virus chest, but as last time, got this message: Virus Chest Server not running. RPC communication failed. Even thought I’ve deleted it again, I suspect a new variant will be back soon, and so on and so on. Dear me, what a mess.