Win32:Alureon-EC[Rtk]

Viruses and worms
21

Very true combofix is powerfull and sometimes things can go wrong - but most helpers have trained for this eventuality and know how to recover

@matrixdude171

Could you run and post the following log for me and I will assist

To ensure that I get all the information this log will need to be uploaded to Mediafire and post the sharing link.

Download OTL to your Desktop

[]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
[]Under the Custom Scan box paste this in

netsvcs
%SYSTEMDRIVE%*.exe
%SYSTEMDRIVE%\eventlog.dll /s /md5
%SYSTEMDRIVE%\scecli.dll /s /md5
%SYSTEMDRIVE%\netlogon.dll /s /md5
%SYSTEMDRIVE%\cngaudit.dll /s /md5
%SYSTEMDRIVE%\sceclt.dll /s /md5
%SYSTEMDRIVE%\ntelogon.dll /s /md5
%SYSTEMDRIVE%\logevent.dll /s /md5
%SYSTEMDRIVE%\iaStor.sys /s /md5
%SYSTEMDRIVE%\nvstor.sys /s /md5
%SYSTEMDRIVE%\atapi.sys /s /md5
%SYSTEMDRIVE%\IdeChnDr.sys /s /md5
%SYSTEMDRIVE%\viasraid.sys /s /md5
%SYSTEMDRIVE%\AGP440.sys /s /md5
%SYSTEMDRIVE%\vaxscsi.sys /s /md5

[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

22

Hi pnt,

I would not endorse for the average user to dabble in ComboFix without the assistence of a qualified malware eliminator. If you venture out to do it as an experienced user ask for the help from some-one who is qualified to analyze and make a removal script. Just like HijackThis these are malware analyzing tools that are dangerous in the hands of those that do not know exactly what they are doing. There are sources online to determine what to keep or what to fix, but these must always be backed up by the knowledge of an experienced user,

polonus

23

I’m thankful for the help, but I used combofix and it got rid of the problem. I had a bit of trouble getting it to run since because it says there’s a date error, but the real culprit was a program that came with my computer called NTI backup, and I got rid of that too. Since then I’ve had no issues, but I’ll run OTL and post the logs anyways. It only made a OTL log, not an extra log and I don’t know why, I ran it twice to be sure.

http://www.mediafire.com/?vlamlzkdkum

24

Hi polonus/essexboy,

Thank you for your responses. Even I don’t recommend that a novice use a dangerous product unassisted and that’s why I talked about the ComboFix tutorial. But I do endorse Avast for one and all for keeping the computer safe from viruses etc.

However, I do feel that somewhere one has to learn to take a risk that may fructify into something beautiful. I am not a computer expert but have been using a computer for donkeys ages and everything I learned I did it by trial and error. But that’s me. My belief is that if I don’t take responsibility for my own actions, no one else will.

Further, a novice becomes an experienced user only with time and by being involved in trial and error and also by getting out of the shadows of masters. On the net we can find all kinds of products/services, and it all depends on ones own judgment what to use and how to use it. Over the years I have learnt many tricks using my own judgment. I have made my mistakes but I have managed to survive without complicating my life :slight_smile:

Bless you all.

25

Combofix got the lot and left nothing behind

To remove all the tools… Run OTL and hit the cleanup button.
This will remove combofix and itself

26

Thank you for all the help you’ve given me, and that it’s all clean now! :smiley:

27

Hello, I recently had this same problem and, after reading this thread ran ComboFix. The problem seems to have been resolved, but I was wondering if someone could take a look at the logs. I have the OTL.txt file: http://www.mediafire.com/?nzjfywey5rw, Extras.txt file: http://www.mediafire.com/?g42nzzmjydz, and the ComboFix log: http://www.mediafire.com/?anmmzqwl43a. Would someone be willing to take a look and let me know? Thanks a bunch.