Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: razmo on April 24, 2009, 08:00:19 AM

Title: Win32TrojanAlureon
Post by: razmo on April 24, 2009, 08:00:19 AM
Hi Guys,

I just installed and updated the latest ver. of Avast Home 4.8.
I am trying in vain to get rid of this god damn Win32TrojanAlureon virus out of my notebook.
Ever since I've been infected, my IE8 is not working properly the computer is slow as hell and freezes all the time.

PLEASE HELP ME
I also get UpdClient.exe Application Error notification while online and right before I shut down the computer.

What should I do?
Thanks in Advance!
Title: Re: Win32TrojanAlureon
Post by: Tarq57 on April 24, 2009, 11:50:21 AM
Looking around for info on this trojan is fairly rewarding, it's been around for a while, so is well known. Removal is a little tricky as it uses randomised multi-character file names, apparently. I would try an anti malware program like Superantispyware, or MBAM. (links below.) It may be a problem going to the sites to download them. Let us know if that is the case.

UpdClient.exe is the ZoneAlarm updater. It is possible the application (firewall) has also been disabled.
What was your previous AV? It will need to be fully uninstalled if Avast is to have a chance at this.

I would run a full scan with Avast, unless you have tried this already, without any improvement.
Then update and run scans with MBAM and/or Superantispyware. Both these are very capable against trojans; I would not be surprised if one of them fixes the problem.
In case ou get real stuck, if you are fairly savvy, here's a page of manual instructions. http://webtoolsandtips.com/remove-trojan/how-to-remove-win32trojanalureon-uninstall-trojanalureon-free/ (http://webtoolsandtips.com/remove-trojan/how-to-remove-win32trojanalureon-uninstall-trojanalureon-free/)
MBAM http://www.malwarebytes.org/mbam.php (http://www.malwarebytes.org/mbam.php)
SAS http://www.superantispyware.com/download.html (http://www.superantispyware.com/download.html)
Title: Re: Win32TrojanAlureon
Post by: razmo on April 24, 2009, 01:57:48 PM
Just ran Live OneCare online full scan. It found it and got rid of it seems.
I appreciate your reply however regarding Superantispyware

Title: Re: Win32TrojanAlureon
Post by: Tarq57 on April 25, 2009, 12:24:48 AM
Just double check that the ZA program you have can update, or at least connect.
That will be one indication it may have been nailed.
Personally I'd run at least one more, different scanner on this PC.
Title: Re: Win32TrojanAlureon
Post by: razmo on April 25, 2009, 04:34:23 AM
the ZA is running on auto update the current v. is 8.0.298.000.
I double checked with the Ad-aware that was already installed and a-squared.
They both indicate the infection is no longer there. Crossing Fingers.