# What will remove a Virus:Win32/Alureon.H infection?

**URL:** <https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923>\
**Category:** Factual Questions\
**Created:** [June 29, 2010, 1:44pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923 "2010-06-29T13:44:23Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\
**Post date:** [June 29, 2010, 1:44pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/1 "2010-06-29T13:44:23Z")

</div>

Apparently, I’ve got one. I use WinXP home, and I’ve run AVG, AdAware, and Malware Bytes. I still seem to have a dirty computer. What do I use to remove this damned dirty hijacking virus?

Symptoms: When I use Google as a search engine, I always get misdirected the first time I click a link, but if I close that window and click on the link a second time, then I go to the real link.

Oh, and of course I need the answer fast. Because otherwise I’m gonna kill someone. Preferably the person and company who made and released that virus.

---

<div class="post-metadata">

**Author:** ![Wordy](https://avatars.discourse-cdn.com/v4/letter/w/4491bb/32.png) [@Wordy](https://boards.straightdope.com/u/Wordy)\
**Post date:** [June 29, 2010, 1:59pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/2 "2010-06-29T13:59:16Z")

</div>

Nuke your computer from orbit and simply reinstall Windows. Once a computer is compromised, that is the only thing I would do.

And NEVER run as admin unless you are installing software.

---

<div class="post-metadata">

**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\
**Post date:** [June 29, 2010, 2:01pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/3 "2010-06-29T14:01:30Z")

</div>

I would prefer not to do anything that drastic. My tech skills are not that great.

I have a new computer in the box, ready to be fired up…but I want to transfer files and such from THIS computer, too, so I don’t want to transfer infected files to the new computer.

---

<div class="post-metadata">

**Author:** ![Wordy](https://avatars.discourse-cdn.com/v4/letter/w/4491bb/32.png) [@Wordy](https://boards.straightdope.com/u/Wordy)\
**Post date:** [June 29, 2010, 2:02pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/4 "2010-06-29T14:02:48Z")

</div>

> [@Lynn\_Bodoni](#):
>
> I would prefer not to do anything that drastic. My tech skills are not that great.
> 
> I have a new computer in the box, ready to be fired up…but I want to transfer files and such from THIS computer, too, so I don’t want to transfer infected files to the new computer.

You are the Administrator of this message board and you don’t know how to reinstall Windows and backup your data?

---

<div class="post-metadata">

**Author:** ![Wordy](https://avatars.discourse-cdn.com/v4/letter/w/4491bb/32.png) [@Wordy](https://boards.straightdope.com/u/Wordy)\
**Post date:** [June 29, 2010, 2:05pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/5 "2010-06-29T14:05:13Z")

</div>

To transfer files from an old computer to a new one, simply mount the hard drive from the old computer into the new computer. If they use different plugs, just buy an external hard drive case for like $15 bucks from your local computer store that plugs into the USB. Then, you can just copy and paste what you want. Run Microsoft Security Essentials (FREE) and use that to scan.

---

<div class="post-metadata">

**Author:** ![running\_coach](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/running_coach/32/15836_2.png) [@running\_coach](https://boards.straightdope.com/u/running_coach)\
**Post date:** [June 29, 2010, 2:09pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/6 "2010-06-29T14:09:52Z")

</div>

Add [Microsoft Security Essentials](http://www.microsoft.com/security_essentials/) to your lineup.  
It’s been getting excellent reviews.

I just migrated to a new machine last week and I moved the files I wanted to keep by putting them on a thumb drive and scanning/cleaning the drive as needed.

Second running a separate user account on your new machine.

---

<div class="post-metadata">

**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\
**Post date:** [June 29, 2010, 2:14pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/7 "2010-06-29T14:14:55Z")

</div>

Yes, I am. I am designated an administrator because of the tools that administrators get. I can do IP bans, total and partial, for instance, and do domain bans. Most of the actual technical stuff is not something that I, personally, have the tools or knowledge for. For instance, if I wanted to make someone a Mod or Admin on this board, I’d have to have someone in the CR office do the actual changes, because a lot of the technical stuff is only done on site. I could change the member title, I think…but that wouldn’t give that person the powers of a Mod or Admin.

The point of message board software these days is to provide tools for the people who run it, so that those people DON’T need Mad Computer Skilz. I know of several message boards that are run completely by people who are less technically skilled than I am.

I am sure that I can learn to reinstall Windows and backup my data. However, I’m old enough that I’ve learned how to do this, that, and the other on various computer systems, and I’m also old enough to know that these skills will become obsolete in the next couple of years. Learning new skills for each new system has completely lost its charm for me. I just want to know what program I need to use to get rid of this damned virus, without learning a new skill set.

---

<div class="post-metadata">

**Author:** ![Wordy](https://avatars.discourse-cdn.com/v4/letter/w/4491bb/32.png) [@Wordy](https://boards.straightdope.com/u/Wordy)\
**Post date:** [June 29, 2010, 2:16pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/8 "2010-06-29T14:16:11Z")

</div>

I would recommend you stop using your computer right now since the Win32/Alureon infection steals your user names, passwords, and banking info: [http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Alureon](http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/Alureon)

Go to a clean computer and change all your passwords.

---

<div class="post-metadata">

**Author:** ![LionelHutz405](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lionelhutz405/32/536_2.png) [@LionelHutz405](https://boards.straightdope.com/u/LionelHutz405)\
**Post date:** [June 29, 2010, 2:59pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/9 "2010-06-29T14:59:01Z")

</div>

A couple more you could try:  
ASquared

> **[Emsisoft - Anti-Malware: Lightweight Malware Protection for the Home](https://www.emsisoft.com/en/anti-malware-home/)**
>
> Emsisoft Anti-Malware for best real-time protection against ransomware and other malware with dual scanner, behaviour blocker and more advanced features.

Spybot Search and Destroy

> **[Home - Spybot Anti-Malware and Antivirus](https://www.safer-networking.org/)**
>
> Spybot offers a unique technology for your security. Far beyond antivirus Spybot searches and destroys unwanted software and protects your privacy.

Also, make sure you boot into safe mode before running any of these removal tools.

---

<div class="post-metadata">

**Author:** ![Duckster](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/duckster/32/1244_2.png) [@Duckster](https://boards.straightdope.com/u/Duckster)\
**Post date:** [June 29, 2010, 3:10pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/10 "2010-06-29T15:10:31Z")

</div>

> [@Wordy](#):
>
> You are the Administrator of this message board and you don’t know how to reinstall Windows and backup your data?

Possessing one set of IT skills as a message board administrator does not equate to being Carnac the Magnificent of IT. Lynn is very good at what she does but cut her some slack that her Funk and Wagnalls is not the latest edition.

---

<div class="post-metadata">

**Author:** ![Cheshire\_Human](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@Cheshire\_Human](https://boards.straightdope.com/u/Cheshire_Human)\
**Post date:** [June 29, 2010, 3:31pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/11 "2010-06-29T15:31:03Z")

</div>

You could try F-Prot:

> **[Home Page – 2023 TIS updates - DATA443-Cyren](https://www.cyren.com/)**
>
> Cyren provides the earliest detection of email, malware, and web cyberattacks to protect over 2 billion users.

I’ve had good results with them, going back to the days of DOS. I collect viruses, like other people collect coins or stamps, and they have always given excellent cleaning results. I can’t say about your particular virus, however, because I don’t have that one in my collection.

---

<div class="post-metadata">

**Author:** ![jjimm](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@jjimm](https://boards.straightdope.com/u/jjimm)\
**Post date:** [June 29, 2010, 4:29pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/12 "2010-06-29T16:29:58Z")

</div>

> [@Duckster](#):
>
> Possessing one set of IT skills as a message board administrator does not equate to being Carnac the Magnificent of IT. Lynn is very good at what she does but cut her some slack that her Funk and Wagnalls is not the latest edition.

Seconded. I do online marketing, as well as designing complex websites, web systems and UIs, but I certainly don’t program anything - and though I have a fair few mad HTML/CSS/JS skillz, but I know jack-shit about computers really. I get calls from friends and relatives going “all my email has disappeared” or “can you help me set up my home office”. And I’m like, so? Just because I use a computer to work doesn’t necessarily mean I know any more than you, and I certainly don’t understand networking. (Though actually I do, a little bit anyway, but I won’t tell them that.)

---

<div class="post-metadata">

**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\
**Post date:** [June 29, 2010, 4:43pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/13 "2010-06-29T16:43:33Z")

</div>

> [@jjimm](#):
>
> Seconded. I do online marketing, as well as designing complex websites, web systems and UIs, but I certainly don’t program anything - and though I have a fair few mad HTML/CSS/JS skillz, but I know jack-shit about computers really. I get calls from friends and relatives going “all my email has disappeared” or “can you help me set up my home office”. And I’m like, so? Just because I use a computer to work doesn’t necessarily mean I know any more than you, and I certainly don’t understand networking

Feel free to pass them my way. I’ll be delighted to sort them out.

For a modest fee. 😃

---

<div class="post-metadata">

**Author:** ![Darth\_Panda](https://avatars.discourse-cdn.com/v4/letter/d/ee7513/32.png) [@Darth\_Panda](https://boards.straightdope.com/u/Darth_Panda)\
**Post date:** [June 29, 2010, 4:50pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/14 "2010-06-29T16:50:46Z")

</div>

I would take your question here:

> **[Virus, Trojan, Spyware, and Malware Removal Help Forum](https://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-help/)**
>
> Virus, Trojan, Spyware, and Malware Removal Help: One of the last bastions of computer security warriors and healers. Bring your troubled PC here for top-of-the-line help with Malware Analysis and Removal by our trained professionals. This forum is...

---

<div class="post-metadata">

**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\
**Post date:** [June 29, 2010, 5:08pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/15 "2010-06-29T17:08:45Z")

</div>

It appears that Microsoft Security Essentials has found and removed the problem. I no longer get misdirected on Google links. I have been crazy busy with changing all my passwords.

My thanks for all the comments and help offered. I still have a post that’s several days old on Bleeping Computer, and I think that I’ll leave it up, in case there’s something that I didn’t catch.

---

<div class="post-metadata">

**Author:** ![Cheshire\_Human](https://avatars.discourse-cdn.com/v4/letter/c/5f8ce5/32.png) [@Cheshire\_Human](https://boards.straightdope.com/u/Cheshire_Human)\
**Post date:** [June 29, 2010, 5:29pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/16 "2010-06-29T17:29:01Z")

</div>

> [@Quartz](#):
>
> Feel free to pass them my way. I’ll be delighted to sort them out.
> 
> For a modest fee. 😃

MODEST? What are you, some kind of slut? Do it for a ridiculously usurious fee, like I do!

---

<div class="post-metadata">

**Author:** ![robcaro](https://avatars.discourse-cdn.com/v4/letter/r/df705f/32.png) [@robcaro](https://boards.straightdope.com/u/robcaro)\
**Post date:** [June 29, 2010, 8:47pm UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/17 "2010-06-29T20:47:48Z")

</div>

Look at this link and download the remover:

[http://fix-slow-computer.com/spyware/another-name-of-alureon-rootkit-win32alureon-h/](http://fix-slow-computer.com/spyware/another-name-of-alureon-rootkit-win32alureon-h/)

---

<div class="post-metadata">

**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\
**Post date:** [June 30, 2010, 12:29am UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/18 "2010-06-30T00:29:52Z")

</div>

> [@Lynn\_Bodoni](#):
>
> It appears that Microsoft Security Essentials has found and removed the problem.

If it comes back in a day or so, you likely have a rootkit that is hiding files on your hard drive. I second the recomendation for [bleepingcomputer.com](http://bleepingcomputer.com), they are tops for removing rootkits.

---

<div class="post-metadata">

**Author:** ![Lynn\_Bodoni](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@Lynn\_Bodoni](https://boards.straightdope.com/u/Lynn_Bodoni)\
**Post date:** [June 30, 2010, 4:42am UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/19 "2010-06-30T04:42:36Z")

</div>

Yes, I’m leaving my question on Bleeping Computer up.

---

<div class="post-metadata">

**Author:** ![flano1](https://avatars.discourse-cdn.com/v4/letter/f/f14d63/32.png) [@flano1](https://boards.straightdope.com/u/flano1)\
**Post date:** [June 30, 2010, 5:00am UTC](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923/20 "2010-06-30T05:00:18Z")

</div>

two.

Microsoft security essentials is ( gulp ) excellent.

Download Combofix. It is free and will eat up all your virussssess.

[Next page](https://boards.straightdope.com/t/what-will-remove-a-virus-win32-alureon-h-infection/544923.md?page=2)
