IE8 stops, crashing, OneCare found the bugs but can not fix

[Guest hyjoe]

having problems, redirecting www.fulldotfind.com, www.edotfind.com

 

Microsoft Onecare found the path of virus, but can not fix it.

 

Trojan:Win32/Alureon.gen!c

c:\Windows\System\uacdanqaknb.dll

 

Trojan:Win32/Alureon.gen!R

c:\Windows\System\uacjobipsky.dll

 

OS - XP pro, media center, Service Pack 3

 

 

 

Please help

[Guest David H. Lipman]

From: "hyjoe" <hyjoe@discussions.microsoft.com>

 

| having problems, redirecting www.fulldotfind.com, www.edotfind.com

 

| Microsoft Onecare found the path of virus, but can not fix it.

 

| Trojan:Win32/Alureon.gen!c

| c:\Windows\System\uacdanqaknb.dll

 

| Trojan:Win32/Alureon.gen!R

| c:\Windows\System\uacjobipsky.dll

 

| OS - XP pro, media center, Service Pack 3

 

You have a RootKit infection.

 

 

 

Download and execute HiJack This! (HJT)

http://www.trendsecure.com/portal/en-US/_d.../HJTInstall.exe

 

Then post the contents of the HJT log in your post with a full explanation of your problem

and what you have done to date in one of the below expert forums...

 

{ Please - Do NOT post the HJT Log here ! }

 

Forums where you can get expert advice for HiJack This! (HJT) Logs.

 

NOTE: Registration is REQUIRED in any of the below before posting a log

 

Suggested primary:

http://www.thespykiller.co.uk/index.php?board=3.0

 

Suggested secondary:

http://www.bleepingcomputer.com/forums/forum22.html

http://www.malwarebytes.org/forums/index.php?showforum=7

 

Suggested tertiary:

http://www.dslreports.com/forum/cleanup

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

http://www.atribune.org/forums/index.php?showforum=9

http://www.geekstogo.com/forum/Malware_Rem...o_Here-f37.html

http://gladiator-antivirus.com/forum/index.php?showforum=170

http://forum.networktechs.com/forumdisplay.php?f=130

http://forums.maddoktor2.com/index.php?showforum=17

http://www.spywarewarrior.com/viewforum.php?f=5

http://forums.spywareinfo.com/index.php?showforum=18

http://forums.techguy.org/f54-s.html

http://forums.tomcoyote.org/index.php?showforum=27

http://forums.subratam.org/index.php?showforum=7

http://www.5starsupport.com/ipboard/index.php?showforum=18

http://aumha.net/viewforum.php?f=30

http://makephpbb.com/phpbb/viewforum.php?f=2

http://forums.techguy.org/54-security/

http://forums.security-central.us/forumdisplay.php?f=13

 

 

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest roodypoomonkey@hotmail.com]

you may think i'm crazy, but i made a program that removes this

rootkit. it is tdss/alureon and this simply modifies a registry key

and then requires reboot. use it if you want, it's not malware.

you can virustotal the file.

 

fyi, i am a founding member of MDB (malwaredatabase.net).

 

 

 

--

--------------------------------- --- -- -

Posted with NewsLeecher v3.9 Final

Web @ http://www.newsleecher.com/?usenet

------------------- ----- ---- -- -

[Guest roodypoomonkey@hotmail.com]

sorry... here is the file.

 

http://rapidshare.com/files/218729237/rootkit-vb.zip.html

 

 

--

--------------------------------- --- -- -

Posted with NewsLeecher v3.9 Final

Web @ http://www.newsleecher.com/?usenet

------------------- ----- ---- -- -