Trojan.Alureon |
|
|
Danger level:
8
8
Type: Trojan
Common infection symptoms:
- Shows commercial adverts
- Normal system programs crash immediatelly
- Slow internet connection
- System crashes
- Annoying pop-up's
- Slow Computer
How to manually remove Trojan.Alureon
Files associated with Trojan.Alureon infection:
senekaovrgoend.sys
tempo-139671.tmp
dmgmi.exe
dmgdu.exe
tempo-A91.tmp
tempo-705.tmp
dmlye.exe
geyekrxnrwowrd.dll
wow64main.exe
winhbt.exe
winlogon.exe
mfo.exe
tempo-139671.tmp
dmgmi.exe
dmgdu.exe
tempo-A91.tmp
tempo-705.tmp
dmlye.exe
geyekrxnrwowrd.dll
wow64main.exe
winhbt.exe
winlogon.exe
mfo.exe
Trojan.Alureon DLL's to remove:
geyekrxnrwowrd.dll
Trojan.Alureon processes to kill:
Remove Trojan.Alureon registry entries:
RUNNING PROGRAM\tempo-139671.tmp
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dmgmi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\dmgdu.exe
RUNNING PROGRAM\tempo-A91.tmp
RUNNING PROGRAM\tempo-705.tmp
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dmlye.exe
RUNNING PROGRAM\Explorer.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wow64main.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winhbt.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Windows logon process
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mfo.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dmgmi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\dmgdu.exe
RUNNING PROGRAM\tempo-A91.tmp
RUNNING PROGRAM\tempo-705.tmp
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dmlye.exe
RUNNING PROGRAM\Explorer.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wow64main.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winhbt.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Windows logon process
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mfo.exe

Post comment — WE NEED YOUR OPINION!