Win32/Alureon.EC
Win32/Alureon.EC is a data-stealing Trojan that allows attackers to intercept incoming and outgoing Internet traffic in order to collect personal information such as usernames, passwords, credit card data, etc. Win32/Alureon.EC may also enable attackers to forward malicious data to the affected computer system. Win32/Alureon.EC may change DNS settings on the host computer to enable the attacker to execute these tasks. Therefore, it may be necessary to reconfigure DNS settings after Win32/Alureon.EC is deleted from the infected PC. Remove Win32/Alureon.EC from the corrupted machine by using a reputable malware removal tool.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%Documents and Settings%\[UserName]\Start Menu\ Scan.lnk
File name: %Documents and Settings%\[UserName]\Start Menu\ Scan.lnkFile type: Shortcut
Mime Type: unknown/lnk
%Program Files%\Protection Center\protext.dll
File name: %Program Files%\Protection Center\protext.dllFile type: Dynamic link library
Mime Type: unknown/dll
Registry Modifications
HKEY..\..\{CLSID Path}HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunHKEY_LOCAL_MACHINE \Software \Microsoft \Windows \CurrentVersion \RunServicesOnceHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'Protection Center'vHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'tmp'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce 'SelfdelNT'HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 'Shell' = '%UserProfile%\Application Data\antispy.exe'
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.