[Resolved] trojan:dos/alureon.e DDS Copy and Paste

[KeiserBKeiser]

I see where you stated that both the application and system zip were the same.  I'm going to attempt to correct that now.

Thank You for your patience and diligence. 

[KeiserBKeiser]

here are the correct two zipped files......located at MEDIAFIRE due to size.

System.zip
http://www.mediafire.com/?n1ehuye8wdwc77p

Application.zip
http://www.mediafire.com/?qknuysk0z41mrqy

I verified that they are NOT the same file size.  Sorry about that, but I have children that were demanding attention earlier.  I've asked their Mom to please keep them distracted while you're assisting me.

[Hoov]

Take a look in the history tab and see if there is a location given for TROJAN:dos/alureon.e . Let me know what it is when you post the log for combofix.

Don't worry about the files. Life happens. I understand about the kids. If it takes a little longer because of them, no worries.

[Hoov]

Also, don't worry about getting the location of TROJAN:dos/alureon.e, it is in the log.

But I need you to go to the admin tools and then to computer management and then to disk managment and tell me what disc is Volume4. That is the location of the Trojan.

[KeiserBKeiser]

Looking through FIREFOX history for the past month, sorted by location name, nothing came up for Trojan:dos/alureon.e


I'm going to do the combo fix thing now.

But wife is screaming to come eat dinner.....Don't they know that you and I are saving the world here......

She's probably going to be yelling at me on December the 21st of 2012......I'll bet you!

[Hoov]

I will be here. I still have about an hour and a half till supper. 

[KeiserBKeiser]

Disk 4 says "I" removable media

[Hoov]

Do you have any media in that drive?

[KeiserBKeiser]

I was going to respond NO.....but I may have used that slot to plug my cell phone into.  Occasionally I'll take a photo and then drop it onto my desktop with a USB cord.  I'm not sure it's the I drive though.

How would I figure that out?

[KeiserBKeiser]

Does this mean my Cell Phone has a virus?  Holy Smokes......This just makes me so irritated.

How you figure this stuff out is amazing.  I appreciate all your work.

[Hoov]

Disconnect all your external devices, except for the monitor, keyboard and mouse, and then reboot the computer. If the computer boots again and you get a notification of the infection again, don't worry about your cell phone. But I do need you to give me a new set of event viewer logs, and tell me approximately what time you rebooted your computer.

I think I know what is going on, if it is, then your other devices are not in danger.

[KeiserBKeiser]

I will have to continue this in the a.m.

Thanks for all your help so far.

[Hoov]

No worries.

[KeiserBKeiser]

Okay so I just did the reboot and started SPYBOT S&D and that finished clean then turned on Microsoft Security Essentials and that did a scan and was clean.

I'm baffled. 

[Hoov]

Connect all the devices you normally have connected, reboot the computer and run the scans again. Let me know what you find.