[Will restoring my computer to original state fix?]

Yes, it is the same computer. I had yet another issue prior to July that I came here for help too. I appreciated the help regarding the steps to take to solve the issues(s). However, no one explains in enough detail how to get to these logs or run these programs. Some of us have no tech experience at all. I remember being ticked off they couldn't include a written manual when I bought this machine. Yes, the guide is IN the computer. How clever. What if you can't figure out how to start it up?  

 

Honestly, it's very frustrating. In my case I'm thinking that going back to the beginning point again may be my best option. I posted this to confirm that any and all virus/malware will be gone. (provided I only backup what you suggest).  I really appreciate your reply. It's sounds like it will work out okay as long as I'm careful about what I backup and save. I only have a few letters and photos so it won't be a lot of data. I do plan to reinstall ITunes, Skype, Google Earth, and Malware Anti-Malware programs once it's clean.

 

Thanks very much for your time and reply.

[Will restoring my computer to original state fix?]

I have had problems ongoing for months. My biggest concerns now are my Firewall "can't" be set to recommended settings, the Windows Security Center Service is OFF (and you can't turn on), all of my "Important"  Windows Security Updates have failed over the last few months. Additionally, I experience blue screen crashes periodically and have had and may still have the Win 64 alureon.gen ! A virus.

 

I just found out from my own computer instruction manual if I hit the F10 on my Sony Vaio then it will take me to a process that restores the computer to the day I got it. So, I presume it basically wipes it clean.

 

My question is, if I do that will that really clean everything out bad and malicious that is in there now and allow my Windows Security Updates to come through again?

 

Thank-you in advance very much! Jayne

[I am sick of this hidden virus...."alureon" Please advise, thanks.]

^^^ Just realized I hadn't yet read those hyper links you posted Maniac.....I'll get to checking those right out. Jayne

[I am sick of this hidden virus...."alureon" Please advise, thanks.]

Thanks very much for the info.....depressing as it is! I do have another computer (but would be limited on my usage). The only bit of good news is I have an unopened brand new Windows 7 in the house Somewhere along the line, (probably dealing with the Iyogi people when I had a service contract with them) I was told my Windows 7 program was corrupted-- hence buying the new Windows 7.

 

I couldn't see any obvious changes in my operational system except for the occasional blue screen crash and decided to not install the new Windows 7 program. Also, I kind of hate the idea of wiping everything on my computer. But this Alureon has been hanging around sometime and I'm fed up with it.

 

I have another question for you. If I completely un-install my Windows 7 and put the new Windows 7 on, then how can I be sure I won't pick up this alureon again? My family tells me the reason I end up with virus's and they don't is due to the fact I surf so many sites, albeit sometimes for only a few seconds. Maybe 100 a week, just looking up information, or Googling things of interest. I try to be careful and look at the address to ensure it doesn't have a weird name...but nothing is full proof. Anyway, didn't mean to get off track. Guess I'm asking if to be safe I'm going to have to limit myself to 3 or 4 favorite sites and that's it? Appreciate your help and sorry that I'm bit slow with all the computer know how. Jayne

 

PS. Almost forgot, if you think it's best, would someone like yourself mind helping me with instructions on un-installing Windows 7 and re-installing the new one? Thanks again, Jayne

[I am sick of this hidden virus...."alureon" Please advise, thanks.]

Hello! See title....I have been getting Microsoft warnings of Malicious Software on my computer along with a message that Microsoft has been only able to partially remove the threat. This happens more often lately. I have run both Malwarebytes (always finds a threat, says removed, not true), and Avast! which doesn't even find any threats at all.

 

I'm a computer novice, but even I found the Virus in question. It's the same one that has been there for weeks. It is called Alureon/. It doesn't appear to effect day to day operations of the computer itself, but who knows what it is doing in the background.

 

Why Malwarebytes is able to locate and say it's removed but it's still there, I don't know. I read that a download of Kaspersky TDSS Killer will solve the issue. Can you tell me if this is accurate? I want to fix this without having to resort to calling IYogi or taking my computer somewhere. Thank-you so much.

 

Jayne.

 

PS Can you advise how dangerous you think this alureon is? I don't keep banking info online, but have email, other various password accounts, etc.

[I'm getting told different things and want to learn/virus prob.]

Dear Maurice, you can go ahead and close the topic now. I waited for my husband who does have limited time but did look at your instructions as he promised me a few minutes ago. He was not confident he could run everything properly and expressed a secondary concern over logs that are copy/paste from my computer onto a public forum. So, what am I to do?

He has already ordered a brand new Windows 7 O/S Premium Home Edition from Amazon to be delivered Tuesday. So, I will have to wipe everything out. The SOB hackers win because they found someone (me) who is not well versed on computers and doesn't know a quarantine from a run time error or java script and now I have to start from square one.

It is an utterly defeated feeling. I really like this site. There is a lot to learn, but this site is very intimidating to new computer users. I feel like an idiot reading many of threads and not understanding many of the terms and solutions bandied about like it's everyday talk.I will definitely look at some of the threads and maybe pick up a few basic things that way for the future.

I thought I saw some sort of advanced consumer premium help offered here at a cost. That's what I should have asked you about. Pay someone to go in and remotely look at my computer and fix it, end of problem. I picked a lousy company in IYogi, 300 dollars down the drain, but you would think there would be a market for others to do this remote fixing of computers too?

I will say it is all interesting, even if it is far too advanced for me to comprehend at the moment. I surf Ebay, Amazon, and Facebook, maybe a little You/tube. That's it. Not exactly a million places for virus's to sneak in but guess I screwed up somewhere. Live and learn.

Thanks for all your time and all you suggested/posted. If I have some questions about computers, I'll remember this site, obviously some extremely smart computer techs here. Best to you, Jayne

[I'm getting told different things and want to learn/virus prob.]

If I sounded harsh, that was not the intent.

I am here to help you remove malware infection, that was the presumption when you started this topic.

When I said, set aside the audio issue, that is to say, it takes a second seat to "removing malware" which is the main focus.

P.S.S. You actually set UAC way too high. Take it down 1 setting.

Hello Maurice, I am still here with the thread, but I will need to wait until this weekend Saturday or Sunday ot do the steps/procedures for the report when my spouse can be here to assist me. It will go faster that way since he is more familiar with the Notepad features and printing/sending docs, etc.

May I ask that you keep the thread active through the weekend? I'd appreciate it. I can't wait to get to the bottom of this mess.

Thank-you and also thanks for the tip about thr UAC slider! I lowered it by one, like you suggested.

.........Jayne

[I'm getting told different things and want to learn/virus prob.]

You know there is no need to be so harsh in your replies.

I said more than once I am here to learn as indicated in the title of this thread.

I may not be as fast as everyone else, but trust me I can learn like anyone else.

PLEASE put aside your audio.

Perhaps I should have told you that Music is the primary reason I use my laptop. Not for Word or Processing or a job, but for listening to my DVD,CD, Album, music. That's why I invested in a $200 set of Able Planet headsets. Because for me, Music is everything and the computer is my stereo, therefore with no music, then the computer means very little to me. You can't imagine how ticked off I am to have random advertising blaring in at a high volume during music. THAT is why it is hard to put "aside your audio."

I thought you had posted here looking for help on malware. I am saying, audio should be the least of your concern at this time.

Having no clue what else Malware does until I do some more reading the audio is my main concern as for reasons already stated.

The control to notify on this forum has nothing to do with any malware sneaking in. That is for notifying you when someone replies.

I am well aware of what Forum Notifications are and that is not what I said. Read it again. What I did do was read a link you posted about ways to protect your computer from Malware. Here it is to refresh your memory.

http://forums.malwar...howtopic=104379

From your topic....""No "inside help," no hack can take place. In Vista and Windows 7 keep UAC (User Account control) turned on. This will prevent the malcious code from writing to and executing from the system32directory."

This is what I was talking about The User Account Control Panel in my computer which I never looked at. It has a column and a slider for whether you want to be Never Notified of changes etc. or Always Notified. I changed that from Never to Always. Thought that was a good first step.

Thanks again for your help and am working on the instructions the first chance I get.

Geez, does anyone smile around here? Jayne

[I'm getting told different things and want to learn/virus prob.]

Wow, I am finding out a lot just perusing the site here! Just read a post about Malware and in there was a suggestion to check your User Account Control. I found that and there was a vertical bar which was set to "Never notify". I don't know if that may be how some malware snuck in, but I moved that bar to the highest setting immediately "Always Notify." I think I'm starting to catch on.........

[I'm getting told different things and want to learn/virus prob.]

PLEASE put aside your audio.

If you will get & run the tools I outlined, we can make some headway.

If you are working currently with this IYogi, tell me so, and I will get out of this loop.

If you want me to continue, stop using Iyogi, and do the items I had long ago outlined, so I can have the logs for review and study.

Hello, I am very new to all this. This is the first malicious virus I've had and am trying to fix it, plus understand how the heck it got in and what it does. I spoke of IYogi thinking perhaps you would be interested in the Softtonic Trojan Killer 683 program they ran. In hindsight, that was dumb given I'm sure you know all the programs out there. Honest mistake on my part. You are not in a loop with them as I decided to cut them off as a provider.

Regarding your comment that I disregard the audio, I thought that was my only problem. Could you educate me on what we are really looking at here?

Thanks very much for your patience. Today is the holiday of course, but I will run the program(s) you have listed as soon as I can. I can get to it later today or tomorrow. I do have a family comittment today.

Hope you are enjoying the holiday. Jayne.

[I'm getting told different things and want to learn/virus prob.]

Sorry, didn't see an edit feature to note above the Virus that won't go away has the name winrscmde. It shows up randomly but I'd say 80 percent of the time in my audio mixer as the mysterious 3rd column. Jayne

[I'm getting told different things and want to learn/virus prob.]

Hello Maurice, here is the latest. Before beginning the steps you outlined, I decided to call IYogi since I paid 300 dollars for a 2 year contract and figured why not give them a shot? I sat here and watched exactly what he did. I had the Malwarebytes screen I ran showing the Virus's 2 @ svc.host.exe. He did a search and went to a site called Softonic. com. Then, he downloaded a program called Tojan Remover 6.8.3. It ran and stopped dead on a file that said "File Alert..."Suspicious entry..This appears to be malicious Malware >> C/Windows/svchost.exe. A big hugh stop on the run. So the tech ran whatever fixes that entailed and assured me this Trojan Remover took care of my winscrmde problem on my audio.

But not 5 minutes after hanging up, I hear ads blaring through my headset. Unbelievable. I watched this program Trojan Remover 6.8.3 run, it looked like it did it's job. But it didn't.

Can you help me uunderstand why this is such a problem? I know I'm going to get to the bottom of it eventually but this is a professional company who's job it is to remove all virus's. Very frustrating. Anyway, after I call them back to let them know what they did was a total failure, I will come back to those instructions you gave me and take a closer look with my husband. I guess learning as I go here, I was interested in your opinion on this softtonic Trojan remover 6.8.3 program. Thanks for your patience and I will return to check the thread shortly. Jayne

[I'm getting told different things and want to learn/virus prob.]

Thank- you Mr. Naggar for the prompt reply. I am excited there may be a fix to this blue screen situation. I may have unintentionally misled you into thinking I have some computer knowledge on the tech side and honestly I am a beginner, learning as I go. Thankfully, your directions are very precise and detailed. If I am careful I don't see any reason I can't do this by taking my time and following your instructions to the letter. By the way, I won't be offended in the least if you think this takes someone with more expertise than myself to do, or if I need to pay for a repair person. But would like to give it a go myself first, how else am I ever going to learn?

I'll need to wait until later in the day or tomorrow when I can do the steps without any interuption. What will happen if it crashes during any of the steps/processes you have listed? Would I restart and start back at the beginning? I don't have the list in front of me, guess I can cross that bridge when I come to it.

To answer your questions, I can use the computer for sometimes 10 minutes only, at other times it's okay for 3 or 4 hours before the crash and dump. Usually I can get at least a good hour or more out of it. It's so randomized, very aggravating.

I neglected to say in previous post that I run this laptop exclusively off of Wireless Network here at my house. Our other computers are all on Hard Lan (sp?) lines but this one is Wireless off the router. Does that make any difference (maybe more in how I got the virus's to begin with I'm thinking).

Finally, IYogi is a tech support company that my husband paid for a 2 year contract to fix my computer remotely through their Bomgar servers in India. They offered no attempt at a fix for this, only told me to buy a new Windows 7 program since mine was corrupted, which they conveniently sell for 251.00 (!) Also when I googled I found out that due to recent misconduct of IYogi, the CEO of Avast has dropped them as a support. Got a little off topic there, but fyi in case anyone else brings up IYogi.

Thanks again for the information and I will certainly post back later with what I hope are good results.

Jayne

[I'm getting told different things and want to learn/virus prob.]

Hello, First post, I hope this is the correct forum. I started getting blue screen crashes very often about 4 days ago on my Sony laptop. Examples of what info I caught on the blue screens before shut down were "bad pool caller", "bad pool header", and this scary one, "A driver has overrun a stack based buffer......this could cause malicious....", then my computer goes dark.

I called IYogi (have a contract) and they told me my Windows 7 program was corrupted and I needed a Windows 7 disc to reload. I called Sony Vaio people and they said they can't send me disc, but for 100 dollars they will put my laptop back to factory. I don't want to lose everything though I have on it now. Comp USA where I bought it said, same cost 100 dollars, and they will wipe it and sell me Total Defender (sp.?)

Here's the thing. I'm not super computer smart, but can and am willing to learn. I googled myself. I ran myself the Malwarebytes Anti Malware (not the Pro one) and did a quick scan. I got back 2 Trojan Virus's under the category of File and one under Memory with a code of C:/ svchost and the word exe. Clicked remove and it looked as though it did, but when I ran quick scan again, there they were again.

I believe I may even know the virus names, (both called winrcmde) as I am getting weird audio in my speakers with ads, interviews, etc intermittently. If I open my audio mixer I see 2 extra columns there listed as winrcmde at the top of each one next too my 2 normal audio mixers. Then, sometimes they are not there too.

My apology for the lengthy post. I read a few posts here and wonder if I should use the TDSSKiller that was talked about? Do I buy that or can I download it from here? I may be in over my head but I want to learn myself and hope with a little guidance perhaps I can correct this and avoid having my computer wiped of everything. Thank-you so much for any advice or help. Jayne

PS Two weeks ago, my computer was lagging and IE kept going down. Not sure if this is relevant but Iyogi found as I saw them work on my system remotely 5 virus's. I was shocked. Two were Trojan and one was called happili, the others couldn't catch name. I mention this in case it is in indicator of a bigger overall vulnerabilty in my system. Had the Sony 16 months, and until this month, never a problem!