How to get rid of Trojan: Win32/Alureon.FW virus that detected by my anti-virus software? Sometimes it comes with Trojan: Win32/Alureoun.gen!AO. My son switched on his laptop this morning and found this come up on his screen which won’t go.  We have tried many solutions but with no success, any ways to fix this problem permanently?

Trojan: Win32/Alureon.FW Virus Description

One of the newest computer infections is the Trojan: Win32/Alureon.FW  virus. It has just started to gain momentum, although it is still not as common as many of the main Trojan virus attacks that are out there causing harm. This new virus does a great job in hiding itself in many very popular sites and quickly attacks and infects unsuspecting users. One of the most mainstream sites that the Trojan: Win32/Alureon.FW virus hides in is Facebook, a site that hundreds of millions of users visit and interact with on a daily basis. It is one of the most frequented sites on the Internet in the #2 position, only behind Google. Any virus that can successfully hide in a site as popular as Facebook has the potential to do major damage! The virus is also known to hide in several porn sites as well. As you can see the hackers like to use high traffic sites with millions of users daily, giving them the best chance at attacking several systems.

The Trojan: Win32/Alureon.FW virus is also picked up through spam emails, and this is another reminder of how important it is to set up proper spam filters on all email accounts and immediately delete and suspicious looking message. Simply opening a spam message containing the Win32/Alureon.FW virus can allow it to get into the computer’s database allowing hackers to have full access.

Hackers have created the Win32/Alureon.FW virus in order to steal personal data from computers and then ruin the computer system. Some signs that a computer has been hit with the Trojan: Win32/Alureon.FW virus will be a drastically slower Internet connection, as well as popup ads showing up on all sites that are visited. As the virus progressed the ads will become more frequent, eventually overtaking the computer and crashing any Internet browsing sessions.

To absolutely clean out this virus, you can follow the guide here if you are computer savvy. As the anti-virus won’t be able to help, so manual removal is suggested here as it is a guaranteed complete removal. Contact YooSecurity Online PC Expert to get further help to sort it out.

How to Identify If The Virus Loaded On A Target Computer?

If a computer is experiencing any of the following symptoms it could be because of the Trojan: Win32/Alureon.FW virus:

  • Extremely slow computer at startup and during normal operation
  • If the antivirus programs are not working it could be the Win32/Alureon.FW virus blocking them
  • If some programs are not running properly it could be due to the virus removing files that were needed by those programs
  • If there are pop ups showing up on sites that are normally viewed regularly without pop ups that is a sign that there is a virus
  • The Trojan: Win32/Alureon.FW virus can hide folders that it has placed files in, so if there are folders missing it could be because of this harmful virus
  • If emails are noticed in the sent folder or outbox that do not look familiar it could be the Win32/Alureon.FW virus sending them out to the contact lists

Moreover, it will embed a malicious code into the websites so that user may detect browser keeps redirecting to various websites without their permission. You will need to remove it manually.

Steps on How to Get Rid of Trojan: Win32/Alureon.FW Virus

Step 1: Open Windows Task Manager to end processed related to the Trojan horse. To do that, press Ctrl+Alt+Del keys at the same time or right click on bottom Task Bar and select Start Task Manager.
Windows Task Manager

Step 2: Show hidden files. Go to Folder Options from Control Panel. Under View tab, select Show hidden files and folders and non-select Hide protected operating system files (Recommended) then click OK.
Folder Options

Step 3: Go to Registry Editor. First press Windows+R keys and then type regedit in Run box to search for virus. Delete all the following or those related to the following files and registry entries:
Run+Registry Editor

%AllUsersProfile%\random
C:\windows\system32\services.exe\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Trojan: Win32/Alureon.FW
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

Video on How to Modify or Change Windows Registry

Conclusion

Since the Trojan: Win32/Alureon.FW virus is fairly new not all antivirus programs will detect its presence, allowing it to attack the system and give hackers immediate access to the files, allowing them to steal personal information. Once fully installed, the virus will prevent any programs from being opened or used on the computer. Just like with most other Trojan viruses, the Win32/Alureon.FW virus gives the hackers remote access to the computer and once they gain control it can result in data loss, personal information access that leads to identity theft, and access to banking information which can be used to transfer money out of the accounts to offshore accounts never to be seen again. Clean out the infection ASAP.

Note: Still having the same problem after every reboot? If you don’t know how to remove Trojan: Win32/Alureon.FW virus from your computer and don’t want to make thing worse. Contact Online PC Experts 24/7 online in time to get professional help.

Published by Tony Shepherd & last updated on March 6, 2013 10:36 am

Leave a Reply