Microsoft security software detects this threat.
This trojan is a variant of the Alureon malware family. It infects your PC's master boot record.
See the Win32/Alureon family description for more information.

What to do now

Use the following free Microsoft software to detect this threat:

You should also run a full scan. A full scan might find other, hidden malware. 

Advanced troubleshooting

To restore your PC, you might need to download and run Windows Defender Offline. See our advanced troubleshooting page for more help.

Protect your sensitive information

This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:

You should change your passwords after you've removed this threat:

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

DOS/Alureon is a variant of the Alureon malware family that infects the master boot record. It tries to decrypt and run the contents of a file named ldr16.

The file is stored on the encrypted virtual file system created by Trojan:Win32/Alureon.DX.

See the Win32/Alureon family description for more information.

Analysis by Scott Molenkamp


Alert notifications from your security software may be the only symptoms.


Alert level: Severe
This entry was first published on: Sep 23, 2010
This entry was updated on: Dec 30, 2014

This threat is also detected as:
No known aliases