Skip to main content
Skip to main content
Microsoft Security Intelligence
479 entries found. Displaying page 1 of 24.
Updated on Aug 15, 2013

Windows Defender detects and removes this threat.

Trojan:Win32/Alureon.GQ is a member of the Win32/Alureon family of malware - a family of data-stealing malware. These trojans allow an attacker to intercept incoming and outgoing Internet traffic in order to gather confidential information from your computer, such as user names, passwords, and credit card data.

The trojan is also used to generate traffic to specific URLs.

Win32/Alureon can also allow an attacker to transmit malicious data to your computer. It might modify DNS settings on your computer to enable the attacker to perform these tasks.

The Domain Name System (DNS) is used (among other things) to map domain names to IP addresses - that is, to map human-readable domain names to machine-readable IP addresses. When you attempt to visit a particular URL, a browser uses DNS servers to find the correct IP address of the requested domain. When you are directed to a malicious server that is not part of the authoritative Domain Name System, an attacker can provide incorrect IP addresses at their choice to map to particular domain names, thus directing you to possibly bogus or malicious sites without your knowledge.

You might need to reconfigure DNS settings after the trojan is removed from your computer. See the "What to do now" section below for advice on how to do this.

Alert level: severe
Updated on Mar 27, 2016

Windows Defender detects this threat.

This family of data-stealing trojans can give a malicious hacker access to collect confidential information stored in your PC, such as your user names, passwords, and credit card data.

They can also send malicious data to your PC and corrupt some driver files, making them unusable.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Dec 29, 2014

Microsoft security software detects this threat.

This family of data-stealing trojans can give a malicious hacker access to collect confidential information stored in your PC, such as your user names, passwords, and credit card data.

They can also send malicious data to your PC and corrupt some driver files, making them unusable.

See the Win32/Alureon family description for more information.

Find out ways that malware can get on your PC.

Alert level: low
Updated on Mar 27, 2016
Windows Defender detects this threat.
 
This trojan is a variant of the Alureon malware family. It infects your PC's master boot record.
 
See the Win32/Alureon family description for more information.
Alert level: severe
Updated on May 14, 2014
Windows Defender Antivirus detects and removes this threat.
 
This family of data-stealing trojans can give a malicious hacker access to collect confidential information stored in your PC, such as your user names, passwords, and credit card data.
 
They can also send malicious data to your PC and corrupt some driver files, making them unusable.
 
See the Win32/Alureon family description for more information.
 
Alert level: high
Updated on Jan 07, 2013
Trojan:Win32/Mashigoom.F is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Oct 16, 2014
This is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Apr 11, 2011
Trojan:Win32/Alureon.DN is a detection of a DLL component of the Win32/Alureon family. The malware may attempt to embed HTML code into Web pages the affected user browses, and may attempt to redirect certain URLs.
Alert level: severe
Updated on Sep 07, 2010
Win32/Alureon is a multi-component family of data-stealing trojans. These trojans allow an attacker to intercept incoming and outgoing Internet traffic in order to gather confidential information such as user names, passwords, and credit card data. The Win32/Alureon trojan may also allow an attacker to transmit malicious data to the infected computer. The trojan may modify DNS settings on the host computer to enable the attacker to perform these tasks. As a result, it may be necessary to reconfigure DNS settings after Win32/Alureon is removed from the computer.
 
Trojan:Win32/Alureon.DA is used to download and install other malware, such as Rogue:Win32/FakeCog
Alert level: severe
Updated on Apr 16, 2010
Virus:Win32/Alureon.F is a detection for system drivers infected by members of the Win32/Alureon family.
Alert level: severe
Updated on Apr 16, 2010
Virus:Win32/Alureon.C is a detection for system drivers infected by members of the Win32/Alureon family.
 
Win32/Alureon is a multi-component family of trojans involved in a broad range of subversive activities online in order to generate revenue from various sources for its controllers. Mostly, Win32/Alureon is associated with moderating affected user's activities online to the attacker's benefit. As such, the various components of this family have been used for:
  • modifying affected user's search results (search hijacking)
  • redirecting affected user's browsing to sites of the attacker's choice (browser hijacking)
  • changing DNS settings in order to redirect users to sites of the attacker's choice without the affected user's knowledge
  • downloading and executing arbitrary files, including additional components and other malware
  • serving illegitimate advertising
  • installing Rogue security software
  • banner clicking
 
Win32/Alureon also utilizes advanced stealth techniques in order to hinder the detection and removal of its various components.
 
As some variants of this trojan may modify DNS settings on the host computer to enable the attacker to perform these tasks. Therefore it may be necessary to reconfigure DNS settings after the trojan is removed from the computer.
Alert level: severe
Updated on Aug 30, 2010
Trojan:Win32/Alureon.DX is a rootkit that differs in behavior depending on whether the operating system is 32-bits or 64-bits.
 
Trojan:Win32/Alureon.DX is a component of Win32/Alureon - a family of data-stealing trojans. These trojans allow an attacker to intercept incoming and outgoing Internet traffic in order to gather confidential information such as user names, passwords, and credit card data. The Win32/Alureon trojan may also allow an attacker to transmit malicious data to the infected computer. The trojan may modify DNS settings on the host computer to enable the attacker to perform these tasks. As a result, it may be necessary to reconfigure DNS settings after Win32/Alureon is removed from the computer.
Alert level: severe
Updated on Sep 24, 2010
Trojan:WinNT/Alureon.H is detection for kernel-mode driver component of members of the Win32/Alureon family. The component functions as a rootkit to hide it and other components of the Win32/Alureon trojan family.
Alert level: severe
Updated on Sep 24, 2011

Trojan:Win32/Alureon.FJ is a trojan that drops a malicious driver, detected as Trojan:WinNT/Alureon.Z, in the affected computer.

Alert level: severe
Updated on Aug 27, 2013

Trojan:Win32/Alureon.FE is a trojan that installs other variants of Win32/Alureon, a family of data-stealing trojans. These trojans allow an attacker to intercept incoming and outgoing Internet traffic in order to gather confidential information such as user names, passwords, and credit card data. It may also allow an attacker to transmit malicious data to the infected computer. The trojan may modify DNS settings on the host computer to enable the attacker to perform these tasks. As a result, it may be necessary to reconfigure DNS settings after disinfection. Trojan:Win32/Alureon.FE also modifies the MBR to execute installed Alureon components.

Alert level: severe
Updated on Dec 29, 2014

Microsoft security software detects this threat.

This virus is part of the Win32/Alureon family of data-stealing malware. They can give a malicious hacker access to steal your confidential information such as your user names, passwords, and credit card data. 

They can also send malicious data to your PC and corrupt some driver files, making them unusable.
 
Alert level: severe
Updated on Mar 05, 2012

Trojan:DOS/Alureon.F is a Master Boot Records (MBR) infected by certain variants of the Win32/Alureon rootkit family. The rootkit can infect both 32-bit and 64-bit systems.

Alert level: severe
Updated on Mar 27, 2016

Windows Defender detects this threat.

This virus is part of the Win32/Alureon family of data-stealing malware. They can give a malicious hacker access to steal your confidential information such as your user names, passwords, and credit card data. 

They can also send malicious data to your PC and corrupt some driver files, making them unusable.
 
Alert level: severe
Updated on Mar 27, 2016

Windows Defender detects and removes this threat.

This threat is a member of the Win32/Alureon family of data-stealing malware.

A hacker can use Alureon to gather your confidential information, like your user names, passwords, and credit card data. They might also be able to transmit malicious data to your PC.

There is more information about this type of threat in the Alureon family description.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Apr 16, 2010
Trojan:Win32/Alureon.F is detection for a trojan that installs and executes copies of Trojan:Win32/Alureon.A on an affected computer.
Alert level: severe