I've been running scans all day, malwarebytes detected Alureon, I "removed" it but the symptoms are still here.
The symptoms are:
-All programs list in the start menu are missing.
-Task manager was disabled, but I reenabled it by deleting its corresponding registry command
-Files were hidden in the C drive, and I unchecked that option.
-Google searches were being redirected, as many people have described.
-The desktop wallpaper I had is now a grey color, and before I reactivated hidden files all the files on the desktop were invisible.
-In the beginning of this ordeal, it started with a windows repair scanner posing as the real deal, which no longer loads. I'm assuming it was removed.
Here is the hijack this log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:24:35 AM, on 4/1/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner.BEAST\My Documents\Downloads\HijackThis.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
HJT log removed.--End of file - 8809 bytes
Here is rkill log:
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Rkill was run on 04/01/2011 at 0:38:49.
Operating System: Microsoft Windows XP
Processes terminated by Rkill or while it was running:
Rkill completed on 04/01/2011 at 0:38:52.
Is this website part of the virus: http://blog.teesupport.com/how-to-guide-remove-trojanwinntalureon-s-trojanwinntalureon-s-removal-instructions/
I have this in the registry: LGxJuggkBGegHQ.exe should I delete it?
Edited by boopme, 01 April 2011 - 10:52 AM.