Alureon Virus: Internet Blackout on 9th July: Steps to Remove Alureon Virus
Computer infected with Alureon/ DNS Changer bot will not be able to access internet on 9th July 2012 st 4.01 am GMT. Alureon Malware direct the users from a reliable website to a spoof website and steals the vital personal information of users, including financial details. The virus is designed to redirect internet traffic via DNS servers handles by unlawful people.
Alureon Malware was responsible for US Hacking Scam in 2011. And now over 2.5 million computers globally are inflicted with Alureon and its other siblings.
Detect Alureon Virus on Computer
How to Detect Alureon Virus on Computer?
There are “Are You Infected” sites developed by industry professional to check whether you are infected with Alureon Virus or not.
| URL | Language | Maintainer |
| www.dns-ok.us | English | DNS Changer Working Group (DCWG) |
| www.dns-ok.de | German | Bundeskriminalamt (BKA) & Bundesamt für Sicherheit in der Informationstechnik (BSI) |
| www.dns-ok.fi | Finnish, Swedish, English | CERT-FI is the Finnish national reporting point for computer security incidents and information security threats. CERT-FI is also responsible of maintaining the national information security situation awareness system. |
| www.dns-ok.ax | Swedish, Finnish, English | CERT-FI is the Finnish national reporting point for computer security incidents and information security threats. CERT-FI is also responsible of maintaining the national information security situation awareness system. |
| www.dns-ok.be | Dutch/French | CERT-BE is the primary Belgian contact point for dealing with Internet security threats and vulnerabilities affecting Belgian interests. |
| www.dns-ok.fr | French | Le CERT-LEXSI est la division de veille et d’enquête sur Internet, dédiée à la protection du patrimoine en ligne des organisations. |
| www.dns-ok.ca | English/French | Canadian Internet Registration Authority (CIRA) and Canadian Cyber Incident Response Centre (CCIRC) |
| www.dns-ok.lu | English | CIRCL (Computer Incident Response Center Luxembourg) is the national Computer Security Incident Response Team (CSIRT – CERT) coordination center for the Grand-Duchy of Luxembourg |
| www.dns-ok.nl | Dutch | SIDN (the Foundation for Internet Domain Registration in the Netherlands) |
| dns-ok.gov.au | English | CERT Australia, Stay Smart Online, and Australian Communications and Media Authority joint page on DNSChanger Information |
| dns-changer.eu | German, Spanish, English | ECO (Association of the German Internet Industry) |
| dnschanger.detect.my | Malaysian, English | Hosted by CyberSecurity Malaysia and MYCERT |
| dns-ok.jpcert.or.jp | Japanese | JPCERT/CC – Japan Computer Emergency Response Team Coordination Center |
| www.dns-ok.it | Italiano | Telecom Italia Security Operation Center – IT.TS.SOC |
You can check your computers by clicking on the links accordingly.
How to Fix / Remove Alureon Virus ?
If the above mentioned sites indicate that your computer in infected with Alureon Virus then you can run one of the following tools to remove its threat and other related threats
| Name of the Tool | URL |
| Hitman Pro (32bit and 64bit versions) | http://www.surfright.nl/en/products/ |
| Kaspersky Labs TDSSKiller | http://support.kaspersky.com/faq/?qid=208283363 |
| McAfee Stinger | http://www.mcafee.com/us/downloads/free-tools/stinger.aspx |
| Microsoft Windows Defender Offline | http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline |
| Microsoft Safety Scanner | http://www.microsoft.com/security/scanner/en-us/default.aspx |
| Norton Power Eraser | http://security.symantec.com/nbrt/npe.aspx |
| Trend Micro Housecall | http://housecall.trendmicro.com |
| MacScan | http://macscan.securemac.com/ |
| Avira | http://www.avira.com/en/support-for-home-knowledgebase-detail/kbid/1199 Avira’s DNS Repair-Tool |
Basic safety Instructions to be Secured Against Virus
- Setup a backup of all your files and folders
- Upgrade your system or follow the malware cleanup guide
- Once done, make sure your DNS settings are correct
- Make sure that the router is using DNS setting provided by the ISP
Source: DCWG
