> VilmaTech Blog > Remove Win32/Alureon.gen!A that Brings in More Virus [Know How]

Remove Win32/Alureon.gen!A that Brings in More Virus [Know How]

Brief Introduction on Win32/Alureon.gen!A

Win32/Alureon.gen!A is one of the variants of Alureon Trojan that features itself with online data-stealing capability. Therefore, once a computer is attacked by the Trojan Rookit, chaos on browsers would break loose, such as new tabs keep opening with junk websites including some other search page instead of intended web pages. Obviously, Win32/Alureon.gen!A is a Trojan horse that intercepts system’s network traffic for usernames, passwords and credit card data and that mainly designed to attack 32-bite system.

Win32/Alureon.gen!A Symptoms

  1. Unable to receive updates for Windows Update, Defender, etc..
  2. Get redirects on browsers.
  3. Computer runs generally slowly.
  4. Blue Screen of Death (BSoD) occurs occasionally.
    Windows pops up errors about stopping a working process.
    Additional Trojan horse are detected on the same computer including Win32/Alureon.gen!B, Win32/Alureon.gen!D, Win32/Alureon.gen!P, etc..


Win32/Alureon.gen!A Should Be Removed

As a generic Trojan horse and a tool to help cyber criminals collect confidential information, backdoor program is injected into Win32/Alureon.gen!A for the convenience of inspection, improvement and access in future. As a consequence, additional infections could be brought in by Win32/Alureon.gen!A if there are other resources that are needed by other siblings; extra affections could happen if the backdoor program is captured; unsolicited access could be realized to directly control the infected machine. It is clear now that Win32/Alureon.gen!A threatens not only information security but also computer health and that it should be removed as soon as possible. Below is the instruction to show how. Should you run into any difficulty in the middle of the process, you are welcome to contact VilmaTech Online Support and get expert help for quick fix.

live chat


Instruction to Show How to Remove Win32/Alureon.gen!A

A – run full scan and note down the path of Win32/Alureon.gen!A.
B – use Task Manager and System Information to locate and end the services as well as processes related to Win32/Alureon.gen!A.

  • Use Ctrl+Alt+Del key combination to bring up Task Manager.
  • Hit View tab and enter into Select Columns.
    select colums to end Win32/Alureon.gen!A's service and processes
  • Check “Image Path Name” and PID to show full path name of programs so as to track the suspicious ones that are related to Win32/Alureon.gen!A.
  • Next access All Programs from Start Menu for Accessories.
  • Select System Tools and bring up System Information to unfold Software Environment.
    use system information to end Win32/Alureon.gen!A's service and processes
  • Choose Running Tasks to see the path for each service and program in the right pane.
  • Locate and end the services as well as processes related to Win32/Alureon.gen!A in both Task
  • Manager and System Information
    (tip: as some of the items produced by Win32/Alureon.gen!A could mutate and be different from OS, it is hard to offer the process and service specifically here; one should follow the thread to find out the guilty ones)

C – end the above detected service in Service function.


  • Hold Win key and R key at once to type “services.msc” in the pop-up text box.
    run service to end Win32/Alureon.gen!A's service
  • Hit Enter key to enable the services window.
  • Remove/disable the service detected.

Windows 8

  • Open Windows Explorer on Start screen.
  • Access Administrative tools.
  • Double click on Services icon and remove/disable the service detected.
    end Win32/Alureon.gen!A's service on Windows8

D – access Database to find the guilty services and remove all the affiliate values.

  • Press and hold down Win key and R key together to bring up Run box.
    use win+r key combination to end Win32/Alureon.gen!A's service from Database
  • Put in “regedit” hit Enter key to access Database.
  • Use Ctrl+F key combination to bring up Find box and enter the service detected.
  • Hit Find button to locate the service in the Database.
  • Remove all the affiliate values.

E – show hidden files and folders to remove the items generated by Win32/Alureon.gen!A from local disk.

Windows 7/XP/Vista

  • Access Control Panel from Start menu and double click on user accounts and family safety.
  • Click open ‘Folder Options’ to hit its View tab and tick ‘Show hidden files and folders’.
  • Then non-tick ‘Hide protected operating system files (Recommended)’.
    show hidden file on Windows7/XP/Vista to remove items generated by Win32/Alureon.gen!A

Windows 8

  • Find and open Windows Explorer from Start screen and browse to View tab.
  • Tick ‘File name extensions’ and ‘Hidden items’ options.
    show hidden files on Windows8 to remove items related to show hidden file on Windows7/XP/Vista to remove items generated by Win32/Alureon.gen!A

Remove the following given files/folders to remove Win32/Alureon.gen!A.

  • Files named after Win32/Alureon.gen!A and some files named with random letters and numbers under C:\windows\winstart.bat, C:\windows\wininit.ini and C:\windows\Autoexec.bat.
  • Items generated on the date when Win32/Alureon.gen!A was firstly found under C:\Windows and C:\Windows\System32.
    (tip: Some path values have been replaced with environment variables as the exact location may vary with different configurations.


Win32/Alureon.gen!A Dissemination Routine

Being a Trojan horse, Win32/Alureon.gen!A has the capability of attacking vulnerability/loophole/backdoor bug. Therefore, conflict among installed applications, being redirected to some junk sites randomly or attacked by virus could finally result in Win32/Alureon.gen!A affection. As a matter of fact, Win32/Alureon.gen!A could bundle with rogeware which is what we call fake anti-virus programs. In sum, one should pay extra attention when surfing on the Internet and downloading/installing third-party programs.

Win32/Alureon.gen!A Requires Manual Removal Method

Many practices have proven the fact that anti-virus programs and other security utilities are not able to remove Win32/Alureon.gen!A automatically. Though they said that Win32/Alureon.gen!A had been quarantined and cleaned, the Trojan horse kept triggering many more troubles and virus. One should be informed that the Trojan horse manages to numerate drivers concerning security service and overwrite data to prevent from automatic removal; inject vicious codes into background process such as explorer.exe  to confuse security programs and manipulate searches without being picked up. Only manual remove method could reach complete removal and stop Win32/Alureon.gen!A from coming back. However, certain level of computer skills and knowledge is needed to differentiate the genuine items and the ones faked by the Trojan horse. Should there be any help request, please do feel free to get specialized technical help from VilmaTech Online Support.

live chat

Win32/Alureon.gen!A Removal Recommendation

Due to the random modifications by Win32/Alureon.gen!A and the backdoor program with the capability of introducing in additional items, many fragments can be found in the infected computer to hog CPU. Therefore, it is recommended to carry out defragment after the whole manual removal for a perfectly functioning machine. Here’s the video to show how.


Comments are closed.

Latest Posts