Alureon Malware

I keep getting popups and email from Comcast warning me that my computer is infected. I installed and ran Bitdefender on both computers but still get these annoying warnings. Is Bitdefender failing to detect this? I also have an iphone and ipad. could they be infected and recycling the malware?

Alureon Malware Detected - Immediate Action is Required!

A DNS changing malware 'Alureon' has overwritten your computer's network settings and is redirecting domain name lookups to malicious DNS servers.

Find more posts tagged with

Comments

rootkit

Hello

Could you post here a screenshot?

I think that is a fake antivirus product.

Thank you.

kammies

this is the email I keep getting from Comcast. I have spoken to their internet tech person so this seems legit but all he could tell me to do was change my email passwords. That didn't stop their notifications. Also, I have noticed that certain website I get redirected or cant access, such as ebay or a local college. Not even on my ipad or iphone, However, I can if I try it on the 3g instead of over my wifi. Comcast says they will suspend my services if this is not fixed by March 6th so I am running out of time!! Yikes.

Is this Alureon something that bitdefender cant detect or fix?

Constant Guard™ Alert

Alureon Malware Detected - Immediate Action is Required!

Dear XFINITY Customer,

Malware known as 'Alureon' has infected your computer and is directing domain name lookups to malicious DNS servers (malicious web sites).

Please follow the instructions listed on http://xfinity.com/dnsbot to correct your computer's DNS settings.

We appreciate your prompt attention to this important security notice.

Sincerely,

Constant Guard from XFINITY

This is a service-related email. Comcast will occasionally send you service-related emails to inform you of service upgrades or new benefits to your Comcast High-Speed Internet service.

Comcast respects your privacy. For a complete description of our privacy policy, click here.

Comcast

One Comcast Center, 10th Floor

1701 JFK Boulevard

Philadelphia, PA 19103-2838

rootkit

Hello

In that case, please follow the steps from here:

Copy-paste the following text in a new Notepad file.

@Echo on

pushd\windows\system32\\etc

attrib -h -s -r hosts

echo 127.0.0.1 localhost>HOSTS

attrib +r +h +s hosts

popd

ipconfig /release

ipconfig /renew

ipconfig /flushdns

netsh winsock reset all

netsh int ip reset all

shutdown -r -t 1

del %0

Save as flush.bat to your desktop.

Double click on the flush.bat file to run it. On Windows Vista/7, right click on the .bat file and choose Run as Administrator. Your computer will reboot itself after the operation is finished.

Let me know if the alert is still displayed after this.

Take care.

kammies

I did as you suggested. Time will tell if I get more warnings from Comcast. However, I still can't connect with some websites, such as University of Michigan. I can't even connect to them with my iphone or ipad. Strange thing is, when I am home, if I switch wifi off on my iphone, I can then connect to the site.

Thinking maybe it was a bug in my router, I reset to default and changed the password. Still can't get to the sites.

I am a ******, not a computer person.

rootkit

Hello

Could you please check you have the default DNS servers on your router?

You can access the settings from the admin panel.

Thank you.