Alureon virus

Question

Alureon virus

Hello, I just had got a notice from UT that I have the Alureon virus and it claimed it was on my mac. I thought no way. So, I had myself and IT look at all PCs first that were in my building before looking at the macs. I found the one they clamed to have the virus and it was on the Mac. How do I go about searching for it in the file structure? Also, from what I gathered about it online, I thought it was for the PC only, how can it attach itself in the boot directory? And will an anti-virus fix this?

G5 2Gduel, Mac OS X (10.3.7)

Posted on May 18, 2011 9:44 AM

Reply

Answer 1

Linc Davis

Level 10

209,739 points

May 18, 2011 9:58 AM in response to Regina Barrera

How do I go about searching for it in the file structure?

ClamXav should be able to find it, if it's really there.

Also, from what I gathered about it online, I thought it was for the PC only...

It is.

...how can it attach itself in the boot directory?

It can't, unless you're running Windows on your Mac.

Reply

Answer 2

May 18, 2011 10:12 AM in response to Regina Barrera

It is a windows only trojan & rootkit, so it cannot be running on your OS X machine. One of it's trademarks on Windows boxes infected by it is that it spoofs a "clean" system to simple AV scans while it runs it's hijacked routines from encrypted disc sectors at the end of the disc sectors. Symantecs write up of it say it is one of the most professionally written "stealth" rootkits they've come across.

Reply