Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD after removing Alureon.a

19 Apr 2013   #1

Windows 7 home premium x64
 
 
BSOD after removing Alureon.a

I'm currently unable to access the computer that has the issue but I was haivng some blue screen stop error issues and went to the blue screen forum for help. I had removed my old norton 360 to get Microsoft security essentials and malware bytes. The MSE initial scan found the alureon trojan on my computer and instructed me to use windows defender offline, which I did. When the defender finished, I followed the instructions, deleted the trojan, and then restarted. The computer blue screened after that and has continued doing so on multiple restarts. I tried to use system restore to go back to yesterday but it didn't fix anything. I did chkdsk for the cmd option and nothing showed up there either. The blue screen error is 0x0000007b.

This is my initial thread. Changing BSODs on startup. . All the computer information is in there in the initial post. There is a picture of the actual blue screen in the post but I somehow took it upside down. The strings with the stop error are 0xFFFFF880009A9928,0xFFFFFFFFC000000D,0x0000000000000000,0x0000000000000000

My System SpecsSystem Spec
.

19 Apr 2013   #2

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

thenecessity

Do you have a USB flash drive ? If you do you might want to get that ready
My System SpecsSystem Spec
19 Apr 2013   #3

Windows 7 home premium x64
 
 

Yes I have one, it was used for the defender offline scan.
My System SpecsSystem Spec
.


19 Apr 2013   #4

Windows 7 Home Premium
 
 

thenecessity,

Would appreciate some info from you:
Can you boot to the Advanced Boot Options, and if you can, do you have the Repair your computer option listed?

To find out:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
Is the Repair your computer option listed? BTW, we will be using this option to get to a Command Prompt and run a tool.

If you do not have the option, or cannot boot to it, do you have your Windows 7 installation CD/DVD available?

Presuming you have access to another computer that is not infected, and, if you do not have access to Repair your computer, or a Windows 7 Installation CD/DVD, we still have another option.
My System SpecsSystem Spec
19 Apr 2013   #5

Windows 7 home premium x64
 
 

Yes I am able to get to advanced boot options and repair your computer option is there

The options in order are repair your computer
Safe mode
Safe mode with networking
Safe mode with command prompt

Enable boot logging.
Enable low res video
Last known good configuration
Directory services restore mode
Debugging mode
Disable automatic restart on system failure
Disable driver signature enforcement

Start windows normally
My System SpecsSystem Spec
19 Apr 2013   #6

Windows 7 Home Premium
 
 

OK, we are ready to roll...

You will need a USB flash drive and access to a clean computer for the procedure outlined below.

Also, you may want to print these instructions so you can have access to follow them.

Please plug a flash drive into a clean computer.
Go to Start > Computer
Double-click Computer, and select the flash drive.
Right-click and select: Format
Press Start on the Format prompt.
Remove when done.

Now, the Operating System is 64-bit,so, proceed with Downloading Farbar Recovery Scan Tool
Save the program to the >> USB flash drive.
Next, plug the flash drive into the infected computer.

>>>Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select your language settings, and click: Next
  • Select your User account and click: OK (If you did not set a password, leave blank.)
On the System Recovery Options menu you get the following options:

  • Startup Repair
    System Restore
    Windows Complete PC Restore
    Windows Memory Diagnostic Tool
    Scan your computer's memory for errors.
    Command Prompt
Select Command Prompt

Now, either use this option to find out the drive letter of your USB flash drive in the System Recovery Environment:

>>At the Command Prompt type the commands below, one at a time, and press ENTER after each:
Code:
Diskpart
List volume
>>Or, use this option to find out the drive letter of your USB flash drive:
  • In the Command window, at the bliking cursor type notepad and press: Enter
  • In Notepad, under the File menu select: Open
  • Double-click Computer, find the flash drive letter, remember what letter it is, click on it, and press: Open
  • Close out of Notepad.

Next...
  • Click the Command Prtompt window
  • Type g:\frst64.exe, and press: Enter
    Note: Replace the drive letter g with the drive letter of your flash drive!
  • The tool starts and prepares to run. Follow the prompts.
  • Click Yes to the disclaimer.
  • Press the Scan button.
  • The program saves the FRST.txt, on the flash drive.
  • Click the Command prompt window, type exit, and press: Enter
  • Back at the System Recovery Options, press: ShutDown
Please remove the USB flash drive from the infected computer, plug it into the clean computer, and copy/paste the FRST.txt in your reply.
My System SpecsSystem Spec
19 Apr 2013   #7

Windows 7 home premium x64
 
 

I'm getting an error when I do it. G:\frst64.exe is not a valid win32 application.
My System SpecsSystem Spec
19 Apr 2013   #8

Windows 7 home premium x64
 
 

Nvm. I got it I think now. Rechecked the download and messed something up. Il edit this with the txt file
My System SpecsSystem Spec
19 Apr 2013   #9

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

thenecessity

You getting an error due to the drive letter .

Type in the commands below to get the drive letter of your flash drive

diskpart
press <ENTER>

list volume
press <ENTER>

Make note of the USB flash drive then run the command that Cottonball is referring to change G:\ to the actual USB drive letter
My System SpecsSystem Spec
19 Apr 2013   #10

Windows 7 home premium x64
 
 

Nah the error wasnt from the drive letter. I messed up the download somehow. first frst64.exe i put in the flash drive wasnt the right size. didnt copy the whole file somehow.

THe two txt files were made at the same time.


Attached Files
File Type: txt FRST.txt (35.3 KB, 17 views)
File Type: txt Addition.txt (13.2 KB, 8 views)
My System SpecsSystem Spec
Reply

 BSOD after removing Alureon.a




Thread Tools



Similar help and support threads for2: BSOD after removing Alureon.a
Thread Forum
Alureon and my broken laptop System Security
Solved Alureon.E (virus)trojan System Security
[Q] Alureon.A: Causes and removal System Security
Solved Trojan:DOS/Alureon.A System Security
Looks familiar? Yes! From Alureon! Security News
April Threat Reports & Alureon. Security News
Alureon.gen!U System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:49 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33