Alureon and my broken laptop

Sarah, you have fallen into the hands of very knowlegeable and dedicated guys and I admire their efforts. But given the history of your system, it will never be right again even if they manage to get it running.

You can remove a virus pretty easily, but what is really difficult is to fix the damages the virus has done because you really don't know what it is.

At one point you should prepare yourself for a complete reinstallation. What is most important there is that you have your own data properly backed up. In one of your earlier post I read that you are not sure of your backups and if you have done it with Windows backup facilities you have reason not to be sure.

You may want to consider using a live Linux CD for an additional backup. You could also run a WinPE CD. But if you have your data backed up now (after the infection), scan it with a proper scanner (e.g. Superantispyware or the free Kaspersky virus scanner - or online, but that will take time for the uploads) before you put it back on your system. Infected data is not very common but it is better to be safe than sorry.

Fixlog attached

Sarah did you add the text below to your fix list ?

Code:

TDL4: custom:26000022

Sorry, had to take care of some urgent matters.

SarahCali,

You have come this far, and Alureon can be removed. However, it is not the type of thing where a scan here and there will take care of.

The option shawn77 is offering to upload is the best. Otherwisw, doubt that FRST is going to recognize a Mac text editor and run the fixlist.txt

If the above does not work, there is also the option to run TDSSKiller from System Recovery Options > Command Prompt. For now, though, let's just stay with FRST64 and see what it brings.

She already uploaded the fix log

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2013
Ran by SYSTEM at 2013-03-29 19:30:41 Run:1
Running from H:\

==============================================

C:\Windows\svchost.exe moved successfully.

The operation completed successfully.
The operation completed successfully.

==== End of Fixlog ====

Sarah let us know if you can boot into Windows .

The fixlog.txt is showing what it should.

Barring any other problems, Windows should be up.

What's up, SarahCali?

Cottonball .... I did notice a dnsserver of 8.8.8.8 in the log file when Sarah first ran the FRST . I think will need to reset some stuff .