BSOD after removing Alureon.a

Page 1 of 3 123 LastLast

  1. Posts : 45
    Windows 7 home premium x64
       #1

    BSOD after removing Alureon.a


    I'm currently unable to access the computer that has the issue but I was haivng some blue screen stop error issues and went to the blue screen forum for help. I had removed my old norton 360 to get Microsoft security essentials and malware bytes. The MSE initial scan found the alureon trojan on my computer and instructed me to use windows defender offline, which I did. When the defender finished, I followed the instructions, deleted the trojan, and then restarted. The computer blue screened after that and has continued doing so on multiple restarts. I tried to use system restore to go back to yesterday but it didn't fix anything. I did chkdsk for the cmd option and nothing showed up there either. The blue screen error is 0x0000007b.

    This is my initial thread. Changing BSODs on startup. . All the computer information is in there in the initial post. There is a picture of the actual blue screen in the post but I somehow took it upside down. The strings with the stop error are 0xFFFFF880009A9928,0xFFFFFFFFC000000D,0x0000000000000000,0x0000000000000000
      My Computer


  2. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #2

    thenecessity

    Do you have a USB flash drive ? If you do you might want to get that ready
      My Computer


  3. Posts : 45
    Windows 7 home premium x64
    Thread Starter
       #3

    Yes I have one, it was used for the defender offline scan.
      My Computer


  4. Posts : 2,470
    Windows 7 Home Premium
       #4

    thenecessity,

    Would appreciate some info from you:
    Can you boot to the Advanced Boot Options, and if you can, do you have the Repair your computer option listed?

    To find out:
    Restart the computer.
    As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
    Is the Repair your computer option listed? BTW, we will be using this option to get to a Command Prompt and run a tool.

    If you do not have the option, or cannot boot to it, do you have your Windows 7 installation CD/DVD available?

    Presuming you have access to another computer that is not infected, and, if you do not have access to Repair your computer, or a W7 Installation CD/DVD, we still have another option.
      My Computer


  5. Posts : 45
    Windows 7 home premium x64
    Thread Starter
       #5

    Yes I am able to get to advanced boot options and repair your computer option is there

    The options in order are repair your computer
    Safe mode
    Safe mode with networking
    Safe mode with command prompt

    Enable boot logging.
    Enable low res video
    Last known good configuration
    Directory services restore mode
    Debugging mode
    Disable automatic restart on system failure
    Disable driver signature enforcement

    Start windows normally
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #6

    OK, we are ready to roll...

    You will need a USB flash drive and access to a clean computer for the procedure outlined below.

    Also, you may want to print these instructions so you can have access to follow them.

    Please plug a flash drive into a clean computer.
    Go to Start > Computer
    Double-click Computer, and select the flash drive.
    Right-click and select: Format
    Press Start on the Format prompt.
    Remove when done.

    Now, the Operating System is 64-bit,so, proceed with Downloading Farbar Recovery Scan Tool
    Save the program to the >> USB flash drive.
    Next, plug the flash drive into the infected computer.

    >>>Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select your language settings, and click: Next
    • Select your User account and click: OK (If you did not set a password, leave blank.)
    On the System Recovery Options menu you get the following options:


    • Startup Repair
      System Restore
      Windows Complete PC Restore
      Windows Memory Diagnostic Tool
      Scan your computer's memory for errors.
      Command Prompt
    Select Command Prompt

    Now, either use this option to find out the drive letter of your USB flash drive in the System Recovery Environment:

    >>At the Command Prompt type the commands below, one at a time, and press ENTER after each:
    Code:
    Diskpart
    List volume
    >>Or, use this option to find out the drive letter of your USB flash drive:
    • In the Command window, at the bliking cursor type notepad and press: Enter
    • In Notepad, under the File menu select: Open
    • Double-click Computer, find the flash drive letter, remember what letter it is, click on it, and press: Open
    • Close out of Notepad.


    Next...
    • Click the Command Prtompt window
    • Type g:\frst64.exe, and press: Enter
      Note: Replace the drive letter g with the drive letter of your flash drive!
    • The tool starts and prepares to run. Follow the prompts.
    • Click Yes to the disclaimer.
    • Press the Scan button.
    • The program saves the FRST.txt, on the flash drive.
    • Click the Command prompt window, type exit, and press: Enter
    • Back at the System Recovery Options, press: ShutDown
    Please remove the USB flash drive from the infected computer, plug it into the clean computer, and copy/paste the FRST.txt in your reply.
      My Computer


  7. Posts : 45
    Windows 7 home premium x64
    Thread Starter
       #7

    I'm getting an error when I do it. G:\frst64.exe is not a valid win32 application.
      My Computer


  8. Posts : 45
    Windows 7 home premium x64
    Thread Starter
       #8

    Nvm. I got it I think now. Rechecked the download and messed something up. Il edit this with the txt file
      My Computer


  9. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #9

    thenecessity

    You getting an error due to the drive letter .

    Type in the commands below to get the drive letter of your flash drive

    diskpart
    press <ENTER>


    list volume
    press <ENTER>


    Make note of the USB flash drive then run the command that Cottonball is referring to change G:\ to the actual USB drive letter
      My Computer


  10. Posts : 45
    Windows 7 home premium x64
    Thread Starter
       #10

    Nah the error wasnt from the drive letter. I messed up the download somehow. first frst64.exe i put in the flash drive wasnt the right size. didnt copy the whole file somehow.

    THe two txt files were made at the same time.
    BSOD after removing Alureon.a Attached Files
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:01.
Find Us