Computer wont start after removing alureon virus with defender offline

TomAdams93,

Computer wont start after removing Alureon virus with defender offline

Can't even count the number of these cases...however, not everything is the same in each one.

Need to do more checking on what FRST64 is reporting..

With a clean computer, please go to Downloading ListParts
Save the downloaded file to the same USB flash drive: Running from G:\

Plug the flash drive into the infected computer.

Enter System Recovery Options as you did before when using FRST64.

Select: Command Prompt

At the Command Prompt window, type in notepad and press: Enter
In notepad, under the File menu select: Open
Select: Computer, and find your flash drive letter (G:). Then close the notepad.

At the Command Prompt window type G:\ListParts64.exe, and press: Enter
Note: Make sure the letter G: is the drive letter of your flash drive!

When ListParts starts to run, click Yes to the Disclaimer.
Place a check by: List BCD

Press: Scan

When finished scanning, ListParts places a Result.txt on the flash drive.
Please provide Results.txt in your reply.

The Fix button applies when there is a repair script present.

Have to take a good look at what you have, and decide what the script should contain.

Need to get some rest, early day at work tomorrow. Will get back with you.

Thanks for your patience.

Let's try this script...

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below
Save it to the USB pen drive, and name it: fixlist.txt

Code:

start
HKLM-x32\...\Run: [] - [x]
C:\ProgramData\eM1y4153.dat
C:\ProgramData\xhietgwvfjxqvqgabbr.reg
C:\$Recycle.Bin\S-1-5-21-1682970989-2299201136-1404161508-1001\$286bf40a02ffec57eae78ccedc6b55bb
C:\$Recycle.Bin\S-1-5-18\$286bf40a02ffec57eae78ccedc6b55bb
C:\Windows\svchost.exe
TDL4: custom:26000022 
end

Once again, run FRST64 as you did before.
When the tool opens click Yes to disclaimer.

Now, press the Fix button.

When done, FRST produces Fixlog.txt on the USB pen drive.

Please provide the Fixlog.txt on your reply.

Please check Post #7!!

See you tomorrow.