Removed Alureon Trojan with Windows Defender, now windows7 won't reboot

Completely new to this, hopefully doing this right. I downloaded windows defender, ran and removed alureon trojan and now windows 7 will not reboot, tried using restore disc and its showing its there but I can't access it for some reason. Any help would be appreciated, would really prefer not to lose everything on the hard drive if possible. Thanks.

 

Welcome to MajorGeeks, RBallas

1. Please download Farbar Recovery Scan Tool and save it to a flash drive.
   
   Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
   
   Plug the flashdrive into the infected PC.
   :spacer:
2. If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.
   
   If you are using Vista or Windows 7 enter System Recovery Options.
   
   To enter System Recovery Options from the Advanced Boot Options:
   • Restart the computer.
   • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
   • Use the arrow keys to select the Repair your computer menu item.
   • Select US as the keyboard language settings, and then click Next.
   • Select the operating system you want to repair, and then click Next.
   • Select your user account an click Next.
   Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.
   To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html
   
   
   To enter System Recovery Options by using Windows installation disc:
   • Insert the installation disc.
   • Restart your computer.
   • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
   • Click Repair your computer.
   • Select US as the keyboard language settings, and then click Next.
   • Select the operating system you want to repair, and then click Next.
   • Select your user account and click Next.
3. On the System Recovery Options menu you will get the following options:
   Startup Repair
   System Restore
   Windows Complete PC Restore
   Windows Memory Diagnostic Tool
   Command Prompt
   
   Select Command Prompt
   
4. Once in the Command Prompt:
   • In the command window type in notepad and press Enter.
   • The notepad opens. Under File menu select Open.
   • Select "Computer" and find your flash drive letter and close the notepad.
   • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
     Note: Replace letter e with the drive letter of your flash drive.
   • The tool will start to run.
   • When the tool opens click Yes to disclaimer.
   • Press Scan button.
   • It will make a log (FRST.txt) on the flash drive. Please attach it to your next reply.

 

hopefully I did this correctly...

 

Yes you did it correctly. We just need to run one more scan using a different tool.

For x64 bit systems please download Listparts64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options as you did before with FRST64.

• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\ListParts.exe (for x64 bit version type e:\ListParts64.exe) and press Enter
  Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Put check mark on List BCD.
• Press Scan button.
• It will make a log (Result.txt) in the flash drive. Please attach this log to your next message.

 

Results file

 

Ok, now download the following fix.txt attachment below and save it to your flash drive in the same directory where ListParts64.exe is located.

Now, boot back into System Recovery Options as you did before, this time however, I want you to press the Fix button once after opening ListParts64.exe (no need to scan this time).

Once you have done this, reboot your PC without the flash drive plugged in and see if you are able to boot normally now.

 

Excellent! it worked, came up and did 2 memory test then windows booted up like normal. Thank you so much!!!

 

Great

It did 2 memory test? What memory test? Do you remember?

If you still need help with your PC, the next course of action would be to complete as much of this as possible: READ & RUN ME FIRST Malware Removal Guide

 

I'm not sure what memory tests they were. I have seen them before but not sure where, I think when installing windows on a desktop pc. Thanks again, very much appreciated, and will go through the malware removal guide!

 

Ok