Need Help with Virus:Win64/Alureon.gen!A

[Psychotic]

Are you still getting meesages?

[NSCodeRed]

I got an error message from Microsoft when it tried to install an update (Error 8004FF86) Security Essentials still says I have a virus, and for some reason sometimes I can't gain internet access through my router even though I can on other devices. I haven't had any more BSOD or blue screens but Windows has shut down twice unexpectedly. 

[Psychotic]

Scan with Malwarebytes Anti-Rootkit

Please download Malwarebytes Anti-Rootkit from here Malwarebytes : Malwarebytes Anti-Rootkit and save it to your desktop.

Be sure to print out and follow the instructions provided on that same page.

Caution: This is a beta version so please be sure to read the disclaimer and back up any important data before using.

• Double click the mbar.zip file to open it, then 'Extract all files'.
• Double click the mbar folder to open it, then double click mbar.exe to start the tool.
  

Check for Updates, then Scan your system for malware

If malware is found, do NOT press the Cleanup button yet. Click EXIT.

I'd like to see the log first so I can see what it sees. You'll find the log in that mbar folder as MBAR-log-[date and time]***.txt . Please attach that to your next reply.

[NSCodeRed]

Here is the log...

mbar-log-2013-11-24 (21-50-34).txt

[Psychotic]

Fix with Malwarebytes Anti-Rootkit

Run another scan with mbar.exe and click the CleanUp button. It will require a reboot.

When it has rebooted, run another scan with mbar.exe and click CleanUp again if necessary.

Send the mbar-log.txt along with an update on machine behavior.

[NSCodeRed]

Ran it, Windows startup repair popped up and now windows won't boot from my C drive. Says select bootable drive/media...

[Psychotic]

• Download ListParts to a USB flash drive. (for 64bit systems, download ListParts64 to a USB flash drive.)
• Plug the USB drive into the infected machine.
• Boot your computer into Recovery Environment

 

Restart the computer and press F8 repeatedly until the Advanced Options Menu appears.

• Select Repair your computer.
• Select Language and click Next
• Enter password (if necessary) and click OK, you should now see the screen below ...

• 

   

• Select the Command Prompt option.
• A command window will open.
• Type notepad then hit Enter.
• Notepad will open.
• Click File > Open then select Computer.
• Note down the drive letter for your USB Drive.
• Close Notepad.
• Back in the command window ....(depending on which version you´ve downloaded)
• Type e:/listparts.exe and hit Enter (where e: is replaced by the drive letter for your USB drive)
• Type e:/listparts64.exe and hit Enter (where e: is replaced by the drive letter for your USB drive)
• listparts will start to run.
• Place a checkmark next to "List BCD".
• Press the Scan button.
• When finished scanning it will make a log Result.txt on the flash drive.
• Close the command window.
• Boot back into normal mode and post me the Result.txt log please.

[NSCodeRed]

It wont even load into the advanced options menu at startup. All I can do is enter the Setup Utility...

[Psychotic]

do you have the windows disk?

[NSCodeRed]

I've been looking and can't find it lol. I'll report back when I do...

[Psychotic]

OK, I´m awaiting it!

[NSCodeRed]

I couldn't locate my discs or get any, so I downloaded the .iso file from windows and have been trying to load windows again (I have everything backed up on an external hdd) since it appears like my whole C:Drive was wiped but it is somehow failing to create a new system partition and I don't know how to view the setup logs for my information as to why...

[NSCodeRed]

Ok so what I did was take out my other 750gb drive and delete all the partitions on the remaining drive and started from there. Windows seems to be loading fine, I'll let you know when I have my os/laptop working and functional.

[Psychotic]

OK, thanks for the reply.

[AdvancedSetup]

Are you still with us?

[NSCodeRed]

Yes! I had an issue with windows having no drivers for anything until I found my Asus/Windows discs. Haven't been able to use them yet because work took me out of state for a bit but Im back and will have an update in 24 hours!

[Psychotic]

OK, thanks for the update.

[NSCodeRed]

Ok so my computer is up and running now, well mostly. It seems the only problem I currently have is booting windows. It will say the Boot Manager is missing, so I let it restart, press Esc till a boot menu appears, I'll change the BIOS to let the drive with windows installed boot first, save anx exit, and everything will see great until I go to turn my laptop on the next time and I'll have to repeat everything again. Any ideas!?

[Psychotic]

Create/USe Boot-Repair-Disc

1. DOWNLOAD BOOT-REPAIR-DISK
   Note: Select the right version depending on which windows is installed on your system.
2. Then burn it on CD or put it on USB key via Unetbootin
3. Insert the Boot-Repair-Disk and reboot the PC,
4. Choose your language,
5. Connect internet if possible
6. Click "Recommended repair"
7. When finished, you are provided a link to paste.ubuntu.com - write it down somewhere
8. Reboot the pc --> solves the majority of bootsector/GRUB/MBR problems
9. Post up the link you wrote down at step 6.
   

[NSCodeRed]

Unfortunately it didn't seem to help my problem but here is the link... http://paste.ubuntu.com/6587439

[Psychotic]

Scan with FRST (Recovery Environment)


To run FRST on Vista and Windows7:

• For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
• For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.
  

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.
  

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.
  

On the System Recovery Options menu you will get the following options:

• Startup Repair
• System Restore
• Windows Complete PC Restore
• Windows Memory Diagnostic Tool
• Command Prompt
• Select Command Prompt
  

• 
  In the command window:
• type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
• Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
  

It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!