Windows Support Forum

Laptop infected, can't enable antivirus/windows firewall

Q: Laptop infected, can't enable antivirus/windows firewall

Hello I recently started receiving Windows explorer has stopped working messages and if I browsed the net it would always switch to using a proxy instead of wifi I did a full scan with both Symantec and Malwarebytes can't infected, firewall antivirus/windows Laptop enable but both results showed there was no malicious item I now also get messages indicating that my antivirus - Symantec Endpoint protection and Windows firewall has been disabled but I cannot enable them Today I switched on my laptop and was prompted to check one of my disks for consistency first before it went to the usual start up screen I can't plug in flashdrives to my computer because the file folders would start being changed to shortcuts etc and files would start disappearing I couldn't run DDS in normal mode because it either wouldn't respond or would close immediately after opening I was only able to run DDS in safemode with networking Below are the logs Many thanks in advance for your help DDS Ver - - - NTFS AMD Laptop infected, can't enable antivirus/windows firewall NETWORK Internet Explorer Run by Kim at on - - Microsoft Windows Home Premium GMT AV Symantec Endpoint Protection Disabled Updated DF - - D- - DC EFD BF SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF SP Symantec Endpoint Protection Disabled Updated D BEB -B A- E - B -B B Running Processes C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows system svchost exe -k netsvcs C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system svchost exe -k LocalServiceNoNetwork C Windows SYSTEM WISPTIS EXE C Program Files x Symantec Symantec Endpoint Protection Bin ccSvcHst exe C Windows SYSTEM WISPTIS EXE C Windows Explorer EXE C Windows system wbem wmiprvse exe C Windows system ctfmon exe C Program Files x Symantec Symantec Endpoint Protection Bin ccSvcHst exe C Program Files x Symantec Symantec Endpoint Protection Bin Smc exe C Windows system wbem unsecapp exe C Windows System cscript exe Pseudo HJT Report uStart Page hxxp sg yahoo com p us uProxyServer proxy starhub net sg BHO ContributeBHO Class C DC - - A A- D-C C - C Program Files x Adobe Adobe Contribute CS Plugins IEPlugin contributeieplugin dll BHO Symantec Intrusion Prevention D EC - AAE- -AEEE-F F C - C Program Files x Symantec Symantec Endpoint Protection Bin IPS IPSBHO dll BHO Groove GFS Browser Helper - C - D -B F - BBC D A E - C Program Files x Microsoft Office Office GROOVEEX DLL BHO Java Plug-In SSV Helper BB-D F - C-B EB-D DAF D D - C Program Files x Java jre bin ssv dll BHO EgisPBIE Class B CCBE- AF - A -BDAB-D F E C E F - C Program Files x Hewlett-Packard HP SimplePass Identity Protection EgisPBIE dll BHO Windows Live ID Sign-in Helper D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll BHO Office Document Cache Handler B F A - E - -BA - B E FF - C Program Files x Microsoft Office Office URLREDIR DLL BHO Java Plug-In SSV Helper DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll BHO HP Network Check Helper E FD -C BA- DCB- F - BD ADE - C Program Files x Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin dll TB Contribute Toolbar BDDE -E A - -B E- B B FC - C Program Files x Adobe Adobe Contribute CS Plugins IEPlugin contributeieplugin dll uRun Google Update C Users Kim AppData Local Google Update GoogleUpdate exe c uRun C Users Kim AppData Roaming js mRun StartCCC C Program Files x ATI Technologies ATI ACE Core-Static CLIStart exe MSRun mRun IAStorIcon C Program Files x Intel Intel reg Rapid Storage Technology IAStorIcon exe mRun EgisTecPMMUpdate C Program Files x EgisTec IPS PmmUpdate exe mRun EgisUpdate C Program Files x EgisTec IPS EgisUpdate exe -d mRun VitaKeyTSR C Program Files x Hewlett-Packard HP SimplePass Identity Protection EgisTSR exe run mRun Norton Online Backup C Program Files x Symantec Norton Online Backup NOBuClient exe mRun AdobeCS ServiceManager C Program Files x Common Files Adobe CS ServiceManager CS ServiceManager exe -launchedbylogin mRun SwitchBoard C Program Files x Common Files Adobe SwitchBoard SwitchBoard exe mRun BCSSync C Program Files x Microsoft Office Office BCSSync exe DelayServices mRun Adobe Photo Downloader C Program Files x Adobe Photoshop Elements apdproxy exe mRun Adobe ARM C Program Files x Common Files Adobe ARM AdobeARM exe mRun HP Quick Launch C Program Files x Hewlett-Packard HP Quick Launch HPMSGSVC exe mRun APSDaemon C Program Files x Common Files Apple Apple Application Support APSDaemon exe mRun QuickTime Task C Program Files x QuickTime QTTask exe -atboottime mRun BambooCore C Program Files x Bamboo Dock BambooCore exe StartupFolder C PROGRA MICROS Windows STARTM Programs Startup BLUETO LNK - C Program Files WIDCOMM Bluetooth Software BTTray exe uPolicies-Explorer NoDriveTypeAutoRun dword uPolicies-Explorer NoDrives dword uPolicies-Explorer NoControlPanel uPolicies-Explorer NoWindowsUpdate uPolicies-Explorer NofolderOptions mPolicies-Explorer NoDrives dword mPolicies-System ConsentPromptBehaviorAdmin dword mPolicies-System ConsentPromptBehaviorUser dword mPolicies-System EnableLUA dword mPolicies-System EnableUIADesktopToggle dword mPolicies-System PromptOnSecureDesktop dword IE E amp xport to Microsoft Excel - C PROGRA MICROS Office EXCEL EXE IE Se amp nd to OneNote - C PROGRA MICROS Office ONBttnIE dll IE Send image to amp Bluetooth Device - C Program Files WIDCOMM Bluetooth Software btsendto ie ctx htm IE Send page to amp Bluetooth Device - C Program Files WIDCOMM Bluetooth Software btsendto ie htm IE C - CB - a-A C -D FCDDC D - F B - A - F - DB-E F AEC - C Program Files x Windows Live Writer WriterBrowserExtension dll IE - A - A -B -DCA EEF CD - C Program Files x Hewlett-Packard HP Support Framework Resources HPNetworkCheck NCLauncherFromIE exe IE A- - f c- - EE C C - E -E D - - C-F F E C - C Program Files x Microsoft Office Office ONBttnIE dll IE FE F- FC - A - -EDE DB C CA - FFFDC -B - AE -AB - D B - C Program Files x Microsoft Office Office ONBttnIELinkedNotes dll IE CCA CA-C - ef- - C D F - C Program Files WIDCOMM Bluetooth Software btsendto ie htm DPF BC F - A - D -BEB - AA B AE - hxxp security symantec com sscv SharedContent vc bin AvSniff cab DPF BCDB - F - CB- C- A - C Users Kim AppData Local Temp f tmp urxvpn cab DPF EF CD -D CC- - B - BB E C E - C Users Kim AppData Local Temp f tmp f tunsrv cab DPF B -F AB- - DE-D C E E - C Users Kim AppData Local Temp IXP TMP InstallerControl cab DPF E F- D - A - DD -E EEEC - hxxp security symantec com sscv SharedContent common bin cabsa cab DPF BFB - - D - - A AFC - hxxp download eset com special eos OnlineScanner cab DPF AD C - E- D -B E - F D - hxxp java sun com update jinstall- -windows-i cab DPF CAFEEFAC- - - -ABCDEFFEDCBA - hxxp java sun com update jinstall- -windows-i cab DPF CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA - hxxp java sun com update jinstall- -windows-i cab DPF CC ACDF-B - F- C - C B ED A E - C Users Kim AppData Local Temp f tmp urxshost cab DPF E FF FA-B - C - -F A C FF - C Users Kim AppData Local Temp f tmp urxhost cab TCP NameServer TCP Interfaces B - - -A -A E D DHCPNameServer TCP Interfaces A A - C - A - -E D B NameServer TCP Interfaces B A - C- DDE-A - D E DF A DHCPNameServer TCP Interfaces B A - C- DDE-A - D E DF A DHCPNameServer TCP Interfaces B A - C- DDE-A - D E DF A C E B DHCPNameServer TCP Interfaces B A - C- DDE-A - D E DF A B A B DHCPNameServer TCP Interfaces B A - C- DDE-A - D E DF A F D C DHCPNameServer TCP Interfaces B A - C- DDE-A - D E DF A A E E F E DHCPNameServer Filter text xml - E - - D -A - B D E - C Program Files x Common Files Microsoft Shared OFFICE MSOXMLMF DLL Handler skype com - FFC B - B - DFF- - C DD F D - C Program Files x Common Files Skype Skype COM dll Handler wlpg - E EF CD-A A- A B- E F- F B E - C Program Files x Windows Live Photo Gallery AlbumDownloadProtocolHandler dll Notify SEP - C Program Files x Symantec Symantec Endpoint Protection Bin WinLogoutNotifier dll SEH Groove GFS Stub Execution Hook - B A F -DDA - -B BA- E CD - C Program Files x Microsoft Office Office GROOVEEX DLL x -BHO Groove GFS Browser Helper - C - D -B F - BBC D A E - C Program Files Microsoft Office Office GROOVEEX DLL x -BHO EgisPBIE Class B CCBE- AF - A -BDAB-D F E C E F - C Program Files x Hewlett-Packard HP SimplePass Identity Protection x EgisPBIE dll x -BHO Windows Live ID Sign-in Helper D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll x -BHO Office Document Cache Handler B F A - E - -BA - B E FF - C Program Files Microsoft Office Office URLREDIR DLL x -BHO Java Plug-In SSV Helper DBC -A - b-BC - C C C A - x -Run IgfxTray C Windows System igfxtray exe x -Run HotKeysCmds C Windows System hkcmd exe x -Run Persistence C Windows System igfxpers exe x -Run SynTPEnh C Program Files x Synaptics SynTP SynTPEnh exe x -Run AmIcoSinglun C Program Files x AmIcoSingLun AmIcoSinglun exe x -Run SysTrayApp C Program Files IDT WDM sttray exe x -Run IntelWireless C Program Files Common Files Intel WirelessCommon iFrmewrk exe tf Intel Wireless Tray x -Run SmartMenu C Program Files Hewlett-Packard HP MediaSmart SmartMenu exe background x -Run HPWirelessAssistant C Program Files Hewlett-Packard HP Wireless Assistant DelayedAppStarter exe C Program Files Hewlett-Packard HP Wireless Assistant HPWA Main exe hidden x -Run AdobeAAMUpdater- C Program Files x Common Files Adobe OOBE PDApp UWA UpdaterStartupUtility exe x -IE A- - f c- - EE C C - E -E D - - C-F F E C - C Program Files Microsoft Office Office ONBttnIE dll x -IE FE F- FC - A - -EDE DB C CA - FFFDC -B - AE -AB - D B - C Program Files Microsoft Office Office ONBttnIELinkedNotes dll x -IE CCA CA-C - ef- - C D F - C Program Files WIDCOMM Bluetooth Software btsendto ie htm x -Filter text xml - E - - D -A - B D E - C Program Files Common Files Microsoft Shared OFFICE MSOXMLMF DLL x -Handler skype com - FFC B - B - DFF- - C DD F D - lt orphaned gt x -Handler wlpg - E EF CD-A A- A B- E F- F B E - lt orphaned gt x -Notify igfxcui - igfxdev dll x -SEH Groove GFS Stub Execution Hook - B A F -DDA - -B BA- E CD - C Program Files Microsoft Office Office GROOVEEX DLL FIREFOX FF - ProfilePath - C Users Kim AppData Roaming Mozilla Firefox Profiles gik kbeb default FF - plugin C PROGRA MICROS Office NPAUTHZ DLL FF - plugin C PROGRA MICROS Office NPSPWRAP DLL FF - plugin C Program Files x Adobe Reader Reader AIR nppdf dll FF - plugin C Program Files x Java jre bin plugin npjp dll FF - plugin c Program Files x Microsoft Silverlight npctrlui dll FF - plugin C Program Files x TabletPlugins npwacom dll FF - plugin C Program Files x TabletPlugins npWacomTabletPlugin dll FF - plugin C Program Files x Windows Live Photo Gallery NPWLPG dll FF - plugin C Users Kim AppData Local Google Update npGoogleUpdate dll FF - plugin C Windows SysWOW Adobe Director np dsw dll FF - plugin C Windows SysWOW Macromed Flash NPSWF dll FF - plugin C Windows SysWOW npdeployJava dll FF - plugin C Windows SysWOW npmproxy dll FF - ExtSQL - - BBDA - - a-AA - D DB DB C ProgramData Symantec Symantec Endpoint Protection Data IPSFFPlgn SERVICES DRIVERS R PxHlpa PxHlpa C Windows System drivers PxHlpa sys - - R SymDS Symantec Data Store C Windows System drivers SEP C F B x SymDS sys - - R SymEFA Symantec Extended File Attributes C Windows System drivers SEP C F B x SymEFA sys - - R SepMasterService Symantec Endpoint Protection C Program Files x Symantec Symantec Endpoint Protection Bin ccSvcHst exe - - R HECIx Intel reg Management Engine Interface C Windows System drivers HECIx sys - - R urvpndrv F Networks VPN Adapter C Windows System drivers covpnv sys - - S BHDrvx BHDrvx C ProgramData Symantec Symantec Endpoint Protection Data Definitions BASHDefs BHDrvx sys - - S DVMIO DeviceVM IO Service C Windows System drivers dvmio sys - - S IDSVia IDSVia C ProgramData Symantec Symantec Endpoint Protection Data Definitions IPSDefs IDSviA sys - - S SymIRON Symantec Iron Driver C Windows System drivers SEP C F B x Ironx sys - - S SYMNETS Symantec Network Security WFP Driver C Windows System drivers SEP C F B x symnets sys - - S AESTFilters Andrea ST Filters Service C Program Files IDT WDM AESTSr exe - - S AMD External Events Utility AMD External Events Utility C Windows System atiesrxx exe - - S clr optimization v Microsoft NET Framework NGEN v X C Windows Microsoft NET Framework v mscorsvw exe - - S clr optimization v Microsoft NET Framework NGEN v X C Windows Microsoft NET Framework v mscorsvw exe - - S DvmMDES DeviceVM Meta Data Export Service C SwSetup HPQWMM QuickWeb QW SYS config DVMExportService exe - - S EgisTec Service EgisTec Service C Program Files x Hewlett-Packard HP SimplePass Identity Protection EgisService exe - - S EgisTec Ticket Service EgisTec Ticket Service C Program Files x Common Files EgisTec Services EgisTicketService exe - - S HP Support Assistant Service HP Support Assistant Service C Program Files x Hewlett-Packard HP Support Framework HPSA Service exe - - S HP Wireless Assistant Service HP Wireless Assistant Service C Program Files Hewlett-Packard HP Wireless Assistant HPWA Service exe - - S hpsrv HP Service C Windows System hpservice exe - - S HPWMISVC HPWMISVC C Program Files x Hewlett-Packard HP Quick Launch HPWMISVC exe - - S IAStorDataMgrSvc Intel reg Rapid Storage Technology C Program Files x Intel Intel reg Rapid Storage Technology IAStorDataMgrSvc exe - - S NOBU Norton Online Backup C Program Files x Symantec Norton Online Backup NOBuAgent exe - - S SkypeUpdate Skype Updater C Program Files x Skype Updater Updater exe - - S TabletServicePen TabletServicePen C Program Files Tablet Pen Pen Tablet exe - - S TouchServicePen Wacom Consumer Touch Service C Program Files Tablet Pen Pen TouchService exe - - S UNS Intel reg Management amp Security Application User Notification Service C Program Files x Intel Intel reg Management Engine Components UNS UNS exe - - S vcsFPService Validity VCS Fingerprint Service C Windows System vcsFPService exe - - S AmUStor AM USB Stroage Driver C Windows System drivers AmUStor sys - - S btwampfl Bluetooth AMP USB Filter C Windows System drivers btwampfl sys - - S btwl cap Bluetooth L CAP Service C Windows System drivers btwl cap sys - - S clwvd HP Webcam Splitter C Windows System drivers clwvd sys - - S f ipfw F Networks StoneWall Filter C Windows System drivers urfltv sys - - S Impcd Impcd C Windows System drivers Impcd sys - - S intelkmd intelkmd C Windows System drivers igdpmd sys - - S MyWiFiDHCPDNS Wireless PAN DHCP Server C Program Files Intel WiFi bin PanDhcpDns exe - - S NETw s Intel reg Wireless WiFi Link Series Adapter Driver for Windows - Bit C Windows System drivers NETw s sys - - S netw v Intel reg Wireless WiFi Link Series Adapter Driver for Windows Vista Bit C Windows System drivers netw v sys - - S RTL Realtek NT Driver C Windows System drivers Rt win sys - - S SrvHsfHDA SrvHsfHDA C Windows System drivers VSTAZL SYS - - S SrvHsfV SrvHsfV C Windows System drivers VSTDPV SYS - - S SrvHsfWinac SrvHsfWinac C Windows System drivers VSTCNXT SYS - - S SwitchBoard SwitchBoard C Program Files x Common Files Adobe SwitchBoard SwitchBoard exe - - S SyDvCtrl SyDvCtrl C Program Files x Symantec Symantec Endpoint Protection Bin SyDvCtrl sys - - S WatAdminSvc Windows Activation Technologies Service C Windows System Wat WatAdminSvc exe - - S WDC SAM WD SCSI Pass Thru driver C Windows System drivers wdcsam sys - - S wdkmd Intel WiDi KMD C Windows System drivers WDKMD sys - - S yukonw NDIS Miniport Driver for Marvell Yukon Ethernet Controller C Windows System drivers yk x sys - - S wlcrasvc Windows Live Mesh remote connections service C Program Files Windows Live Mesh wlcrasvc exe - - File Associations ShellExec dreamweaver exe Open C Program Files x Adobe Adobe Dreamweaver CS dreamweaver exe Created Last - - -------- d-sh--w- C found - - -------- d-sh--w- C Users Kim AppData Roaming - - -------- d-sh--w- C Program Files - - -------- d-sh--w- C e - - -------- d-----w- C Users Kim Revenge - - -------- d-----w- C Users Kim Hannibal - - -------- d-----w- C Program Files x Mozilla Maintenance Service Find M - - ----a-w- C Windows SysWow FlashPlayerCPLApp cpl - - ----a-w- C Windows SysWow FlashPlayerApp exe - - ----a-w- C Windows System drivers ntfs sys FINISH

Relevancy 100%
Preferred Solution: Laptop infected, can't enable antivirus/windows firewall

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/directdownload.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Laptop infected, can't enable antivirus/windows firewall

Hi there,my name is Marius and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.    Please download Malwarebytes Anti-Rootkit from here Malwarebytes : Malwarebytes Anti-Rootkit and save it to your desktop.Be sure to print out and follow the instructions provided on that same page.Caution: This is a beta version so please be sure to read the disclaimer and back up any important data before using.Double click the mbar.zip file to open it, then 'Extract all files'.Double click the mbar folder to open it, then double click mbar.exe to start the tool.Check for Updates, then Scan your system for malwareIf malware is found, do NOT press the Cleanup button yet. Click EXIT.I'd like to see the log first so I can see what it sees. You'll find the log in that mbar folder as MBAR-log-***.txt . Please attach that to your next reply.

http://www.bleepingcomputer.com/forums/t/500160/laptop-infected-cant-enable-antiviruswindows-firewall/
Relevancy 78.26%

Running Rkill and MBAM doesn't remove this issue Rkill log is this Rkill by enable to ZeroAccess windows unable firewall with and Infected Lawrence Abrams Grinler http www bleepingcomputer com Copyright - BleepingComputer com More Information about Rkill can be found at this link http www bleepingcomputer Infected with ZeroAccess and unable to enable windows firewall com forums topic html Program started at AM in x mode Windows Version Windows Ultimate Service Pack Checking for Windows services to stop No malware services found to stop Checking for Infected with ZeroAccess and unable to enable windows firewall processes to terminate No malware processes found to kill Checking Registry for malware related settings No issues found in the Registry Resetting EXE COM amp BAT associations in the Windows Registry Performing miscellaneous checks Windows Defender Infected with ZeroAccess and unable to enable windows firewall Disabled HKLM SOFTWARE Microsoft Windows Defender DisableAntiSpyware dword ALERT ZEROACCESS Reparse Point Junction found C Program Files Windows Defender en-US gt c windows system config Dir C Program Files Windows Defender MpAsDesc dll gt c windows system config File C Program Files Windows Defender MpClient dll gt c windows system config File C Program Files Windows Defender MpCmdRun exe gt c windows system config File C Program Files Windows Defender MpCommu dll gt c windows system config File C Program Files Windows Defender MpEvMsg dll gt c windows system config File C Program Files Windows Defender MpOAV dll gt c windows system config File C Program Files Windows Defender MpRTP dll gt c windows system config File C Program Files Windows Defender MpSvc dll gt c windows system config File C Program Files Windows Defender MSASCui exe gt c windows system config File C Program Files Windows Defender MsMpCom dll gt c windows system config File C Program Files Windows Defender MsMpLics dll gt c windows system config File C Program Files Windows Defender MsMpRes dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender-events bf ad e none cf dcd a dea MpEvMsg dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpAsDesc dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpClient dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpCmdRun exe gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpCommu dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpOAV dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpRTP dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MpSvc dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MSASCui exe gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MsMpCom dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MsMpLics dll gt c windows system config File C Windows winsxs amd security-malware-windows-defender bf ad e none b e b ecea MsMpRes dll gt c windows system config File Checking Windows Service Integrity Windows Firewall Authorization Driver mpsdrv is not Running Startup Type set to Manual BFE Missing Service BITS Missing Service iphlpsvc Missing Service MpsSvc Missing Service WinDefend Missing Service wscsvc Missing Service wuauserv Missing Service SharedAccess Missing ImagePath Searching for Missing Digital Signatures No issues found Checking HOSTS File No issues found Program finished at AM Execution time hours s minute s and second... Read more

A:Infected with ZeroAccess and unable to enable windows firewall

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.   Scan with TDSS-KillerPlease read and follow these instructions carefully. We do not want it to fix anything yet (if found), we need to see a report first.Download TDSSKiller.zip and extract to your desktopExecute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Copy to quarantine. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txtPlease post the contents of that log in your next reply.

http://www.bleepingcomputer.com/forums/t/528125/infected-with-zeroaccess-and-unable-to-enable-windows-firewall/
Relevancy 77.83%

Hi I am in the process of cleaning up my home network which has been infiltrated by Antivirus Thanks to Da Chew and beepme I am making good progress with that As the next step I am about to cleanup my laptop Before doing so I wanted to turn Microsoft s own firewall on When I followed the instructions till I get to the dialogue box with my different network options on it there are three possibilities shown One is for something called quot connection quot Please can someone tell me how to find out what this is The other two are for a wireless network with a red cross because we don t have that or use that capability and the other is for the lan which we have this computer linked into at home I A How Laptop On Firewall Windows Enable Pro For To Xp have already enabled the microsoft firewall for How To Enable Firewall For Windows Xp Pro On A Laptop two other computers running windows xp but the dialogu boxes here are different as it is xp professsional Hope I ve covered everything I need to here Thanks for your help Gerald

A:How To Enable Firewall For Windows Xp Pro On A Laptop

1394 connection:http://support.microsoft.com/kb/307736If you don't have two or more computers connected through this port (with a firewire type cable) then you are not using it and I wouldn't worry about it. The wireless connection that you are not using (wouldn't worry about it either). The firewall should most definately be set-up on your LAN...This is where you are connected to the internet.

http://www.bleepingcomputer.com/forums/t/151321/how-to-enable-firewall-for-windows-xp-pro-on-a-laptop/
Relevancy 74.39%

My AVG antivirus won t activate so I removed it and tried Avast with the same problem I also tried to enable or enable Microsoft firewall antivirus Can't Microsoft s firewall but an error came up Nothing noticeably strange happening with my computer otherwise dds txt file DDS Ver - - - NTFSx Internet Explorer Run by Hal at on - - Microsoft Windows XP Professional GMT - AV PC Cleaner Pro Disabled Updated Can't enable antivirus or Microsoft firewall A -C D - -B A-B E B BB Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs svchost exe svchost exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files HP HP Software Update HPWuSchd exe C Program Files Common Files Java Java Update jusched exe C WINDOWS system RunDLL exe C Program Files AVAST Software Avast avastUI exe C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files Steam Steam exe C Program Files HP Digital Imaging bin hpqtra exe svchost exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C WINDOWS system svchost exe -k hpdevmgmt C Program Files Java jre bin jqs exe C WINDOWS System svchost exe -k HPZ C WINDOWS system nvsvc exe C WINDOWS System svchost exe -k HPZ C WINDOWS system svchost exe -k imgsvc C Program Files iPod bin iPodService exe C WINDOWS System svchost exe -k HTTPFilter C Program Files HP Digital Imaging bin hpqSTE exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C WINDOWS notepad exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe Pseudo HJT Report uStart Page hxxp www yahoo com uInternet Settings ProxyOverride local uURLSearchHooks H - No File BHO D -C F - efb- B - ECA - No File BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO AVG Safe Search ca f - f e- b -a e- e e c c - c program files avg avg avgssie dll BHO Java Plug-In SSV Helper bb-d f - c-b eb-d daf d d - c program files java jre bin ssv dll BHO avast WebRep e e -ad d- bf-ac d-d f d - c program files avast software avast aswWebRepIE dll BHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll BHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dll TB avast WebRep e e -ad d- bf-ac d-d f d - c program files avast software avast aswWebRepIE dll uRun ctfmon exe c windows system ctfmon exe uRun Steam quot c program files steam Steam exe quot -silent mRun ASUS Update Checker c program files asus asusupdate updatechecker UpdateChecker exe mRun HP Software Update c program files hp hp software update HPWuSchd exe mRun Adobe ARM quot c program files common files adobe arm AdobeARM exe quot mRun SunJavaUpdateSched quot c program files common files java java update jusched exe quot mRun NvCplDaemon RUNDLL EXE c windows system NvCpl dll NvStartup mRun NvMediaCenter RunDLL exe NvMCTray dll NvTaskbarInit -login mRun nwiz c program files nvidia corporation nview nwiz exe installquiet mRun avast quot c program files avast software avast avastUI exe quot nogui mRun APSDaemon quot c program files common files apple apple application support APSDaemon exe quot mRun iTunesHelper quot c program files itunes iTunesHelper exe quot StartupFolder c docume alluse win startm programs startup hpdigi lnk - c program files hp digital imaging bin hpqtra exe StartupFolder c docume alluse win startm programs startup micros lnk - c program files microsoft office office OSA EXE IE e e dd -d - - b -f ba - windir Network Diagnostic xpnetdiag exe IE FB F -F - d -BB E- C F - c program files messenger msmsgs exe DPF AD C - E- D -B E - F D - hxxp java sun com update jinstall- -windows-i cab DPF B A- - E C-AD - F DF B AE - hxxp download mi... Read more

A:Can't enable antivirus or Microsoft firewall

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/459515 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system. If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.Thank you for your patience, and again sorry for the delay.*************************************************** We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE We also need a new log from the GMER anti-rootkit Scanner. Please note that if you are running a 64-bit version of Windows, you should not bother creating a GMER log. Please first disable any CD emulation programs using the steps found in this topic: Why we request you disable CD Emulation when receiving Malware Removal Advice Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here: How to create a GMER logAs I am just... Read more

http://www.bleepingcomputer.com/forums/t/459515/cant-enable-antivirus-or-microsoft-firewall/
Relevancy 71.81%

Hi This is my first post I had installed rkill sometime ago about omths ago when I had a virus trojan and sucessfully dealt with it However over past two days it would appear my laptop has been compromised on a number of levels I tried to download many firewall windows I appear Am antivirus, my all etc comprmsed infected....rkill, things including rkill but i think whatever has infected my laptop has manipulated the rkill and other downloads so that it provides misleading information I did manage to download an rkill and change the name and I think it may be working not sure though I tried to download other anti malware stuff but my connections are interrupted and it doesnt complete I should add that I am using it in safe mode Further my security settings appear to have been altered by whatever this infection virus trojan rootkit is such that I can not ensure I have even the most basic of protection Here is a copy of the print out from the rkill Rkill by Lawrence Abrams Grinler http www bleepingcomputer com Am I infected....rkill, my antivirus, windows firewall etc all appear comprmsed Copyright - BleepingComputer com More Information about Rkill can be found at this link http www bleepingcomputer com forums topic html Program started at PM in x mode Windows Version Windows Home Am I infected....rkill, my antivirus, windows firewall etc all appear comprmsed Premium Service Pack Checking for Windows services to stop Am I infected....rkill, my antivirus, windows firewall etc all appear comprmsed No malware services found to stop Checking for processes to terminate No malware processes found to kill Checking Registry for malware related settings No issues found in the Registry Resetting EXE COM amp BAT associations in the Windows Registry Performing miscellaneous checks Windows Defender Disabled HKLM SOFTWARE Microsoft Windows Defender DisableAntiSpyware dword ALERT ZEROACCESS rootkit symptoms found HKEY CLASSES ROOT CLSID aedc - - fd-b a - c feabec InprocServer ZA Reg Hijack C Users Paul AppData Local db -a dd-bbf - ae -c e f c ZA Dir C Users Paul AppData Local db -a dd-bbf - ae -c e f c L ZA Dir C Users Paul AppData Local db -a dd-bbf - ae -c e f c U ZA Dir Checking Windows Service Integrity COM Event System EventSystem is not Running Startup Type set to Automatic Windows Defender WinDefend is not Running Startup Type set to Manual Security Center wscsvc is not Running Startup Type set to Automatic Delayed Start Windows Update wuauserv is not Running Startup Type set to Automatic Delayed Start Searching for Missing Digital Signatures No issues found Checking HOSTS File HOSTS file entries found www guard com guard com i com www k com k com www hq com hq com com www com com www scan com scan com www gratisproben com gratisproben com namen com www namen com cs com www cs com www sexlinks com sexlinks com out of HOSTS entries shown Please review HOSTS file for further entries Program finished at PM Execution time hours s minute s and seconds s I was using Mcafee as my internet protection but it appears this has been hijacked Please provide assistance if you can Many thanks

A:Am I infected....rkill, my antivirus, windows firewall etc all appear comprmsed

Further, I should also add that i tried the tdss and it found nothing (so I am assuming that whatever the thing is, it has ensured it avoids detection)

http://www.bleepingcomputer.com/forums/t/488851/am-i-infectedrkill-my-antivirus-windows-firewall-etc-all-appear-comprmsed/
Relevancy 69.66%

I was infected with the DOJ virus and was able to get rid of it mostly i think But now Been unable infected virus with now and DOJ to enable firewall I can't enable the firewall and I'm still unsure if all of the virus was removed I have two issues first I want to make sure the virus is completely gone second is to be able to use the firewall its giving me an error Windows Firewall can't change some of your settings Error Been infected with DOJ virus and now unable to enable firewall code x I understand that only the virus issue will be solved in this thread and I'll have to start another one to solve firewall issue Thanks in advance Dan DDS Ver - - - NTFS AMD Internet Explorer BrowserJavaVersion Run by Owner at on - - Microsoft Windows Home Premium GMT - AV AVG Anti-Virus Free Edition Enabled Updated E C - B - FA - AB - E CB ECD SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF SP AVG Anti-Virus Free Edition Enabled Updated B F C - - E- - BB D A Running Processes C PROGRA AVG AVG avgrsa exe C Program Files x AVG AVG avgcsrva exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows system atiesrxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k LocalService C Windows system svchost exe -k netsvcs C Windows system atieclxx exe C Windows system svchost exe -k NetworkService C Windows System spoolsv exe C Windows system taskhost exe C Windows system Dwm exe C Windows system taskeng exe C Program Files x Common Files Adobe ARM armsvc exe C Program Files x AVG AVG avgidsagent exe C Windows Explorer EXE C Program Files x ASUS EPU- Engine FourEngine exe C Program Files x AVG AVG avgwdsvc exe C Program Files x Creative Shared Files CTDevSrv exe C Windows SysWOW AsHookDevice exe C Windows System svchost exe -k LocalServiceNoNetwork C Program Files x Canon IJPLM IJPLMSVC EXE C Program Files x LeapFrog LeapFrog Connect CommandService exe C Program Files x Common Files Nero Nero BackItUp NBService exe C Windows SysWOW PnkBstrA exe C Program Files x Microsoft Search Enhancement Pack SeaPort SeaPort exe C Windows system svchost exe -k imgsvc C Program Files x Common Files AVG Secure Search vToolbarUpdater ToolbarUpdater exe C Program Files x ASUS AI Manager AIManager exe C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE C Program Files x AVG AVG avgnsa exe C Program Files x AVG AVG avgemca exe C Program Files x Common Files Pure Networks Shared Platform nmsrvc exe C Program Files Common Files Microsoft Shared Windows Live WLIDSvcM exe C Program Files Canon MyPrinter BJMYPRT EXE C Program Files Windows Sidebar sidebar exe C Program Files x SlySoft AnyDVD AnyDVDtray exe C Users Owner AppData Roaming SanDisk Sansa Updater SansaDispatch exe C Program Files x AVG Secure Search vprot exe C Program Files x Canon Solution Menu EX CNSEMAIN EXE C ProgramData Ad-Aware Browsing Protection adawarebp exe C Program Files x AVG AVG avgui exe C Program Files x SlySoft AnyDVD ADvdDiscHlp exe C Windows splwow exe C Windows system SearchIndexer exe C Program Files Windows Media Player wmpnetwk exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files x ASUS AASP aaCenter exe C Windows system svchost exe -k SDRSVC C Windows system taskhost exe C Program Files x Origin Origin exe C Program Files x Origin OriginClientService exe C Program Files x Steam Steam exe C Program Files x Common Files Steam SteamService exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C Windows SysWOW Macromed Flash FlashPlayerPlugin exe C Windows SysWOW Macromed Flash FlashPlayerPlugin exe C Windows system mmc exe C Users Owner Downloads SecurityCheck exe C Windows SysWOW cmd exe C Windows system svchost exe -k defragsvc C Windows SysWOW notepad exe C Windows system SearchProtocolHost exe C Windows sy... Read more

A:Been infected with DOJ virus and now unable to enable firewall

Hello dbrady21 Welcome to The Forums!!Around here they call me Gringo and I'll be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.These are the programs I would like you to run next, if you have any problems with these just skip it and run the next one.-Security Check-Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.-AdwCleaner-Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please post the content of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.--RogueKiller--Download & SAVE to your Desktop RogueKiller or from here Quit all programs that you may have started.Please disconnect any USB or external drives from the computer before you run this scan!For Vista or Windows 7, right-click and select "Run as Administrator to start"For Windows XP, double-click to start.Wait until Prescan has finished ...Then Click on "Scan" buttonWait until the Status box shows "Scan Finished"click on "delete"Wait until the Status box shows "Deleting Finished"Click on "Report" and copy/paste the content of the Notepad into your next reply.The log should be found in RKreport[1].txt on your DesktopExit/Close RogueKiller+Gringo

http://www.bleepingcomputer.com/forums/t/487403/been-infected-with-doj-virus-and-now-unable-to-enable-firewall/
Relevancy 63.21%

hello
please i need urgent assistance. i think my laptop is infected. this morning i noticed a new icon on my task bar and a notification saying my computer was infected. i knew this wasn't right as i recently installed avast antivirus software on my t. howver this annoying message keeps popping up as a security warning saying" application cannot be executed. the file wuauclt.exe is infected.Do you want to activate your antivirus software now?". if i click "no", the message keeps coming back and if i click yes" it takes me to this site where im supposed to pay money for the antivirus subsciption. it does not let me restore my laptop or install malware bytes or any other program for that matter. i cant open my powerpoint or msword because it diaplays a message that they are infected....HELP!!!!!!!!i need my laoptop as i have exams on wednesday

A:urgent help!!!! !virus posing as "Windows antivirus" has infected my laptop

seeing that i got no help here,i fixed the problem using combofix...worked like magic

http://www.bleepingcomputer.com/forums/t/371057/urgent-help-virus-posing-as-windows-antivirus-has-infected-my-laptop/
Relevancy 62.78%

At startup, I get a balloon in the lower right corner saying that Windows Firewall is turned off and "Your computer may be at risk." It says to click the balloon to fix. This opens the Security Center where there is a notice that the firewall is turned off, and to click the "Enable Firewall" button. Then it says it cannot do this and to go the Control Panel and click the Firewall icon. Then an message comes up saying "Due to an unidentified problem windows firewall settings cannot be displayed."

I was trying to follow the instructions to remove spyware, but enabling the firewall is part of the procedure.

I am using a Dell E6500 with Windows XP.

I hope that this information is sufficient.

Thank you.

http://www.bleepingcomputer.com/forums/t/275255/cannot-enable-windows-firewall/
Relevancy 62.78%

Uninstalled Mcafee suite when expired, used add/remove programs and MCPR.exe. I go to control panel > windows firewall > green shield with check mark is not highlighted and will not allow me to check. At the top of the page It says: For your security some settings are controlled by Group Policy. also performed the following steps:

1. Open My Computer, double-click on Drive C
2. Double-click on Program Files
3. Look for any McAfee product folders that remain. Right-click on them and choose Delete
4. Close My Computer and other folders

I am using Windows XP home edition SP2
I currently have PC Tools Spyware Doctor with Anti-virus installed, as far as I can tell there is no firewall included.

I don't know where to go with this. Any help would be appreciated.

Thanks,
Phil

A:Windows Firewall Will Not Enable

Are you on an administrator account?

Also, a wise alternate would be to completely forget about Windows Firewall and go with something better like COMODO Firewall PRO or ZoneAlarm. Windows Firewall only blocks incoming connections but not outgoing which can make it useless aa that is an easy way for your hardware settings/ PC usage and many important things to be transfered by malware.

Regards,
David.

http://www.bleepingcomputer.com/forums/t/139411/windows-firewall-will-not-enable/
Relevancy 62.78%

Hello,

yesterday i discovered that i had a virus on my pc and downloaded microsoft security essentials .
That software found some viruses and got them deleted .
after i restarted my pc a little balloon pop up with the message that windows firewall is not turned on.
So i try to turn it on but the service won't start .
And because that service wont start my internet connection also wont start , i cant even find the connection in my control panel.
I have researched like whole day today tried allot of stuff and noting seems to work.
I really do do not want to reinstall windows because i know there must be a solution.
Please help me !!!

A:Windows Firewall (ICS) won't enable

Are you certain that all viruses / spyware have been removed? I would run more than just Microsoft software to remove them if I were you. I have never seen one software package detect and repair every infection. Obviously you have access with another computer to the Internet so get a flash drive and download some free tools like "Spybot Search and Destroy", "Super Anti-Spyware Pro", and "Adaware" and maybe "Avira" or "Avast" antivirus packages. Then, start your computer in safe mode by hitting F8 when booting up. Install the programs from you flash drive. Run them individually and see what comes up.

You could also do a repair install with your XP disk. Probably would be a lot faster to fix the symptoms. I would personally want to run the scans though to be certain the machine is not still infected. It's a painfully slow process to be thorough, but infections can be difficult sometimes.

Hope this helps.

Karaokeman

http://www.techsupportforum.com/forums/f10/windows-firewall-ics-wont-enable-495794.html
Relevancy 62.78%

Hello I am having a problem with my computer running Windows XP Home Sp installed Windows Security Essentials as antivirus automatic updates enabled Problem Windows firewall seems down When I open my Security Center and click on the firewall icon I get this message Message Box named 'Windows-Firewall' Original message Aufgrund eines unbekannten Problems k nnen die Einstellungen des Windows-Firewalls nicht angezeigt werden Message as translated from German 'Due to an unknown problem Windows-Firewall settings cannot be displayed' Controls okay-button As far as I can see as yet there is no other malfunction on my system just this firewall problem History Yesterday I had run a Malwarebytes quick scan which identified infected files see log below I clicked repair which deleted three of them and put two in quarantine Later in the evening I noticed the WSE icon being red in the status bar indicating PC-status risc much internet traffic going on that I did not start - WSE-window indicated online-protection off firewall down - Could activate neither WSE nor firewall in WSE-Window This window seemed somewhat dead like not accepting my mouse input - WindowsSecurity center gave me the above message when I tried to enable firewall - Thought installation of WSE might be corrupted trying to download from MS failed errormessage saying WSE allready installed on my system - Disconnected computer from the internet uninstalled WSE by way of control panel - hooked up to the internet again successfully downloaded and installed WSE status green now - but still firewall cannot be enabled see above From the Windows XP-Forum here I got the advice to install netfw inf as detailed in MS Knowledge base No improvement Here is the Malwarebytes-log Malwarebytes Anti-Malware www Cannot Firewall enable Windows malwarebytes org Datenbank Version v Windows XP Service Pack x NTFS Internet Explorer Aust Cannot enable Windows Firewall AUST-Q HX CC TV Administrator mbam-log- - - - - txt Art des Suchlaufs Quick-Scan Aktivierte Suchlaufeinstellungen Speicher Autostart Registrierung Dateisystem Heuristiks Extra HeuristiKs Shuriken PUP PUM Deaktivierte Suchlaufeinstellungen P P Durchsuchte Objekte Laufzeit Minute n Sekunde n Infizierte Speicherprozesse Keine b sartigen Objekte gefunden Infizierte Speichermodule Keine b sartigen Cannot enable Windows Firewall Objekte gefunden Infizierte Registrierungsschl ssel Keine b sartigen Objekte gefunden Infizierte Registrierungswerte Keine b sartigen Objekte gefunden Infizierte Dateiobjekte der Registrierung HKCR CLSID FCA - D- A -ACDA-D A F F InProcServer Trojan Access - gt B sartig Cannot enable Windows Firewall C RECYCLER S- - - e eb ad fd f bc e f n Gut fastprox dll - gt Erfolgreich ersetzt und in Quarant ne gestellt HKCR CLSID FBEB A -BEEE- - E- D C E InProcServer Trojan Access - gt B sartig C RECYCLER S- - - - - - - e eb ad fd f bc e f n Gut shell dll - gt Erfolgreich ersetzt und in Quarant ne gestellt Infizierte Verzeichnisse Keine b sartigen Objekte gefunden Infizierte Dateien C RECYCLER S- - - e eb ad fd f bc e f n Trojan Access - gt L schen bei Neustart C RECYCLER S- - - - - - - e eb ad fd f bc e f n Trojan Access - gt L schen bei Neustart C WINDOWS assembly GAC Desktop ini Rootkit access - gt L schen bei Neustart Ende Thanks in advance Norbert

A:Cannot enable Windows Firewall

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.===================================================ESET Online Scanner--------------------I'd like us to scan your machine with ESET OnlineScan  This process may may take several hours, that is normalHold down Control and click on this link to open ESET OnlineScan in a new window.Click the   button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the icon on your desktop.
Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:

Scan potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technologyESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.When the scan completes, click List ThreatsCopy and paste the information in your next reply.   Note:  If no malware was found you will not get a log.Click the Back button.Click the Finish button.===================================================Things I would like to see in your next reply. Please be sure to copy and paste the information rather than send an attachment. TDSSKiller logaswMBR logESET results 

http://www.bleepingcomputer.com/forums/t/485361/cannot-enable-windows-firewall/
Relevancy 62.78%

I was hoping the good people at this forum could help me out. You rescued my PC about 4 months ago and I now have another problem: the windows firewall cannot be enabled. I think my son may have downloaded malware, which I got rid of using Malawarebytes and SuperAntiSpyware. However the problem still exists- no firewall. Appreciate whatever you can do. Running a 7 year old Dell desktop PC with WinXP, Service Pack 3. Thanks

A:Cannot Enable Windows Firewall

Run this scan:Please print out and follow these instructions: "How to use SDFix". This program is for Windows 2000/XP ONLY.When using this tool, you must use the Administrator's account or an account with "Administrative rights"Disconnect from the Internet and temporarily disable your anti-virus, script blocking and any real time protection programs before performing a scan.When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt.If SDFix is unable to run after rebooting from Safe Mode, run SDFix in either Mode, and type F, then press Enter for it to finish the final stage and produce the report.Please copy and paste the contents of Report.txt in your next reply.Be sure to renable you anti-virus and and other security programs before connecting to the Internet.-- If the computer has been infected with the VirusAlert! malware warning from the clock and the Start Menu icons or drives are not visible, open the SDFix folder, right-click on either the XP_VirusAlert_Repair.inf or W2K VirusAlert_Repair.inf (depending on your version of Windows) and select Install from the Context menu. Then reboot to apply the changes.

http://www.bleepingcomputer.com/forums/t/241897/cannot-enable-windows-firewall/
Relevancy 62.78%

I got a spyware infection yesterday and I have just cleaned my system Suddenly the system tray icon for Windows Security Alerts pops up a enable Windows won't (ICS) Firewall message that I don t have a firewall Windows Firewall (ICS) won't enable active and that I am at risk I clicked on the icon and tried to enable Windows Firewall It said that it cannot do it from there and that I should enable if via the control panel - Firewall icon When I did it gives me a message Windows Firewall (ICS) won't enable that Windows Firewall (ICS) won't enable quot Windows Firewall settings cannot be displayed because the associated service is not running Do youwant to start the Windows Firewall ICS Service quot I click YES and then I get the message that quot windows cannot start the Windows Firewall ICS service Now I have questions What went wrong that the ICS service won t work and how do I get it to work I run a wireless router network at home on this laptop I have the Linksys Router s Firewall enabled and I also have MAC Address Security set up Do I also need to have Windows Native Firewall Security ON as well I have had the wireless setup running for almost a year and I am still a little confused about Firewalls and internet security no matter how many articles I read on the topic It seems that with all the layers of security I shouldn t get anything infected but they still do and the only thing that can t get thru the layers seems to be my office emails Not only do I have the Router Firewall up I had Windows Firewall enabled and I run Norton Antivirus weekly Thanks in advance nbsp

https://forums.techguy.org/threads/windows-firewall-ics-wont-enable.309797/
Relevancy 62.35%
Relevancy 62.35%

Hello guys,

every time that i disconnect from internet, Windows Firewall will be down (off). i want to enable it for ever. how can do this?


Sorry for my english,
Alireza

A:How to enable Windows Firewall forever?

Welcome.

What antivirus product are you using? It is my hunch it includes a firewall and is disabling the Windows Firewall.

http://www.sevenforums.com/system-security/66734-how-enable-windows-firewall-forever.html
Relevancy 62.35%

I cannot disable or enable my Windows Firewall. It doesn't make any sense! I am useing an Administrator Account and I am useing a Router and a Modem.

This image shows what the screen looks like trying to switch my Firewall:
http://img194.imageshack.us/img194/9779/thejd9.png

HELP!

A:I Cant Enable Or Disable My Windows Firewall!

Geek49, you have just posted multiple threads within the last hour, it seems your system is in need of some help and we will try to help you. But, we cannot possibly keep track of all your issues unless they are in 1 thread. It makes it so much easier to help you.

Plz follow my instruction on the 5 step thread to removing malware.


This thread will now be closed.

http://www.techsupportforum.com/forums/f10/i-cant-enable-or-disable-my-windows-firewall-111009.html
Relevancy 62.35%

pls help!!!
i cant turn on my windows firewall, it says that 'for security, some settings are c0ntrolled by group policy'. the options are greyed out. ive seen this problem on other threads but the solutions dont seem to work
 

A:Solved: Can't Enable Windows Firewall

Keep it turned off mate and forget all about it as it's crap.
Instead consider Zone Alarm as a firewall or others that people may mention.
 

https://forums.techguy.org/threads/solved-cant-enable-windows-firewall.481151/
Relevancy 62.35%

Hi TSF
My problem today is that i can't enable my windows firewall yesterday it was working fine but today it says "Due to an unidentified problem, Windows cannot display Windows Firewall settings. please help"

http://www.techsupportforum.com/forums/f10/cnat-enable-windows-firewall-316369.html
Relevancy 62.35%

I have managed to set up my wireless connection now both machines are constantly connected with wireless cards to my Vigor wireless router It appeard to work fine I have not yet managed to share files but that is next on the list My question is in order to allow my kids to use windows messenger I had to turn off the firewall that comes with the router Im sure this is a bad thing but I cannot find simple instructions to let me turn it on I got a link to some info but I could not locate the settings it referred to It cant be too hard any help appreciated Also I used firewall with messenger Enable windows the settings and transfer wisard in xp when I put in a new HD in Enable firewall with windows messenger my kids machine and said yes to all files and settings I was hoping that everything would transfer but no such luck I have had to reinstall most stuff The other HD is still there set to slave where are the settings hidden as Im going to have to do the same to mine if I ever get the replacement Asus board from dabs Do I need to get something like Ghost to do what I am trying nbsp

A:Enable firewall with windows messenger

I think you just need to enable the port that MSN Messenger uses in your router firewall. I'm not exactly sure right now as to which one that is, but when I have more time I will search for it.
 

http://www.techspot.com/community/topics/enable-firewall-with-windows-messenger.4379/
Relevancy 62.35%

Currently I'm running windows 7 64 bit, emachines. The problem I'm experiencing with windows firewall. I had it disabled it after installed the Comodo Internet Security and now I want it back so I tried to enabled it but can't enable it all I'm getting is an Error code 0x80070422. But the windows automatic update is enabled and it's in working order. I uninstalled CIS and then enabling the windows firewall but it didn't work and I don't know what else I could do. Any help would be greatly appreciated

A:[SOLVED] Can't enable windows 7 firewall

Fixed it. Start> type services> scroll down to Windows Firewall> right click> properties> startup type drop down manu click on the automatic apply ok. Mods you can lock this thread, thank you.

http://www.techsupportforum.com/forums/f217/solved-cant-enable-windows-7-firewall-498695.html
Relevancy 61.49%

I cannot enable either the Windows Firewall or the Automatic Updates Each time I try I get this error message quot For your security some settings are controlled by Group Policy quot I followed the instructions in the tutorial about how to configure the firewall and there is no checkbox by quot Protect my computer from quot when I click on the Advanced tab I m totally locked out All I get is the quot Group Policy quot error message I have Malwarebytes and Spybot installed and update and run each of them weekly I also have McAfee Security Center installed through Comcast my service provider I think that I have tracked it down to somewhere in the registry but that s Firewall Windows Updates or enable Automatic Cannot as far as I ve been able to get The IT at work says running ComboFix should help clear things up Is he right If so how do I download ComboFix Do I need to uninstall McAfee if I do Any suggestions Thanks spedlady

A:Cannot enable Windows Firewall or Automatic Updates

The IT at work says running ComboFix should help clear things up. Is he right?Hi spedlady52 -In my opinion "Not unless supervised by an expert" - Combofix is not like Malwarebytes or SUPERAntiSpyware , where you just install , update and off you go -It is a special Tool that is used only in special cases once an expert knows your history and exact problem -It also needs to be fully uninstalled after use -Thank You -

http://www.bleepingcomputer.com/forums/t/364934/cannot-enable-windows-firewall-or-automatic-updates/
Relevancy 61.49%

Hi,
Will it be enough if i just enable the firewall on both private and public without making any additional settings.
Now even your network settings are attacked by programs from computers as well as routers. What are the additional settings that could be applied to default firewall settings to get secured browsing experience and could get protection from hackers and other commercial crooks, who invade the dns nowadays.
I also want that i do not want any abnormal behaviour when i set the settings tightly

http://www.sevenforums.com/system-security/391166-enough-if-enable-windows-firewall-both-home-public.html
Relevancy 61.49%

how to enable firewall in windows xp home edition service pack 3 it is disabled by group policy i tried to enable it i got the message that it is not monitored please help me
 

https://forums.techguy.org/threads/how-to-enable-firewall-in-windows-xp-home-edition.950130/
Relevancy 61.06%

What is the command to change the action = allow the connection or block the connection of an existing firewall rule already set in outbound rules, lets say the name of that rule is "X", how can i do this?

http://www.sevenforums.com/system-security/396660-how-enable-disable-windows-firewall-rule-cmd-prompt.html
Relevancy 61.06%

OK I have read forum and support posts until I am tearing my hair out I am running Windows Vista Home Premium SP -bit with Windows Firewall and Microsoft Security Essentials My problem is that somewhere along the line my home network stopped allowing me to share files and my one printer Each computer can reach the internet on its own but they cannot share anything I tried enabling file sharing and printer sharing on the Vista computer where the printer is in Network and Sharing Center But when I click on the button to turn on printer sharing or file sharing or anything else there and hit Apply absolutely nothing happens After and enable printer in sharing Can't Windows Firewall file reading some posts I tried to enable exceptions for sharing in Windows Can't enable file and printer sharing in Windows Firewall Firewall but when I bring up the exceptions window I don't see anything except two Skype entries I added exceptions there for Ports and per another post but that hasn't helped either I have also checked my services and BFE and MpsSvc are running another post Now what Anybody have a suggestion

A:Can't enable file and printer sharing in Windows Firewall

Please describe the home network. Machines, OS on each, etc..

Also it's best to disable the firewall and AV software completely until you get the network stuff to work. Then turn it back on and see if it still works. Doing it the other way around can take a long time.

http://www.vistax64.com/network-sharing/300858-cant-enable-file-printer-sharing-windows-firewall.html
Relevancy 61.06%

Hello This is my second posting I know we are supposed to be patient but I work from my computer and it is my main only source of income I have missed quite a bit of work and I m hoping you can help My computer picked up a virus over a week and a half ago it deleted everything I scanned the computer but it wasn t enough I googled how to get rid of the trojan win I downloaded rkill from bleeping computer I also downloaded malwarbytes and tdsskiller That seemed to help but all of my desktop icons and everything else still hadn t returned After doing this I checked on my windows firewall and it was disabled The button to Virus and windows win32 Trojan can't enable firewall activate it said use recommended settings I clicked that but would get this error Windows cannot change some of your settings Error Code x I Trojan win32 Virus and can't enable windows firewall googled that message and came upon your site I saw someone with an issue similar to mine did what the tech instructed I was able to retrieve my icons and favourites and everything else but still not able to enable my window firewall I had been scanning my cmputer to see if the virus was gone and the scan reports came back clean however a couple of days ago an imposter Trojan win32 Virus and can't enable windows firewall antivirus showed up on my pc again saying there was a virus and to download I immediately x ed out and ran the malwarbytes and Microsoft Security Essentials Both scan reports came Trojan win32 Virus and can't enable windows firewall back clean but I m still too afraid to use my computer for work because I handle sensitive information and I need to make sure that it is no way compromised I know you guys are swamped but I would really appreciate you assistance as soon as you can Thank you very much Here are my recent scan results Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system taskhost exe C Windows system Dwm exe C Windows Explorer EXE C Program Files Microsoft Office Office GrooveMonitor exe C Program Files LeapFrog LeapFrog Connect Monitor exe C Program Files Common Files Adobe ARM AdobeARM exe C Program Files Microsoft Security Client msseces exe C Program Files iTunes iTunesHelper exe C Program Files Common Files Java Java Update jusched exe C Program Files Malwarebytes Anti-Malware mbamgui exe C Users Dani AppData Local ATT Connect Participant pull exe C Program Files Skype Phone Skype exe C Program Files im im Messenger IMC EXE C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Windows System StikyNot exe C Program Files Microsoft Office Office ONENOTEM EXE C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files Google Google Toolbar GoogleToolbarUser exe C Windows system Macromed Flash FlashUtil ActiveX exe C Users Dani AppData Local Microsoft Windows Temporary Internet Files Content IE Z QFH PS HijackThis exe C Windows system taskeng exe R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page https callcenter liveops com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http start facemoods com a fmtgl amp s searchTerms amp f R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolde... Read more

A:Trojan win32 Virus and can't enable windows firewall

By the way this isn't a corporate or company owned pc. Its my computer.
 

https://forums.techguy.org/threads/trojan-win32-virus-and-cant-enable-windows-firewall.1049700/
Relevancy 60.2%

Hello,

hopefully this is right subforum to start this thread
I've googled on how to quickly and easily enable/disable single Windows Firewall rule without having to open the firewall, going into advanced options, and eventually manually finding my rule there.
Best I've found was two commands when searching for 'shortcut':

run, netsh advfirewall firewall set rule name="NameOfFirewallRule" new enable=yes

and

run, netsh advfirewall firewall set rule name="NameOfFirewallRule" new enable=no

Firstly, I don't know how to use them (how do I create shortcut containing the above lines) or if they work at all.
Then, perhaps there is an easier way to quickly disable/enable single rule in Windows 7 firewall?

I did search the Tutorials section here, but only found how to make shortcut for whole Windows Firewall, which is not what I'm after

A:How to create shortcut for Windows Firewall rule (enable/disable)?

I use a program called Windows Firewall Control, which is not a standalone program, rather it gives the Windows 7 platform an easy to use advanced GUI to control rules and edit them as you see fit. Here is the link : Windows Firewall Control

http://www.sevenforums.com/system-security/313418-how-create-shortcut-windows-firewall-rule-enable-disable.html
Relevancy 60.2%

I'm pretty sure it was caused by some virus that disabled it. Windows firewall authorisation driver stated that >> This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

I had uninstalled my trend micro titanium from my laptop and installed microsoft security essentials ... And security essentials keep on detecting potential threats. I cleaned it and restarted my laptop and a blue screen came out said that some errors preventing windows from opening and the whole system restored back to few hours before ... But still, firewall was unable to start windows firewall ...

Solutions ?

A:Unable to enable windows firewall , error code 0x8007042c

  
Quote: Originally Posted by sxcherzinger


I'm pretty sure it was caused by some virus that disabled it. Windows firewall authorisation driver stated that >> This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

I had uninstalled my trend micro titanium from my laptop and installed microsoft security essentials ... And security essentials keep on detecting potential threats. I cleaned it and restarted my laptop and a blue screen came out said that some errors preventing windows from opening and the whole system restored back to few hours before ... But still, firewall was unable to start windows firewall ...

Solutions ?



GOOGLE IS YOUR FRIEND

Error code: 0x8007042c "Windows firewall cannot change some of your settings" when you try to turn on your Windows Firewall

http://www.sevenforums.com/system-security/205723-unable-enable-windows-firewall-error-code-0x8007042c.html
Relevancy 60.2%

We recently started to have issues with our primary home computer It started off as the browsers windows won't enable Infection update cannot issues, firewall and MBAM and more running extremely slow and then the other day our credit card was compromised I also found out that when my wife did our online banking she would logoff and when we Infection issues, MBAM won't update and cannot enable windows firewall and more went Infection issues, MBAM won't update and cannot enable windows firewall and more to log back in the next day the user account was set to my daughters account who doesn't use the computer That instantly got me thinking something was wrong I tried to update my Malwarebytes but it said there was no update but I recently updated it on another computer earlier in the day so I know that was not correct I restarted the computer in safe mode and successfully updated MBAM and did a search but it didn't find anything I'm running Norton Security Suite but have turned off the firewall and antivirus but whatever I have will not allow me to turn on Windows firewall either Whatever I have it being very intrusive and I cannot figure it out with my current suite of tools Help is urgently requested Scan result of Farbar Recovery Scan Tool FRST txt x Version - - Ran by Stoeffler administrator on STOEFFLER-PC on - - Running from C Users Stoeffler Downloads Loaded Profiles Stoeffler amp Sandy amp Branden amp Kayla amp Scott amp UpdatusUser amp Guest Available profiles Stoeffler amp Sandy amp Branden amp Kayla amp Scott amp UpdatusUser amp Guest Platform Windows Home Premium Service Pack X OS Language English United States Internet Explorer Version Default browser Chrome Boot Mode Normal Tutorial for Farbar Recovery Scan Tool http www geekstogo com forum topic -frst-tutorial-how-to-use-farbar-recovery-scan-tool Processes Whitelisted If an entry is included in the fixlist the process will be closed The file will not be moved NVIDIA Corporation C Windows System nvvsvc exe NVIDIA Corporation C Program Files NVIDIA Corporation Display nvxdsync exe NVIDIA Corporation C Windows System nvvsvc exe SEIKO EPSON CORPORATION C Program Files x Common Files EPSON EBAPI eEBSvc exe SUPERAntiSpyware com C Program Files SUPERAntiSpyware SASCORE EXE Apple Inc C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exe Apple Inc C Program Files Bonjour mDNSResponder exe Microsoft Corporation C Windows Microsoft NET Framework v WPF PresentationFontCache exe Symantec Corporation C Program Files x Norton Security Suite Engine ccsvchst exe Symantec Corporation C Program Files x Norton Ghost Agent VProSvc exe Protexis Inc C Program Files x Common Files Protexis License Service PsiService exe arvato digital services llc C Program Files Common Files Protexis License Service PsiService exe Microsoft Corp C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE Microsoft Corp C Program Files Common Files Microsoft Shared Windows Live WLIDSVCM EXE Symantec C Program Files x Norton Ghost Shared Drivers SymSnapServicex exe Symantec Corporation C Program Files x Norton Security Suite Engine ccsvchst exe Microsoft Corporation C Program Files Microsoft Mouse and Keyboard Center ipoint exe Microsoft Corporation C Program Files Microsoft Mouse and Keyboard Center itype exe Dropbox Inc C Users Sandy AppData Roaming Dropbox bin Dropbox exe NVIDIA Corporation C Program Files NVIDIA Corporation Display nvtray exe SEIKO EPSON CORPORATION C Program Files x Epson Software Event Manager EEventManager exe SEIKO EPSON CORPORATION C Program Files x Epson Software FAX Utility FUFAXSTM exe Symantec Corporation C Program Files x Norton Ghost Agent VProTray exe CANON INC C Program Files x Canon IJ Network Scanner Selector EX CNMNSST exe Apple Inc C Program Files x iTunes iTunesHelper exe Apple Inc C Program Files iPod bin iPodService exe NVIDIA Corporation C Program Files x NVIDIA Corporation NVIDIA Update Core daemonu exe Googl... Read more

A:Infection issues, MBAM won't update and cannot enable windows firewall and more

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please download TDSSiller and save it to your Desktop.Start tdsskiller.exe with administrator privileges.Accept the EULA and the KSN Statement.Click on Change parameters. (1)Make sure that all available options (except "Loaded modules") are checked and click OK. (2)Click on Start scan.If any threats are found don't delete them but choose the Skip option for all of them.Click on Report (3) to open the log file. (It is also saved at C:\TDSSKiller.<version_date_time>_log.txt).Copy and paste its contents in your next reply.

http://www.bleepingcomputer.com/forums/t/574905/infection-issues-mbam-wont-update-and-cannot-enable-windows-firewall-and-more/
Relevancy 59.77%

I actually have Kaspersky Internet Security as my security suite, which has an integrated firewall.

Should i disable the antivirus firewall and enable Comodo Firewall? (it's not Comodo IS, just free firewall).

Or should i use KIS firewall alone?
 

A:Disable Kaspersky Firewall and enable Comodo Firewall

KIS alone for sure. Its maybe the best firewall out there in any security suit u can find. turn on application control and set it to untrusted and u are safe to go.
 

https://malwaretips.com/threads/disable-kaspersky-firewall-and-enable-comodo-firewall.44036/
Relevancy 59.77%

Hello I ve spent the night meticulously getting rid of the Malware Defense virus to the greatest extent I know how to The pop-ups are no longer coming up none of the related files seem present and malwarebytes is no longer detecting it However malwarebytes IS repeatedly picking up Trojan FakeAlert files that I cannot seem to get rid of with the program and to my understanding from reading this forum this means that I need to head on over the HJT Which is where my first problem lies McAfee Windows start HJT, but and Center won't firewall Security Trying for enable to to Prepare I am unable to start Security Center or McAfee As far as Trying to Prepare for HJT, but Windows Security Center and McAfee won't start to enable firewall fixing Security Center I ve been unable to find it in services to change its start-up to automatic one suggested fix I saw Trying to Prepare for HJT, but Windows Security Center and McAfee won't start to enable firewall and I have not been able to find the strange applet that some users report they need to change in order to launch with tweakui Security Center I haven t tried messing with McAfee at all generally don t trust it for no good reason at all For last night s session I had avast installed but I uninstalled it after Malware Defense was gone I find that in general we don t get viruses unless somebody clicks on something stupid or visits a porn site my little brother s five-minute escapade to smut led to this Malware Defense problem As far as I remember avast never picked up this Trojan FakeAlert In addition if it means anything while I read that Trojan FakeAlert is supposed to spam you with fake anti-virus ads like Malware Defense did it doesn t seem to be doing so at all and seems to be leaving me alone But malwarebytes is detecting it which I don t like So I m not sure of what s going on there So before I head over to HJT to start that process and hopefully find a way to get rid of Trojan FakeAlert does anybody have advice as far as starting Security Center or McAfee Is there a way to fix them Or should I delete them and use another program Or something else Thanks a bundle let me know if you need me to post any additional information EDIT Hokay I m dumb Figured out that I could launch windows firewall without launching security center so I m going to go ahead and proceed to HJT However Security Center still won t start along with McAfee and I d appreciate any advice on that

A:Trying to Prepare for HJT, but Windows Security Center and McAfee won't start to enable firewall

Press the Windows Key + R keys on your keyboard or go to > Run..., then copy and paste this command into the Open dialog box: services.mscPress Ok.Click the Extended tab at the bottom to view all the info on your services.Scroll down the list and check for the Security Center service.Double-click on it or right-click and choose Properties.From the drop-down menu next to Startup Type, click on AutomaticStart the service by clicking the Start button.Click Apply, then OK and close any open windows.If you cannot complete a step, then skip it and continue with the next. After posting a log and getting assistance, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the member assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

http://www.bleepingcomputer.com/forums/t/280999/trying-to-prepare-for-hjt-but-windows-security-center-and-mcafee-wont-start-to-enable-firewall/
Relevancy 57.19%

Some time ago I got some security pop-ups redirects in IE I don t remember the exact content but the message was about a security risk and that I should press OK to scan the system I did not press OK but googled this on another computer I have Found a reference to a Sirefef virus found a manual removal process to remove the redirects pop-ups in IE have some experience in removing malware and virus software up clean Sirefef incetion. ++. Not enable windows able Antivirus center security can't to Then tried to scan computer using Ad-Aware Antivirus It found the virus but couldn t remove it Tried running Spyhunter It also found the same virus but couldn t remove it After scanning trying to repair deleting scanning repairing etc numerous times I thought the virus was gone Then realized that windows security center windows firewall windows update windows defender was disabled When trying to enable it again Sirefef incetion. Not able to enable windows security center ++. Antivirus software can't clean up error messages appear that the system is preventing it from re-enableing messages are in Norwegian so not much use posting here Installed and ran microsoft security essentials Found lt Trojan win Sirefef cfg gt Ran Ad-Aware antivirus again now and it came up with four infections lt Trojan Win Sirefef r v gt Traces c windows system dbbk F FD D EE C lt Trojan Win Generic BT gt Traces c windows installer b c fd- f -d - ea -f c c d u lt Trojan Win Sirefef ag v gt Traces c windows installer b c fd- f -d - ea -f c c d u lt Trojan Win Sirefef aga v gt Traces c windows installer b c fd- f -d - ea -f c c d u cb Followed the steps as instructed by bleepingcomputer com as to prepare a post to this forum Now I m lost and have no idea on how to approach this problem The DDS log is here the ark log and attach txt is attached as instructed DDS Ver - - - NTFSx Internet Explorer Run by Asserson at on - - Microsoft Windows Vista Home Premium GMT AV Lavasoft Ad-Aware Enabled Updated BE DD - F - - A -E A F SP Lavasoft Ad-Aware Enabled Updated C - - C - D -DDD BAFC C FW Lavasoft Ad-Aware Disabled - D- - F- F DEFBC FA Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k rpcss c Program Files Microsoft Security Client MsMpEng exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system svchost exe -k GPSvcGroup C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system taskeng exe C Windows System spoolsv exe C Program Files Ad-Aware Antivirus AdAwareService exe C Program Files Common Files Adobe ARM armsvc exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Windows system svchost exe -k bthsvcs C Windows System svchost exe -k LocalServiceNoNetwork C Program Files Intel Intel Matrix Storage Manager IAANTMon exe C Program Files HP QuickPlay Kernel TV QPCapSvc exe C Program Files Secunia PSI PSIA exe C Windows system svchost exe -k imgsvc C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C Program Files Hewlett-Packard Shared hpqwmiex exe C Windows system taskeng exe C Windows system Dwm exe C Windows Explorer EXE C Program Files Synaptics SynTP SynTPStart exe C WINDOWS RtHDVCpl exe C Program Files Intel Intel Matrix Storage Manager IAAnotif exe C Program Files HP QuickPlay QPService exe C Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exe C Program Files Hewlett-Packard HP QuickTouch HPKBDAPP exe C Program Files Hewlett-Packard HP Wireless Assistant HPWAMain exe C Program Files Hewlett-Packard HP Wireless Assistant WiFiMsg exe C ProgramData Ad-Aware Browsing Protection adawarebp exe C WINDOWS System rundll exe C Program Files HP HP Soft... Read more

A:Sirefef incetion. Not able to enable windows security center ++. Antivirus software can't clean up

Please do the following:For 32bit systems, download Farbar Recovery Scan Tool 32-Bitand save it to your desktop.Plug the flashdrive into the infected PC.Enter System Recovery Options. To enter System Recovery Options from the Advanced Boot Options:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.Use the arrow keys to select the Repair your computer menu item.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account and click Next.To enter System Recovery Options by using Windows installation disc:Insert the installation disc.Restart your computer.If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.Click Repair your computer.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account an click Next.On the System Recovery Options menu you will get the following options:Startup RepairSystem RestoreWindows Complete PC RestoreWindows Memory Diagnostic ToolCommand Prompt[*]Select Command Prompt[*]In the command window type in notepad and press Enter.[*]The notepad opens. Under File menu select Open.[*]Select "Computer" and find your flash drive letter and close the notepad.[*]In the command window type e:\frst.exe and press Enter Note: Replace letter e with the drive letter of your flash drive.[*]The tool will start to run.[*]When the tool opens click Yes to the disclaimer.[*]Place a check next to List Drivers MD5 as well as the default check marks that are already there[*]Press Scan button.[*]FRST will let you know when the scan is complete and has written the FRST.txt to file, close out this message, then type the following into the search box:services.exe[*]now press the search button[*]when the search is complete, search.txt will also be written to your USB[*]type exit and reboot the computer normally[*]please copy and paste both logs in your reply.(FRST.txt and Search.txt)[/list]

http://www.bleepingcomputer.com/forums/t/470437/sirefef-incetion-not-able-to-enable-windows-security-center-antivirus-software-cant-clean-up/
Relevancy 56.33%

DDS Ver - - - NTFSAMD Internet Explorer Run by Evan at on - - Microsoft Windows Home Premium GMT - Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Program Files Microsoft Security Client MsMpEng enable Turned free version. Windows shields Antivirus Keeps and cannot Off, real-time Reporting that is on Avast! exe C Windows system atiesrxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system svchost exe -k LocalService C Windows system Windows Keeps Reporting that Antivirus is Turned Off, and cannot enable real-time shields on Avast! free version. atieclxx Windows Keeps Reporting that Antivirus is Turned Off, and cannot enable real-time shields on Avast! free version. exe C Windows system svchost exe -k NetworkService C Program Files AVAST Software Avast AvastSvc exe C Windows System svchost exe -k netsvcs C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Program Files x IObit IObit Malware Fighter IMFsrv exe C Windows system taskhost exe C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exe E Program Files x Bluetooth Suite adminservice exe C Program Files Bonjour mDNSResponder exe C Program Files x Common Files Intel Schedule schedul exe C Program Files x Common Files LightScribe LSSrvc exe C Program Files x Common Files Intel Schedule schedhlp exe C Program Files x Novatel Wireless Verizon Drivers NWHelper exe C Program Files x Seagate Seagate Dashboard SeagateDashboardService exe C Windows system Dwm exe C Windows Explorer EXE C Windows system svchost exe -k imgsvc C Program Files x ASUS Printer Utilities UsbService exe C Program Files Realtek Audio HDA RAVCpl exe C Program Files Microsoft IntelliType Pro itype exe C Program Files Microsoft IntelliPoint ipoint exe C Program Files Microsoft IntelliType Pro dpupdchk exe E Program Files x Bluetooth Suite BtvStack exe E Program Files x Bluetooth Suite AthBtTray exe C Program Files Logitech Gaming Software LWEMon exe C Program Files Microsoft Security Client msseces exe C Program Files x Common Files Apple Internet Services ubd exe C Program Files x Common Files Apple Apple Application Support distnoted exe C Windows system conhost exe E Program Files x SlySoft AnyDVD AnyDVDtray exe C Program Files x NEC Electronics USB Host Controller Driver Application nusb mon exe E Program Files ATI Technologies ATI ACE Core-Static MOM exe C Program Files x PowerISO PWRISOVM EXE E Program Files x iTunes iTunesHelper exe C Program Files x CyberLink Shared files brs exe C Program Files x CyberLink PowerDVD PDVDServ exe C Program Files x Intel DataMigrationSoftware DataMigrationSoftwareMonitor exe C Program Files AVAST Software Avast AvastUI exe E Program Files ATI Technologies ATI ACE Core-Static CCC exe C Program Files iPod bin iPodService exe C Windows system SearchIndexer exe E Program Files x SlySoft AnyDVD ADvdDiscHlp exe C Windows system conhost exe C Windows system WUDFHost exe C Windows system svchost exe -k bthsvcs C Windows Microsoft Net Framework v WPF PresentationFontCache exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files x Malwarebytes Anti-Malware mbamservice exe C Program Files Windows Media Player wmpnetwk exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C Windows system DllHost exe C Windows system DllHost exe C Windows SysWOW cmd exe C Windows system conhost exe C Windows SysWOW cscript exe C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp search foxtab com s amp chnl dcom amp cd XzutBtN Y L QzutDtDtByDzy C EtAtAzy DyBzytAyCyD EtN D TzutBtDtCtCtDzztCyE amp cr mStart Page hxxp search foxtab com s amp chnl dcom amp cd XzutBtN Y L QzutDtDtByDzy C EtAtAzy DyBzyt... Read more

A:Windows Keeps Reporting that Antivirus is Turned Off, and cannot enable real-time shields on Avast! free version.

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster. NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer. NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.Security CheckDownload Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you. Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stallNote 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer"information and logs"In your next post I need the following
Log from Combofixlet me know of any problems you may have had
How is the computer doing now?Gringo

http://www.bleepingcomputer.com/forums/t/455259/windows-keeps-reporting-that-antivirus-is-turned-off-and-cannot-enable-real-time-shields-on-avast-free-version/
Relevancy 55.9%

Hey guys. So I have been out of the windows scene for the last 3 years. Previously was a windows user for 15 years.
Currently running Windows 8.1.

I currently have Eset Smart Security 2014 and MalwareBytes installed (might get MB premium). 
Is that enough these days? Or should I be looking into using Zonealarm or some other third party firewall too?
 
Hopefully Microsofts firewall is up to scratch these days
 
Thanks in advance.

A:Is windows firewall enough? + Antivirus set up

Most concerns you may have heard or read about the Windows Firewall were in the XP operating system so many users were advised to use third-party alternatives. Microsoft significantly improved the firewall to address these concerns in Vista and then added more improvements in Windows 7/8.5 Reasons Why the Windows Firewall is One of the Best Firewalls.For more information see Choosing a Firewall.I have been using ESET NOD32 along with Emsisoft Anti-Malware and Window's built in Firewall for years without issues.I also have Malwarebytes Anti-Malware (Premium) installed but I manually start it after boot up.

http://www.bleepingcomputer.com/forums/t/535202/is-windows-firewall-enough-antivirus-set-up/
Relevancy 55.47%

Yesterday my son's computer became infected with the ANTIVIRUS LIVE VIRUS The first thing I did was have him follow the instructions for Automated Removal Instructions for Please with infected help! antivirus Laptop live. Antivirus Live using Malwarebytes' Anti-Malware located at http www bleepingcomputer com viru antivirus-live This insidious virus will not allow him to access any of his antivirus software It would not even let him access the Internet until we went in through Safe Mode gt New Task gt iexplore exe Even then the virus will Laptop infected with antivirus live. Please help! not allow his computer to recognize our wireless router connection So far we have done the following Using a USB drive I downloaded Malwarebytes and rkill and transferred them to his computer Rkill ran a complete scan which we followed with a full Malwarebytes scan Several infections were found and were said to be removed However when he rebooted his computer after the scans the virus was still there We are in serious need of some good tech support to rid his computer of this virus His computer is a Compaq Presario SR OM running Windows XP Home Edition His antivirus software is Avira Antivir Personal His firewall is ZoneAlarm version with TrueVector version Laptop infected with antivirus live. Please help! and Driver version Thanks in advance for whatever help you can provide Randy

A:Laptop infected with antivirus live. Please help!

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

http://www.techsupportforum.com/forums/f100/laptop-infected-with-antivirus-live-please-help-453959.html
Relevancy 55.47%

I ran mbam and avg scans several times Had to antivirus still sys pro, no no no dds admin, windows have firewall, use your fixtm file Sometimes the svhast file was still have windows antivirus pro, no sys admin, no firewall, no dds in task manager Not usually One time Windows Antiviurs Pro showed up in task manager Not usually One time I found Windows Antivirus Pro somewhere in a windows file I deleted it But I still have it I couldn't run the dds program so I went ahead and ran the root repeal I have attached that file AVG found problems but I could only fix about You had to log in a system administrator and I am locked out MBAM found about and let me delete them Then I ran it again and had more- maybe I did see the words vendu worm in there I had keyboard blaster show up once but it may have been the antivirus pro that said that I can't remember for sure I have been fighting this off and on for a couple of weeks Betsy

A:still have windows antivirus pro, no sys admin, no firewall, no dds

I have run mbam, root repeal, atf, stopzilla (by mistake) and superantispyware multiple times. The last two things run were root repeal on a higher level and then sas. I will post the mbam, the last two root repeal, then the last two sas.After the last sas scan, I rebooted and stopzilla immediately identified 5 threats. (I did not delete them)windows/svtai77043.exewindows\adbho00265.exewindows\system3geyekerajbw...c\doc and settings\owner\ (i think hijacker) two in this category, i couldn't read the whole thing, no reportthen windows popped up two messageshpqtra08.exe is corrupt or unreadablereader_sl.exe is corrupt or unreadableI can now get into some control panel functions, there are no restore points, Would love some help===========Hello Please note: you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.Please be patient. It may take a few more days to get a response but your log will be reviewed and answered as soon as possible.Thank you for understanding.Orange Blossom ~ forum moderatorROOTREPEAL ? AD, 2007-2009==================================================Scan Start Time: 2009/08/25 18:56Program Version: Version 1.3.5.0Windows Version: Windows XP SP3============================================... Read more

http://www.bleepingcomputer.com/forums/t/251040/still-have-windows-antivirus-pro-no-sys-admin-no-firewall-no-dds/
Relevancy 55.47%

Help Somehow i uploaded this trying to watch an episode of gossip girl online and now it pops up every five seconds can t seem to get it off my computer and i am afraid i will do more damage or upload something worse if i try and figure it out myself my hijack log is Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes antivirus firewall Windows and security C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv Windows antivirus security and firewall exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files Google Common Google Updater GoogleUpdaterService exe C Program Files Common Files Microsoft Shared VS Windows antivirus security and firewall DEBUG MDM EXE C Program Files Windows antivirus security and firewall Norton AntiVirus navapsvc exe C WINDOWS system HPZipm exe C WINDOWS system svchost exe C WINDOWS System wltrysvc exe C WINDOWS System bcmwltry exe C WINDOWS system wscntfy exe C WINDOWS Explorer EXE C WINDOWS system hkcmd exe C PROGRA NORTON navapw exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files WAV wav exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Picasa PicasaMediaDetector exe C WINDOWS system algg exe C Program Files HP Digital Imaging bin hpqtra exe C Documents and Settings Kat Application Data TK Software TK EasyNote EasyNote exe C Program Files Google Google Desktop Search GoogleDesktop exe C Documents and Settings Kat Application Data TK Software TK EasyNote Note exe C Documents and Settings Kat Application Data TK Software TK EasyNote Note exe C Documents and Settings Kat Application Data TK Software TK EasyNote Note exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files iPod bin iPodService exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files Safari Safari exe C Program Files Java jre bin jucheck exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer SearchURL http windiwsfsearch com R - HKLM Software Microsoft Internet Explorer SearchURL http windiwsfsearch com R - HKCU Software Microsoft Internet Explorer Main Default Search URL http windiwsfsearch com R - HKCU Software Microsoft Internet Explorer Main Start Page http www newfirstpage com cm ator amp lswe amp lwsa Weather HourPetsCommand R - HKLM Software Microsoft Internet Explorer Main Search Bar http windiwsfsearch com ie html R - HKLM Software Microsoft Internet Explorer Main Search Page http windiwsfsearch com R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO helper - A F - B - E- F - EEB B - no file O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO VirRLWarningBHO Class - A EBFD - FA - ec-B D- DAE B D A - C Program Files VirRL VirRLWarning dll file missing O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - BHO NAV Helper - BDF E -B - AD-A -FADC B - C Program Files Norton AntiVirus NavShExt dll O - BHO no name - BE A F- FF - - B- E DB D - C Program Files Applications iebt dll file missing O - Toolbar Norton AntiVirus - CDD BF- FFB- - AD - DF B D - C Program Files Norton AntiVirus NavShExt dll O - HKLM ... Read more

https://forums.techguy.org/threads/windows-antivirus-security-and-firewall.763094/
Relevancy 55.04%

Three weeks ago my husband got a popup for windows antivirus pro and being non computer savvy clicked it and of course it installed It disabled the computer almost completely No programs ran it changed the internet settings and made things Removal/Windows Antivirus - Pro Infected antivirus Pro/Windows Police Windows difficult to do I looked here for instructions to remove it and after running spybot s amp d and combing the registries things returned to normal and I thought I had it contained Monday- he gets another one This time Windows police pro Again I turned to this forum for help This one is nastier than the first It completely disabled everything on his partition error messages stating there were Infected - Windows Police Pro/Windows Antivirus Removal/Windows antivirus Pro exe errors on anything you tried to run Taskbar popup stating quot infected install antivirus now quot and the official looking popup stating that I had no firewall installed I was able to get into the task manager on my partition and on Infected - Windows Police Pro/Windows Antivirus Removal/Windows antivirus Pro my partition found the files that I could and deleted them I had to run exefix to get anything to run at all I disabled antiproex in the msconfig file While nosing around I found shortcuts to windows antivirus pro which lead to the PAVRM exe file but it's nowhere to be found on my computer so I think I have going at once I still cannot get anything to run I downloaded malwarebytes - won't even open Spybot won't open SUPERantispyware only runs through the alternate start and then just terminates without notice I have however been able to remove some through short custom scans His partition starts up and if i try to run anything freezes and then re-boots I can only access the computer through my partition which I am an administrator even though I got messages that the administrator has blocked access to certain programs My partition's background has returned my web surfing is no longer redirected and no longer get any of the popups I can run everything except what I need to remove this I tried to go through all your steps I backed up what I could to cd because the xp backup and drive image xml failed to complete I cleaned my computer I tried more than once to run the dss file I get to the black screen telling me what it's going to do and it closes and then nothing happens I tried to run rootrepeal It opens but the only thing it scans is the processes It scans for about seconds and then terminates without an error message the only thing I can get from it is - C hyberfil sys - locked to the windows API before it shuts down I disabled my avg and unplugged the internet I am at the point that I'm not sure whether or not I should try to save it or just wipe and reinstall edit I was able to get rootrepeal to run on his partition in safemode See report below ROOTREPEAL copy AD - Scan Start Time Program Version Version Windows Version Windows XP SP Drivers ------------------- Name dump atapi sys Image Path C WINDOWS System Drivers dump atapi sys Address xF Size File Visible No Signed - Status - Name dump WMILIB SYS Image Path C WINDOWS System Drivers dump WMILIB SYS Address xFA Size File Visible No Signed - Status - Name rootrepeal sys Image Path C WINDOWS system drivers rootrepeal sys Address xF FE Size File Visible No Signed - Status - Name win k sys Image Path C WINDOWS win k sys Address xF FAA Size File Visible No Signed - Status - Name win k sys Image Path C WINDOWS win k sys Address xF DC Size File Visible No Signed - Status - Stealth Objects ------------------- Object Hidden Module Name UACdbonunoypa dll Process svchost exe PID Address x f Size Object Hidden Module Name kbiwkmjgjktoqb dll Process svchost exe PID Address x Size Object Hidden Module Name kbiwkmjgjktoqb dll Process svchost exe PID Address x Size Hidden Services ------------------- Service Name kbiwkmkvdlftpj Image Path C WINDOWS system drivers kbiwkmbaqjnome sys Service Name kbiwkmm... Read more

A:Infected - Windows Police Pro/Windows Antivirus Removal/Windows antivirus Pro

Nevermind. It was time to wipe it anyway, so I did. But thanks! Keep up the good work here!

http://www.bleepingcomputer.com/forums/t/256777/infected-windows-police-prowindows-antivirus-removalwindows-antivirus-pro/
Relevancy 55.04%

I just wanted to make a quick report that I can successfully get any version (sku) of ZoneAlarm working well on Windows 8. I have it installed now and it is functioning perfectly.

In case anyone is interested, I can detail the process of how to do so. It is not for the install and simply make it work crowd. It's a bit of a process, you have to do this, that and the other thing, but once it is working, it is set and forget and all is well.

So yup, if anyone is seriously interested, I'll add instructions here by request.

A:Got ZoneAlarm Antivirus/Firewall working on Windows 8

By the way, this version shown is currently in beta from CheckPoint and is free to use for anyone interested. It has Kaspersky Anitvirus built in, like all CheckPoint software with antivirus ability.

http://www.eightforums.com/system-security/5196-got-zonealarm-antivirus-firewall-working-windows-8-a.html
Relevancy 55.04%

I have Windows 98 still and I've used Zone Alarm Free Edition in the past with few problems but I've had some difficulty in downloading the latest version. I am trying to resolve the problem through Zone Alarm but just out of curiousity, are there any other free firewalls out there for Windows 98 that are just as good?

I still use AVG free edition as my antivirus program. I guess I should ask the same question. What other free antivirus programs are available for Windows 98 that are just as good or maybe better then AVG? I've also had some trouble with AVG recently as far as it getting "glitchy" on me.

Are there any reliable sites on the internet that rate all of these programs honestly and objectively as far as comparing various security programs to each other?

(I do have anti-spyware installed as well)
Thankyou!

A:Free Firewall/Antivirus programs for Windows 98?

My listSee my list here everything listed is free

http://www.bleepingcomputer.com/forums/t/28062/free-firewallantivirus-programs-for-windows-98/
Relevancy 55.04%

I use a third-party firewall that allows full control But some of my friends use the firewall built in to Window To each their own I've taken a look at that firewall and it's actually fairly flexible It has quite of bit of incoming traffic blocked by default but leaves outgoing traffic wide open I want to help them restrict outgoing traffic on their systems Many of them use Avira's free antivirus I would like to configure their Windows firewall aka Windows Firewall with Advanced Security to work with Avira while still blocking as much outgoing traffic as possible for them Blocking 7 firewall antivirus Windows with Avira free all outgoing traffic with the Windows firewall is trivial but I haven't found any documentation on Avira's site on how they recommend configuring the Windows firewall to work with their product perhaps because they want you to buy their pro version that has a firewall but as of this post their pro firewall does not even support IPv Avira free antivirus with Windows 7 firewall So before I reinvent the wheel and figure it out myself has anyone already set up the Windows firewall's outgoing traffic rules to work properly with Avira free antivirus that is not break it or impair its functionality in any way Also interestingly I see no Incoming Rules for the Windows firewall for Avira on their systems How is this possible given that they regularly get program and definition updates

http://www.sevenforums.com/system-security/395619-avira-free-antivirus-windows-7-firewall.html
Relevancy 55.04%

Last night while I was at work my weekly antivirus scan Comodo Internet Security popped up an error that read quot Update failed Error code x No such interface supported quot I clicked OK and then attempted to close the scan that had hung It popped up a new error of quot Update failed Error Code x aa Insufficient system by followed suspicious and Antivirus/Firewall firewall reinstall errors inability to events resources quot I rebooted and ran the scan a second time with the same results but the scan hung up on a different Antivirus/Firewall errors followed by suspicious events and inability to reinstall firewall file A third attempt hung on yet another file at random times in the scan process Reading the support forums for solutions suggested reinstall of the software So I uninstalled and attempted to reinstall The installation went on then ended with an unspecified error that ended in a rollback of the installation Checking my event logs has me concerned because I notice activation of many net framework errors and bootstart application start failures to load Most of which were files related to my firewall AV followed by Terminal Services Fast user switching IP Traffic filter driver Telephony and remote access connection manager services I am concerned that I have been hacked wormed or virused Mostly because under quot Documents and Settings there is a new quot Administrator quot folder which did not exist before where only quot All users Default user and Kumu Honua quot were in the past I have uninstalled the comodo internet security files as far as I am aware but still see remnants the event viewer with the bootstart failure messages I hope the above is enough to start assistance I m at my wits end and do not feel secure without a firewall AV I read all the stickies and I hope I have given all the information that I know and can offer for assistance

http://www.bleepingcomputer.com/forums/t/287885/antivirusfirewall-errors-followed-by-suspicious-events-and-inability-to-reinstall-firewall/
Relevancy 54.61%

I can't enable Windows' firewall An error message pops up The laptop freezes after minutes of use and a BSOD has appeared a few times with the error x A I can't install Windows Security Essentials--an error message always comes up I can install programs like Malwarebytes but they hang during the scan I'd appreciate any help DDS Ver - - - NTFS AMD Internet Explorer BrowserJavaVersion Run by admin at on - - Microsoft Windows Ultimate GMT - AV Kaspersky Anti-Virus Enabled Outdated CC -C B - D- FEF-A D A SP Windows Defender Disabled Updated D DDC A- F- 7 2012 Error, Windows Firewall infection 7 Possible antivirus Windows fae- E -DA C ACF SP Kaspersky Anti-Virus Enabled Updated ED D D-EF - B -B F- FE E A BB Running Processes C Windows 7 Firewall Error, Possible Windows 7 antivirus 2012 infection Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows system atiesrxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k LocalService C Windows system svchost exe -k netsvcs C Windows system atieclxx exe C Windows system svchost exe -k NetworkService C Windows system WLANExt exe C Windows System spoolsv exe C Program Files x Common Files Adobe ARM armsvc exe C Program Files x Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files WIDCOMM Bluetooth Software btwdins exe C Windows System svchost exe -k LocalServiceNoNetwork C Program Files Intel WiFi bin EvtEng exe C Program Files x Realtek Realtek PCIE Card Reader RIconMan exe C Program Files x Intel Services IPT jhi service exe C Program Files x Sony PMB PMBDeviceInfoProvider exe C Program Files x Common Files Intuit QuickBooks QBCFMonitorService exe C Program Files x Common Files Intuit DataProtect QBIDPService exe C Program Files Common Files Intel WirelessCommon RegSrvc exe C Program Files x Microsoft BingBar SeaPort EXE C Program Files x Microsoft Application Virtualization Client sftvsa exe C ProgramData Skype Toolbars Skype C C Service c c service exe C Windows system svchost exe -k imgsvc C Program Files x Sony VAIO Control Center VESMgr exe C Program Files Intel WiMAX Bin AppSrv exe C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE C Program Files x Yahoo SoftwareUpdate YahooAUService exe C Program Files x Sony VAIO Control Center VESMgrSub exe C Program Files x Sony VAIO Control Center VESMgrSub exe C Program Files Intel WiMAX Bin DMAgent exe C Program Files x Microsoft Application Virtualization Client sftlist exe C Windows SysWOW DllHost exe C Program Files Common Files Microsoft Shared Windows Live WLIDSvcM exe C Program Files x Common Files Microsoft Shared Virtualization Handler CVHSVC EXE C Windows system SearchIndexer exe C Windows system svchost exe -k bthsvcs C Windows system svchost exe -k LocalServiceAndNoImpersonation C Windows system Dwm exe C Windows system taskhost exe C Windows Explorer EXE C Program Files Realtek Audio HDA RAVBg exe C Program Files Common Files Intel WirelessCommon iFrmewrk exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Apoint Apoint exe C Windows System StikyNot exe C Program Files x Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files WIDCOMM Bluetooth Software BTTray exe C Program Files x Common Files Intuit QuickBooks QBUpdate qbupdate exe C Program Files x Intuit QuickBooks QBW EXE C Program Files x Intel Intel reg Rapid Storage Technology IAStorIcon exe C Windows SysWOW DllHost exe C Program Files x Sony ISB Utility ISBMgr exe C Windows system wbem wmiprvse exe C Program Files x CyberLink Shared files brs exe C Windows system wbem unsecapp exe C Program Files x Sony PMB PMBVolumeWatcher exe C Program Files WIDCOMM Bluetooth Software BtStackServer exe C Windows system wbem unsecapp exe C Program Files x iTunes iTunesHelper exe C Program Fil... Read more

A:Windows 7 Firewall Error, Possible Windows 7 antivirus 2012 infection

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete tab follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).=== Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifications.On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.Please post the contents of JRT.txt into your reply.===Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: TurorialLink 1Link 2IMPORTANT !!! Save ComboFix.exe to your Desktop1. Close any open browsers.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.3. Do not install any other programs until this if fixed.How to : Disable Anti-virus and Firewall...http://www.bleepingcomputer.com/forums/topic114351.htmlDouble click on ComboFix.exe and follow the prompts.When finished, it will produce a report for you.Please post the C:\ComboFix.txt Note: Do not mouse click ComboFix's window while it's running. That may cause it to stallNote: If you have difficulty properly disabling your protective programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.htmlNote: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.===Third party programs if not up to date can be the cause of infiltration an infection.Please restart the computer before running this security check.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.p.s.If the SecurityCheck program fails to run for any reason, run it as an Administrator.===Please paste the logs in your next reply DO NOT ATTACH THEM.Let me know what problem persists.

http://www.bleepingcomputer.com/forums/t/502916/windows-7-firewall-error-possible-windows-7-antivirus-2012-infection/
Relevancy 54.18%

Hi My laptop has been infected with Personal Protector Fake Personal Laptop Fake Infected Antivirus Protector with Anitvirus I m Laptop Infected with Personal Protector Fake Antivirus unable to perform any of the below operations on my computer My taskmanager has become disabled and I m not able to enable it Unable to open any windows the fake antivirus automatically closes any windows I try to open Unable to install any new anitivirus software Unable to update virus definition for Malwarebytes Anti-Malware Unable to run ComboFix I m unable to start my computer in SAFE mode as it comes up with the blue screen and restarts automatically I m able to run SuperAntiSpyware which detects the following items but is not able to remove any of them even after repeated runs a Trojan Dropper Win-NV Files C WINDOWS SYSTEM WINSCENT EXE Memory Processes C WINDOWS SYSTEM WINSCENT EXE b Rogue PersonalProtector C Program Files Personal Protector C Program Files Personal Protector base wdb C Program Files Personal Protector baseadd wdb C Program Files Personal Protector conf wcf C Program Files Personal Protector personalprotector exe C Program Files Personal Protector q C Program Files Personal Protector quarant wdb C Program Files Personal Protector queue wdb C Program Files Personal Protector un exeI tried the following but nothing seems to work Method Change the Task Manager Option through the Run lineClick on Start Run and type the following command exactly and press Enter REG add HKCU Software Microsoft Windows CurrentVersion Policies System v DisableTaskMgr t REG DWORD d fMethod Change Task Manager through a Registry REG fileClick on Start Run and type Notepad and press Enter Copy and paste the information between the dotted lines into Notepad and save it to your desktop as taskmanager reg ------------------------------------Windows Registry Editor Version HKEY CURRENT USER Software Microsoft Windows CurrentVersion Policies System quot DisableTaskMgr quot dword -------------------------------------Double click on the taskmanager reg file to enter the information into the Windows registryPlease suggest how should I go about removing this from my laptop Thanks Swami

A:Laptop Infected with Personal Protector Fake Antivirus

I tried downloading DDS and RootRepeal and save the log as mentioned in the Preparation guide, though I was able to run DDS, the log window which opens up in Notepad is immedaitely closed by the fake anitvirus, it does not allow me to save the log file.I was not able to run RootRepeal and the windows is closed by the Fake Antivirus.===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.Please be patient. It may take several days, up to two weeks perhaps less, to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.Thank you for understanding.Elise - forum moderator

http://www.bleepingcomputer.com/forums/t/284892/laptop-infected-with-personal-protector-fake-antivirus/
Relevancy 54.18%

Hi unfortunately my laptop was infected by this malware named quot Disk Antivirus Professional quot Whenever window is on the desktop page this malware will auto run a scan and telling me my computer was infected No program and software can be executed Appreciated if someone can malware. Professional infected Antivirus Disk Laptop by help me out on this Thank you Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows WinNT MSIE Internet Explorer v Boot mode Safe mode with network support Running Laptop infected by Disk Antivirus Professional malware. processes C Users Public HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http g msn com HPNOT R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http search imesh com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http g msn com HPNOT R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page Laptop infected by Disk Antivirus Professional malware. http g msn com HPNOT R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKLM Software Microsoft Internet Explorer Main Local Page C Windows SysWOW blank htm R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName F - REG system ini UserInit userinit exe O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files x HP Digital Imaging Smart Web Printing hpswp printenhancer dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C Program Files x Microsoft Office Office GrooveShellExtensions dll O - BHO Windows Live ID Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Windows Live Messenger Companion Helper - FDDE B- F- -AB F- CBEFF - C Program Files x Windows Live Companion companioncore dll O - BHO MediaBar - ABB B B-AB D- ED - - FD AA F F - C PROGRA IMESHA MediaBar ToolBar iMeshMediaBarDx dll O - BHO Microsoft Live Search Toolbar Helper - d ce e -f a- - e- dc f c f - c Program Files x MSN Toolbar msneshellx dll O - BHO Ask Toolbar BHO - D C F- A- -A AD- D - C Program Files x Ask com GenericAskToolbar dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll O - BHO HP Smart BHO Class - FFFFFFFF-CF E- F B-BDC - E E A - C Program Files x HP Digital Imaging Smart Web Printing hpswp BHO dll O - Toolbar Microsoft Live Search Toolbar - E ED C- CB - d -B E -AB C C - c Program Files x MSN Toolbar msneshellx dll O - Toolbar MediaBar - ABB B B-AB D- ED - - FD AA F F - C PROGRA IMESHA MediaBar ToolBar iMeshMediaBarDx dll O - Toolbar Ask Toolbar - D C F- A- -A AD- D - C Program Files x Ask com GenericAskToolbar dll O - HKLM Run StartCCC quot C Program Files x ATI Technologies ATI ACE Core-Static CLIStart exe quot MSRun O - HKLM Run HPCam Menu quot c Program Files x Hewlett-Packard Media Webcam MUITransfer MUIStartMenu exe quot quot c Program Files x Hewlett-Packard Media Webcam quot UpdateWithCreateOnce quot Software Hewlett-Packard Media Webcam quot O - HKLM Run QlbCtrl exe C Program Files x Hewlett-Packard HP Quick Launch Buttons QlbCtrl exe Start O - HKLM Run NortonOnlineBackupReminder quot C Program Files x Symantec Norton Online Backup Activation NobuActivation exe quot UNATTENDED O - HKLM Run SunJavaUpdateSched quot C Program Files x Common Files Java Java Update jusched exe quot O - HKLM Run HP Software Update C Program Files x Hp HP Software Update HPWuSchd exe O - HKLM Run WirelessAssista... Read more

Relevancy 54.18%

I keep getting a message to download antivirus software to get rid of win brontok and my IE and firefox homepages are also hijacked to a redirect page Here is my HJT log - antivirus Laptop program popup fake infected with please help me get rid of this McAfee Viruscan AdawareAE and Spybot Search and Destroy have all failed Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Laptop infected with popup fake antivirus program Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS Laptop infected with popup fake antivirus program system svchost exe C WINDOWS System svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C Program Files Lavasoft Ad-Aware AAWService exe C WINDOWS system LEXBCES EXE C WINDOWS system spoolsv exe C WINDOWS system LEXPPS EXE C Program Files Cisco Systems VPN Client cvpnd exe C Program Files Java jre bin jqs exe C PROGRA McAfee MSC mcmscsvc exe c program files common files mcafee mna mcnasvc exe c PROGRA COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C Program Files Dell NICCONFIGSVC NICCONFIGSVC exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C Program Files Apoint Apoint exe C Program Files Dell Media Experience PCMService exe C WINDOWS System svchost exe C Program Files Apoint Apntex exe C Program Files Dell QuickSet quickset exe C WINDOWS system WLTRAY exe C Program Files CyberLink PowerDVD DVDLauncher exe c PROGRA mcafee com agent mcagent exe C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS system dla tfswctrl exe C Program Files Adobe Photoshop Album Starter Edition Apps apdproxy exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C Program Files Adobe Acrobat Distillr Acrotray exe C Program Files Java jre bin jusched exe C Program Files Spybot - Search amp Destroy TeaTimer exe C WINDOWS system igfxsrvc exe C Program Files Digital Line Detect DLG exe C PROGRA McAfee VIRUSS mcsysmon exe C Program Files Mozilla Firefox firefox exe C Program Files Lavasoft Ad-Aware AAWTray exe C Program Files Java jre bin java exe C Documents and Settings Da Desktop HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKCU Software Microsoft Internet Explorer Main Start Page http www comcast net R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell me com myway R - URLSearchHook Synapse UrlSearchHook Class - D A E- D - B -AFD -DA E AE AF B - C Program Files Fuji Medical System Synapse Workstation FujiFld dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Synapse BHO - -E C - d- A-A BD E D - C Program Files Fuji Medical System Synapse Workstation FujiFld dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dll O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files McAfee VirusScan scriptsn dll O - BHO Adobe PDF Conversion Toolbar Helper - AE CD -E - f- - EE - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dll O - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dll O - Toolbar Adobe PDF - -D C - - FA - E EAAC - C Program Files Adobe Acrobat Acrobat AcroIEFavClient dll O - HKLM Run Apoint C Program Files Apoint Apoint exe O - HKLM Run PCMService quot C Program Files Dell Media Experience PCMService exe quot O - HKLM Run Dell QuickSet C Program Files Dell QuickSet quickset exe O - HKLM Run Dell Wireless Manager UI C WINDOWS system WLTRAY O - HKLM Run DVDLau... Read more

A:Laptop infected with popup fake antivirus program

I did a Kaspersky scan and found the culprit:

Trojan-Downloader.Win32.Small.alre

Can someone help me figure out how to remove this?

Thank you.
 

https://forums.techguy.org/threads/laptop-infected-with-popup-fake-antivirus-program.845082/
Relevancy 54.18%

I have a Toshiba laptop running Windows bit and with infected software laptop antivirus fake Toshiba when it was started up today the desktop image had changed to a warning message and some unfamiliar virus scan program started up Toshiba laptop infected with fake antivirus software When it was done it gave me the option of getting a solution for the virus or continuing unprotected I have seen this kind of thing before so I chose to close out of it Balloons about updates were also popping up in the system tray I booted into safe mode and the fake virus software didn t appear I ran Toshiba laptop infected with fake antivirus software a Webroot virus scan and it found several suspicious cookies as well as a file that seemed to be related to the fake virus scan software Quarantining deleting these files made no difference when booting into Windows normally that is the fake virus scanner started up again I have run DDS and the report is below as well as the required attachment Any help is appreciated DDS Ver - - - NTFS AMD Run by Owner at on Sat Internet Explorer Microsoft Windows Home Premium GMT - AV Webroot AntiVirus with Spy Sweeper Enabled Updated D - C - F -E A - FB E SP Windows Defender Enabled Updated D DDC A- F- fae- E -DA C ACF SP Webroot AntiVirus with Spy Sweeper Enabled Updated E FC - A B- A C-D - D A C Running Processes C windows system wininit exe C windows system lsm exe C windows system svchost exe -k DcomLaunch C Program Files x Webroot Security Current Framework WRConsumerService exe C windows system svchost exe -k RPCSS C windows system atiesrxx exe C windows System svchost exe -k LocalServiceNetworkRestricted C windows System svchost exe -k LocalSystemNetworkRestricted C windows system svchost exe -k netsvcs C windows system svchost exe -k LocalService C windows system svchost exe -k NetworkService C windows System spoolsv exe C Program Files Common Files ActivIdentity ac sharedstore exe C windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files ActivIdentity ActivClient acevents exe C windows system svchost exe -k LocalServiceNoNetwork C PROGRA FILMFA bar bin pabarsvc exe C windows system atieclxx exe C Program Files x Microsoft Application Virtualization Client sftvsa exe C Windows system TODDSrv exe C Program Files TOSHIBA Power Saver TosCoSrv exe C windows system taskhost exe C windows system Dwm exe C windows Explorer EXE C Program Files TOSHIBA TECO TecoService exe C Program Files x Webroot Security current plugins antimalware AEI exe C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE C Program Files TOSHIBA FlashCards TCrdMain exe C windows system SearchIndexer exe C Program Files x Yahoo SoftwareUpdate YahooAUService exe C Program Files x Microsoft Application Virtualization Client sftlist exe C Program Files Common Files Microsoft Shared Windows Live WLIDSvcM exe C Program Files x Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Windows System rundll exe C windows SysWOW rundll exe C Program Files x Common Files Microsoft Shared Virtualization Handler CVHSVC EXE C windows system svchost exe -k NetworkServiceNetworkRestricted C windows System svchost exe -k LocalServicePeerNet C Program Files Windows Media Player wmpnetwk exe C windows SysWOW rundll exe C Program Files x Webroot Security current plugins antimalware SSU EXE C windows system DllHost exe C windows System svchost exe -k secsvcs C windows system sppsvc exe C windows system svchost exe -k SDRSVC C windows system vssvc exe C windows System svchost exe -k swprv C windows system SearchProtocolHost exe C windows system SearchFilterHost exe c program files windows defender MpCmdRun exe C windows system wbem WMIADAP EXE C windows system wbem wmiprvse exe C windows system DllHost exe C windows system DllHost exe C Users Owner Desktop dds scr C windows system conhost exe C windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp www google com ig brand TSND amp bmod TSND uDefault Page URL hx... Read more

A:Toshiba laptop infected with fake antivirus software

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan again:Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREWe also need a new log from the GMER anti-rootkit Scanner. Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step.Please first disable any CD emulation programs using the steps found in this topic:Why we request you disable CD Emulation when receiving Malware Removal AdviceThen create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:How to create a GMER logThanks and again sorry for the delay.Regards,Georgi

http://www.bleepingcomputer.com/forums/t/381805/toshiba-laptop-infected-with-fake-antivirus-software/
Relevancy 54.18%

The Security Center of my Windows 7 does not recognize my antivirus and firewall. I get a message saying that no antivirus and no firewall are installed while I have them actually installed and working.

I have tried to delete the C:\windows\system32\wbem\repository folder and reboot the machine, but the problem is not solved.

Could anyone help me?

Thanks in advance.

A:Windows 7 security center does not detect antivirus and firewall

Reinstall your antivirus

http://www.sevenforums.com/system-security/175790-windows-7-security-center-does-not-detect-antivirus-firewall.html
Relevancy 54.18%

Hi,

Does anyone know please what rules should be created in Windows Firewall in order for NOD32 Antivirus to update, considering that all outbound trafic is blocked, and all the rules should be created manually.

Thank you.

http://www.tenforums.com/antivirus-firewalls-system-security/69549-windows-firewall-rules-nod32-antivirus-can-update.html
Relevancy 54.18%

Hi,
Does anyone know please what rules should be created in Windows Firewall in order for NOD32 Antivirus to update, considering that all outbound trafic is blocked, and all the rules should be created manually.
Thank you.

http://www.bleepingcomputer.com/forums/t/632055/windows-firewall-rules-for-nod32-antivirus-to-can-update/
Relevancy 54.18%

Hi,
Does anyone know please what rules should be created in Windows Firewall in order for NOD32 Antivirus to update, considering that all outbound traffic is blocked manually with intention, and all the rules should be created manually.
Thank you.

http://forums.windowscentral.com/ask-question/445078-windows-firewall-rules-nod32-antivirus-can-update.html
Relevancy 54.18%

I run Windows I think bit not sure I have been getting hit with a lot of rogue antiviruses and up till now have been fighting them off but last night I was hit by a new rendition of quot Windows Antivirus quot I got a window saying explorer exe wanted to make changes to my computer I would tell it no and each time it would return In between the constantly returning Firewall Windows antivirus 'Windows 2012' 7 by damaged window I managed to open the task manager find the Windows Firewall damaged by 'Windows 7 antivirus 2012' process and end the process I then found the file and destroyed it with killbox Everything seems to be back in working order now except for the firewall Every page in the control panel for windows firewall gives me an Administrator button that says use reccomended settings' when nbsp I click it it says it can't do that and gives me error x b which I understand to be an authentication error The Windows Firewall damaged by 'Windows 7 antivirus 2012' last time I had this I tried to reset my firewall with an admistrator command prompt it would tell me it could not load wshelper dll so I did some stuff I cannot remember to reset my winsock and was then able to reset my Windows Firewall damaged by 'Windows 7 antivirus 2012' firewall and all was good again This time when I go into command com and type 'netsh advfirewall reset' instead of the DLL message I get 'An error occoured while attempting to contact the nbsp Windows Firewall service Make sure the service is running and try your request again' In my attempts to fix this myself I have been to the device manager I had it 'show hidden devices' and located my Windows Firewall Authorization driver I found it had been stopped and so I started it again It currently says it is started but nothing has changed functionally I have been into Services as an Administrator Windows Firewall is not there I was also told to look for Windows Event Controller and Base Filtering Engine and they are not there either I have done an administrator command promtp with sfc scannow and the first time it said it had made changes and the second time it said everythign was alright but nothing functionally has changed I have been told to enter the following command prompts and gotten - the following results netsh advfirewall reset - error stated above net start mpsdrv - The requested service has already been started net start bfe - The service name is invalid net start mpssvc - the service name is invalid regsvr firewallapi dll - Popup window stating DllRegisterServer in firewallapi dll succeeded no functional change after that I have also been told to try sc config wuauserv start auto - SC ChangeServiceConfig SUCCESS sc config bits start auto - SC ChangeServiceConfig SUCCESS sc config DcomLaunch start auto - Access is denied net stop wuauserv - The Windows Update service nbsp was stopped successfully net start wuauserv - The Windows Update service was started successfully net stop bits - The Backround Intelligent Transfer Service was stopped successfully net start bits - The Backround Intelligent Transfer Service was started successfully net start dcomlaunch - The requested service has already been started I have also tried a system restore but whatever is screwing with my firewall is also screwing with that an it will not complete successfully A Windows XP thread steered me toward a file called nbsp I believe netfw inf in my windir folder related to the firewall This does not seem to be on my Windows machine and I have been unable to find the Windows equivalent So it appears my firewall is gone or just pretending to be I fixxed it last time by making some correction to my winsock but I cannot seem to find the process I used for that Additionally Microsoft Security Essentials has dissapeared from my system tray though otherwise seems to be working fine I am confident that this can be fixxed without a wipe and reinstall Please help

A:Windows Firewall damaged by 'Windows 7 antivirus 2012'

Hi
Make sure that PC is clean(free from zero access rootkit before trying this fixes)

This firewall issue is commonly found on vista and windows 7 (64 BIT OS)
It is recommended to contact malware removal forums to remove it first and try the fix

Run the services repair tool by ESET

http://kb.eset.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe

Restart the PC.Firewall and critical missing services should work.
Manual Fix
Download both the registry files
Windows firewall - 
Firewall
Base filtering engine - 
BFE


Launch them,You should get a UAC prompt now
Click YES  & Restart your PC

Now,Press Windows+ R key and type

regedit and click ok

go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

Right click on it-permissions

Click on ADD and type

Everyone and click ok

Now Click on Everyone

Below you have permission for users

Select full control and click ok

Now,open RUN and type

services.msc and click ok

start base filtering engine service and then windows firewall service
If you still have this error
Windows could not start Windows Firewall on local Computer. See event log, if non-windows services contact vendor. Error code 5.
Download and launch this key,click YES
Shared access

give full control permission to this key similar to previous one
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess
Right click on it -permissions
Click on Add and type
Everyone and select Full control
You should able to start firewall now
You may also be missing security center windows defender ,BITS and windows update services

Download
Security center  -wscsvc

Windows defender - windefend
BITS    -  BITS
Windows update  - 
wuauserv

Launch them and click YES when you get a UAC prompt


Good luck

https://social.technet.microsoft.com/Forums/en-US/5366225a-46e7-4d6c-a389-8bd18a5c3aad/windows-firewall-damaged-by-windows-7-antivirus-2012?forum=w7itprosecurity
Relevancy 53.75%

Hi all After successfully cleaning up my desktop computer with the help infected deleting files. running Laptop RAV after problems and antivirus of your wonderful forum I decided to check out my laptop Now I thought my laptop should be clean since I have Norton Internet Security updated and running all the time First I disabled system restore enabled viewing my hidden files and folders went into safe mode and ran Trend Micro's Online virus scan with AutoCorrect on I was surprised when it found viruses as follows TROJ INSERVICE H c c download plugin exe TROJ PURITYSCN G c windows system excy exe TROJ PURITYSCN G c windows system upf all Well since these files could not be fixed I went ahead and deleted them Rebooted and everything still ok Next I rebooted back into Safe mode and ran RAV online virus scanner with AutoCorrect on Now RAV found more infected files as follows Scanning memory Scanning boot sectors Scanning files C Documents and Settings Markey Pappalardo Local Settings Application Data Microsoft Outlook Outlook pst- gt Attachment quot Smoke vbs quot - VBS Bagle Z dr - gt Infected C Documents and Settings Markey Pappalardo Local Settings Application Data Microsoft Outlook Outlook pst- gt Attachment quot Smoke vbs quot - VBS Bagle Z dr - gt Infected D Program Files Laptop problems after running RAV antivirus and deleting infected files. The Print Shop Photo Pro System Randomize dll - Backdoor Win Ralpha - gt Infected So I quot stupidly quot deleted these files also This is where my troubles began When I rebooted I got some error about OutLook couldn't find its data file OH NO So when I went into Outlook all my very important data was gone So I didn't panic yet since I had Laptop problems after running RAV antivirus and deleting infected files. a fairly recent backup on my external hard drive from BackUp MyPC Then I Laptop problems after running RAV antivirus and deleting infected files. tried to restore just the Outlook pst file that I deleted from the same directory But when I rebooted I still got nothing I tried several more times trying to restore the file to no avail Then I finally noticed that when I clicked on the file directory button next to the address bar I have three folders called Personal Folders one Outlook Today - MSN folder and one Archive folder Since it defaults to the Outlook Today folder the calendar and tasks are all empty But when I look at any of the Personal Folders than at the Calendar subfolder for example I found my restored data OK so now how do I fix this without messing it up more I need Help Please Should I just do a total system restore from my Backup MyPC file Also my backup files probably have the viruses too Thanks for all your help Markey

A:Laptop problems after running RAV antivirus and deleting infected files.

Now that you have recovered your pst file, you are ok.

The infected attachments are in that pst file. Simply look into the pst file for those emails/attatchments and delete them.

If your email is not scanned while coming into the pst file, never let an av touch them inside the pst file. Let the av find them, but don't let it touch them.

Open outlook and search for files with those attachment names and delete them. (Hold shift down while deleting to avoid the deleted items folder).

After this is done, close outlook and rescan the pst file and keep doing the above.

Edit:
Your computer should not be "infected", just those emails. With the bagle variants, your av won't run right. So your computer shouldn't be infected, just holding files that could infect you.

http://www.techsupportforum.com/forums/f284/laptop-problems-after-running-rav-antivirus-and-deleting-infected-files-16430.html
Relevancy 53.75%

I've already checked for proxy settings and found none Hosts file is ok Internet access is disabled regardless of using wifi or ethernet Connection status IPv and IPv connectivity show no connection but signal is full and (AVG) laptop access disabled Badly antivirus internet infected has bars and Mb sec packets transferred Transporting files back and forth via thumb drive or portable Badly infected laptop has internet access and antivirus (AVG) disabled HD is getting old quickly Badly infected laptop has internet access and antivirus (AVG) disabled I've tried MalwareBytes for infections but no real improvement This is a shared computer so no telling who did what or when TIA Teo DDS Ver - - - NTFS AMD Internet Explorer Run by staff at on - - Microsoft Windows Home Premium GMT - AV AVG AntiVirus Free Edition Disabled Outdated E C - Badly infected laptop has internet access and antivirus (AVG) disabled B - FA - AB - E CB ECD SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF SP AVG AntiVirus Free Edition Disabled Outdated B F C - - E- - BB D A Running Processes C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k LocalService C Windows system svchost exe -k netsvcs C Windows system svchost exe -k NetworkService C Windows system WLANExt exe C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Program Files x Common Files Adobe ARM armsvc exe C Program Files x AVG AVG avgwdsvc exe C Program Files x Microsoft BingBar SeaPort EXE C Program Files x Launch Manager dsiwmis exe C Program Files Gateway Gateway Power Management ePowerSvc exe C Program Files x Launch Manager LMutilps exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files x Gateway Registration GREGsvc exe C Program Files Intel iCLS Client HeciServer exe C Program Files x Intel Intel reg Management Engine Components DAL jhi service exe C Program Files Gateway Gateway Updater UpdaterService exe C Program Files x Symantec Norton Online Backup NOBuAgent exe C Program Files x NTI Gateway MyBackup IScheduleSvc exe C Windows system svchost exe -k imgsvc C Program Files x Common Files AVG Secure Search vToolbarUpdater ToolbarUpdater exe C Program Files x Atheros Ath WlanAgent exe C Program Files x Common Files AVG Secure Search vToolbarUpdater loggingserver exe C Program Files x AVG AVG avgnsa exe C Program Files x AVG AVG avgemca exe C Windows system taskhost exe C Windows system Dwm exe C Windows Explorer EXE C Windows system taskeng exe C Windows system SearchIndexer exe C Windows System igfxtray exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Realtek Audio HDA RAVCpl exe C Program Files Elantech ETDCtrl exe C Program Files Gateway Gateway Power Management ePowerTray exe C Users staff AppData Local Google Update GoogleUpdate exe C Users staff AppData Local Facebook Update FacebookUpdate exe C Windows system igfxsrvc exe C Program Files x NTI Gateway MyBackup BackupManagerTray exe C Program Files x Launch Manager LManager exe C Program Files x AVG AVG avgui exe C Users staff AppData Roaming Dropbox bin Dropbox exe C Program Files x Launch Manager MMDx Fx exe C Windows system igfxext exe C Program Files x Launch Manager LMworker exe C Windows system wbem wmiprvse exe C Windows system wbem unsecapp exe C Program Files Elantech ETDCtrlHelper exe C Program Files Gateway Gateway Power Management ePowerEvent exe C Program Files x Intel Intel reg Rapid Storage Technology IAStorDataMgrSvc exe C Program Files x Intel Intel reg Management Engine Components LMS LMS exe C Program Files x Nero Update NASvc exe C Program Files Windows Media Player wmpnetwk exe C Program Files x Intel Intel reg Management Engine Components UNS UNS exe C Program Files x CyberLink MediaEspresso DeviceDetect... Read more

A:Badly infected laptop has internet access and antivirus (AVG) disabled

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.Click OK to either and let MBAM proceed with the disinfection process.If asked to restart the computer, please do so immediately.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the correct version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.To attach a file select the "More Reply Option" and follow the instructions.Let me know what problem persists.

http://www.bleepingcomputer.com/forums/t/541223/badly-infected-laptop-has-internet-access-and-antivirus-avg-disabled/
Relevancy 53.75%

Hello everyone,

Seem to be having an issue with Windows 7 x64 firewall. Had Norton Internet 2011 however service expired, so now use Security Essentials. Now windows firewall will not start up (also desktop icon issue but lets tackle one problem at a time). I have tried uninstalling MSE and rebooting in safe mode however the issue is still there.

When in control panel, under firewall, I click on Use Recommended Settings, the wait icon pops up and nothing happens.

Ive tried running MicrosoftFixit.WindowsFirewall.RNP.23269253326113752.1.Run however the Microsoft Fix It it tells me it cannot fix the issue.

When I try to start the Firewall Service in Services.msc I get "Cannot start on local computer see error code 5".

I have run Superantispyware and Malware Bytes they were both clean except a MSE scan showed the following (see attachments).

I have also provided my FSS results.

Please help me Bleepingcomputer, your my only hope!!

A:Firewall Will Not Enable

We need to remove zero access rootkit firstDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

http://www.bleepingcomputer.com/forums/t/466304/firewall-will-not-enable/
Relevancy 53.75%

HD Crashed, installed 80Gig loaded software, now fighting with Security Center, greyed out buttons, says policy won't allow enablement of Firewall.
Don't have any policies! Searched reg and don't want to touch anymore than I have to..have Systemworks 2003 loaded. Even took off my VPN/Cisco software but nada. Control Panel access is denied too, even tried the netsh command ...read everything I could find. Current/ WinXP Svc 2 all updates...as of tonight....nothing left to load!
 

A:WIN Firewall won't enable

KCraddock said:

HD Crashed, installed 80Gig loaded software, now fighting with Security Center, greyed out buttons, says policy won't allow enablement of Firewall.
Don't have any policies! Searched reg and don't want to touch anymore than I have to..have Systemworks 2003 loaded. Even took off my VPN/Cisco software but nada. Control Panel access is denied too, even tried the netsh command ...read everything I could find. Current/ WinXP Svc 2 all updates...as of tonight....nothing left to load! Click to expand...
Windows firewall will turn itself off if it detects that you have another firewall running. If you do and even if you turn it off it still make have one of its files running in the background.
 

https://forums.techguy.org/threads/win-firewall-wont-enable.412351/
Relevancy 53.75%

I can't seem to enable my xp firewall.. I get this messege below.. Drivin me nutz
 

A:XP firewall -can't enable

Remote Access Connection Manager was disabled.. I put it to manual.. all good now
 

https://forums.techguy.org/threads/xp-firewall-cant-enable.226328/
Relevancy 53.75%

Hello First off thank you very much for the Firewall, Cannot access redirects Windows having antivirus, or link and turn on time and expertise you donate via this website The issue began last week with a program that showed up on my computer called Guard Online It may have been named AV Guard Online as well A Windows Security alert popped up stating there were security issues that were compromised It also showed my avast antivirus was turned off and when I tried to turn it back on the antivirus would not turn on When I reluctantly clicked on the notice about Windows Security it showed Windows Firewall was turned off as well as Windows Malware I tried to turn on Firewall but it stated I wasn't able to access it and it had to be turned on manually When I tried to do this another message said that it couldn't be accessed or it couldn't Cannot turn on or access antivirus, Windows Firewall, and having link redirects be started I use Firefox for my main browser and I have had instances with link redirects from Google searches and websites that will change to another website at random I have run SuperAntiVirus and got rid of some items Any assistance is greatly appreciated mnhawki DDS Ver - - - NTFSx NETWORK Internet Explorer BrowserJavaVersion Run by Nick at on - - Microsoft Windows Vista Home Premium GMT - AV Lavasoft Ad-Watch Live Anti-Virus Disabled Updated FF - D -CE B- ECB-E A A SP Windows Defender Enabled Updated D DDC A- F- fae- E -DA C ACF SP Lavasoft Ad-Watch Live Disabled Updated - EE-C E - B-DC BDD BAB Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k rpcss C Windows System svchost exe -k secsvcs C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows system svchost exe -k netsvcs C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k NetworkService C Windows system svchost exe -k LocalService C Windows system svchost exe -k LocalServiceNoNetwork C Program Files SUPERAntiSpyware SASCORE EXE C Windows system svchost exe -k NetworkServiceNetworkRestricted C Windows Explorer EXE C Program Files Windows Media Player wmpnscfg exe C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp www sony com vaiopeople uInternet Settings ProxyOverride local uURLSearchHooks N A b b - - d -b d- ebb ba f a - c program files asksbar srchastt bin A SRCHAS DLL BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO Groove GFS Browser Helper - c - d -b f - bbc d a e - c program files microsoft office office GrooveShellExtensions dll BHO Windows Live Sign-in Helper d - c - abf- ecc- c - c program files common files microsoft shared windows live WindowsLiveLogin dll BHO Java tm Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll BHO Ask Toolbar BHO f d b -da b- daf- e -dfee a aa - c program files asksbar bar bin ASKSBAR DLL TB Ask Toolbar f d b -da b- daf- e -dfee a aa - c program files asksbar bar bin ASKSBAR DLL TB -D C - - FA - E EAAC - No File uRun Sidebar quot c program files windows sidebar sidebar exe quot autoRun uRun WindowsWelcomeCenter quot rundll exe quot oobefldr dll ShowWelcomeCenter uRun NSUFloatingUI quot c program files sony network utility LANUtil exe quot uRun ehTray exe c windows ehome ehTray exe uRun ctfmon exe c windows system ctfmon exe uRun SUPERAntiSpyware c program files superantispyware SUPERAntiSpyware exe mRun IgfxTray c windows system igfxtray exe mRun HotKeysCmds c windows system hkcmd exe mRun Persistence c windows system igfxpers exe mRun Apoint quot c program files apoint Apoint exe quot mRun ISBMgr exe quot c program files sony isb utility ISBMgr exe quot mRun VAIO Center Access Bar quot c program files sony vaio center access bar VCAB exe quot mRun VWLASU quot c program files sony vaio pc wireless lan wizard AutoLaunchWLASU exe quot mRun VAIOSur... Read more

A:Cannot turn on or access antivirus, Windows Firewall, and having link redirects

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

One or more of the identified infections is a backdoor trojan/rootkit.

This type of infection allows hackers to remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Please refer to Microsoft's Online Safety article for tips on creating a strong password.

Do not change passwords or do any transactions from the infected computer until it has been cleaned.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

If there are any personal files, pics, etc. on your computer you cannot live without, back them up now just as a precaution.

Emergency Backup Procedure - Tech Support Forum

------------------------------------------------------

Due to the restrictions on Win7, all tools should be started by right-click > Run as Administrator

------------------------------------------------------

Please download ComboFix and Save it to your Desktop.

**Note: It is important that it is saved directly to your desktop**

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Double-click ComboFix.exe and follow the prompts to run it.

Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.

When finished, it shall produce a log for you. Please post that log, ComboFix.txt in your next reply.

Please re-enable your antivirus before posting the ComboFix.txt log.

------------------------------------------------------

http://www.techsupportforum.com/forums/f100/cannot-turn-on-or-access-antivirus-windows-firewall-and-having-link-redirects-605669.html
Relevancy 53.32%

My bosses computer is having serious problems Windows update won t run quot Internet Explorer cannot display the webpage quot The Firewall shut off and won t re-enable MalwareBytes run/Firewall WinUpdate enable won't won't scans clean but keeps catching WinUpdate won't run/Firewall won't enable a call to the net McAfee Enterprise scans clean Ran DDS logs attached he had me obscure his ID and our network WinUpdate won't run/Firewall won't enable from the file Was running GMER then MalwareBytes died then GMER WinUpdate won't run/Firewall won't enable died then something else died too fast for me to see what then BlueScreen It s in there right now running a full MalwareBytes in safe mode Help me before my boss throws this thing out the window DDS Ver - - - NTFSx Run by bhb at on Wed Internet Explorer Microsoft Windows XP Professional GMT - AV McAfee VirusScan Enterprise On-access scanning enabled Updated A B B- C - -A AB-E DEABF F Running Processes C WINDOWS system Ati evxx exeC WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcsC WINDOWS system svchost exe -k WudfServiceGroupsvchost exesvchost exeC WINDOWS system spoolsv exesvchost exeC Program Files Adobe Photoshop Elements PhotoshopElementsFileAgent exeC Program Files Common Files LightScribe LSSrvc exeC Program Files Malwarebytes Anti-Malware mbamservice exeC Program Files McAfee VirusScan Enterprise EngineServer exeC Program Files McAfee Common Framework FrameworkService exeC Program Files McAfee VirusScan Enterprise VsTskMgr exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC WINDOWS system mfevtps exeC Program Files PDF Complete pdfsvc exeC Program Files McAfee VirusScan Enterprise Mcshield exeC WINDOWS system Ati evxx exeC WINDOWS Explorer EXEC WINDOWS system wscntfy exeC WINDOWS RTHDCPL EXEC Program Files PDF Complete pdfsty exeC WINDOWS SMINST Scheduler exeC Program Files McAfee Common Framework udaterui exeC Program Files Adobe Acrobat Acrobat Acrotray exeC Program Files Malwarebytes Anti-Malware mbamgui exeC WINDOWS system ctfmon exeC Program Files DisplayFusion DisplayFusion exeC lotus org organize EASYCLIP EXEC Program Files McAfee Common Framework McTray exeC Program Files ATI Technologies ATI ACE Core-Static MOM exeC Program Files ATI Technologies ATI ACE Core-Static ccc exeC Program Files Internet Explorer IEXPLORE EXEC Program Files Internet Explorer IEXPLORE EXEC Program Files Internet Explorer iexplore exeC Program Files Internet Explorer iexplore exeC Program Files Internet Explorer iexplore exeC Program Files Microsoft Office OFFICE OUTLOOK EXEC Program Files Microsoft Office OFFICE WINWORD EXEC Program Files Ipswitch WS FTP WsftpCOMHelper exeC Documents and Settings BHb ourNET Desktop Defogger exeC Program Files Adobe Acrobat Acrobat AcrobatInfo exeC Documents and Settings BHb ourNET Desktop dds scr Pseudo HJT Report uStart Page hxxp www google com uInternet Connection Wizard ShellNext ftp BHb othernet org BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dllBHO scriptproxy db d a - - e -b d- f c - c program files mcafee virusscan enterprise scriptsn dllBHO Adobe PDF Conversion Toolbar Helper ae cd -e - f- - ee - c program files common files adobe acrobat activex AcroIEFavClient dllBHO IEHlprObj Class ce c cf - b - d -abed- c - c lotus org organize iehelper dllBHO SmartSelect Class f ee -daa - - - d ee a - c program files common files adobe acrobat activex AcroIEFavClient dllTB Adobe PDF -d c - - fa - e eaac - c program files common files adobe acrobat activex AcroIEFavClient dlluRun ctfmon exe c windows system ctfmon exeuRun DisplayFusion quot c program files displayfusion DisplayFusion exe quot mRun RTHDCPL RTHDCPL EXEmRun PDF Complete quot c program files pdf complete pdfsty exe quot mRun Recguard c windows sminst Recguard exemRun Reminder c windows creator Remind XP exemRun Scheduler c windows sminst Sc... Read more

A:WinUpdate won't run/Firewall won't enable

Hello, HapHazzardWelcome to the Bleeping Computer Forums. My name is Thomas (Tom is fine), and I will be helping you fixing your problems.If you do not make a reply in 5 days, we will have to close your topic.You may want to keep the link to this topic in your favourites. Alternatively, you can click the button at the top bar of this topic and Track this Topic. The topics you are tracking can be found here.Please take note of some guidelines for this fix:Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just post back here so that we know you're still here.Please set your system to show all files.Click Start, open My Computer, select the Tools menu and click Folder Options.Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.Uncheck: Hide file extensions for known file typesUncheck the Hide protected operating system files (recommended) option.Click Yes to confirm.Please go here and have a look how you can disable your security software.Download Combofix from any of the links below but rename it to before saving it to your desktop.Link 1Link 2--------------------------------------------------------------------Double click on the renamed Combofix.exe & follow the prompts.When finished, it will produce a report for you. As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.This tool is not a toy and not for everyday use.ComboFix SHOULD NOT be used unless requested by a forum helperIf you need help, see this link:http://www.bleepingcomputer.com/combofix/how-to-use-combofix

http://www.bleepingcomputer.com/forums/t/316427/winupdate-wont-runfirewall-wont-enable/
Relevancy 53.32%

Hi My Acer XP computer is so infected that the firewall has turned itself off and refuses to let me enable it again from the firewall selection in the Control Panel I ve disabled network interfaces for now and am running GMER but will it help Will it help me to enable the network to try to upload DDS and the Attach txt too These latter I have but the firewall turned itself off after I gathered them and I fear I am more infected than before Any advice on best way to proceed enable Unable firewall to very much appreciated thanks tons This is typed from another computer a mac on my home network Edit- it occurs to me I could do a restore of the registry the restore function from an earlier date I ll do that next after gmer completes- if it completes it has crashed Unable to enable firewall the machine a couple of times Maybe then I ll get my firewall back and can bring you the logs you need Thanks

A:Unable to enable firewall

Hello,Now that you have posted a log here: http://www.bleepingcomputer.com/forums/t/312013/would-like-help-with-a-clear-infection/ you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.To avoid confusion, I am closing this topic. Good luck with your log.Orange Blossom

http://www.bleepingcomputer.com/forums/t/311872/unable-to-enable-firewall/
Relevancy 53.32%

Greetings:

I use the HomeEdition XP 5.1 verison. When I check to see if my Firewall is enabled, I can't because it is grayed out. There is not a check in the box saying it is enabled.

Any suggestions or recommendations would be appreicated.

Could this have anything to do with the fact I use Cablevision Optonline.net?
Thanks

[email protected]
 

Relevancy 53.32%

hi i turned on my computer today to find that the firewall was disabled and i can t enable it When i try to start the Windows Firewall Intrnet Connection Sharing ICS service i get a message saying i can t but no more IP address can't enable No firewall and explanation I then noticed that i can t get on the internet other computers connected to the router can though No IP address and can't enable firewall the ethernet connection shows it as being connected but has no Address Type IP Address Subnet Mask or Default Gateway They aren t etc but completly blank The wireless connection is unable to find any networks as well even though i know there are several I have tried a few No IP address and can't enable firewall things i found by searching for these problems like resetting winsock re-installing the network cards spyware virus scans and going back to a previous restore point but no luck does anyone have any ideas i can usually fix problems like these with a bit of googling but completly stuck now any help would be very much appreciated nbsp

https://forums.techguy.org/threads/no-ip-address-and-cant-enable-firewall.605727/
Relevancy 53.32%

Hello I run Windows Xp service pack currently I also regularly update and scan my computer with Malwarebytes Anti-Malware and SuperAntiSpyware The only thing that SuperAntiSpyware may find are Adware Tracking Cookies Other than that and Securit Not turned is turn to able off. Alerts says firewall Symantec on Windows Antivirus nothing else turns up Since removing the Vundo with help from the HJT forum I have not been able to turn on my firewall Windows Security Alerts tells me at start up that the Not able to turn on firewall and Windows Securit Alerts says Symantec Antivirus is turned off. firewall is turned off When I go to recommendations and then enable now Windows says it is unable to turn it on and that I should turn it on from the control panel When attempting to turn it on from the control panel it is is unchangeable An attachment shows how the firewall control panel appears After clicking out of that alert Windows Security Alerts then says that Symantec AntiVirus Corporate Edition is turned off I check Symantec AntiVirus Corporate Edition and it appears to be running fine It may be working since a few times since the Vundo it has caught some incoming threats to the computer I am wondering what steps I should take to turn on the firewall and how to check if Symantec AntiVirus Corporate Edition is working okay or not Thank you

http://www.bleepingcomputer.com/forums/t/272624/not-able-to-turn-on-firewall-and-windows-securit-alerts-says-symantec-antivirus-is-turned-off/
Relevancy 53.32%

I have a couple Windows 2000 servers hosting some web services and mail list servers and email server software. They are directly connected to a Cisco 800 series router with simple NAT but I have had terrible luck keeping them really secure. I have used CA Antivirus for a couple years and Zone Alarm but now Zone Alarm has stopped working well with the 2000 server (it crashes all the time and the True Vector service will not run properly) and I am wondering what the best idea for a decent software firewall and antivirus might be to protect these servers. I dont have a ton of $ for these things either. The servers have seperate external IP addresses as well.
Thanks,
J5
 

A:antivirus and firewall for Windows 2000 Server OS hosting websites/email

anyone....anyone....
 

https://forums.techguy.org/threads/antivirus-and-firewall-for-windows-2000-server-os-hosting-websites-email.605940/
Relevancy 53.32%

Hi,
 
I am using Windows 8.1 64 bit operating system on my Acer laptop, and have an issue that seems to be strange, and at odds with what it should be showing.
 
I recently did a windows update, in which the update stuck a th

A:Windows firewall issue - Avast free antivirus stopping it being turned on?

I will attempt to see if the above message will this time finish. I had written out a longer thread than the above and when I posted it stopped abruptly on the second paragraph well before the rest. Even when I repeated it and then copied and pasted it on word it then finished at exactly the same place. And it did the same on wordpad or notepad. The issue I was having occurred after a windows update and I found both disconcerting and rather strange and also very odd that whatever I tried to do it would not post the whole message I had written. I have now done a system restore back to yesterday afternoon, as mentioned in the earlier message of which I could not wholly post, I did not do a system backup restore before updating, which I normally do. I will now attempt to test this message first to see if it posts in its entirety before I repost the original message.
 
Testing now..

http://www.bleepingcomputer.com/forums/t/614272/windows-firewall-issue-avast-free-antivirus-stopping-it-being-turned-on/
Relevancy 52.89%

My laptop had already set up to turn on Family Safety in Window 8.1. So I was used to set up time limits and curfew for the standard account (child's account) in Control PanelI turned off Family Safety. When I wanted to turn it on again, Family Safety in Control Panel led me to Change PC setting to select the account to edit. But When I clicked on "Edit" and It poped up my child account but No thing to editBut there was an option to manage Safety Family on line. I enter this website to control Family safety (time limit and curfew) It worksHowever, I'd like to set up at local laptop as beforeHow to turn on Safety Family at Laptop not online?Any suggest would be appreciate.Best,Truc C. Nguyen

A:Re-enable Windows 8.1 Family Safety on Dell laptop

Now in Parental account, the option "Manage Family Safety setting on line" was disappeared from "Manage Other Account" in "Change PC setting"On family safety website showed that "Settings for Cathy Nguyen are not activeCathy Nguyen is not current associated with any accountsTo add window for Cathy Nguyen "run Family Safety" on PC Cathy Nguyen uses"But I could not run Family SafetyNotice that Family Safety run well from Online setting first time after I had turn off Family Safety at Control PannelI was confused Please help Thanks,Truc C. Nguyen

http://www.computing.net/answers/windows-8/reenable-windows-81-family-safety-on-dell-laptop/1631.html
Relevancy 52.46%

Hi folks I first noticed problems on my PC when I got the fake antispyware apps pop up on my PC I then ran malwarebytes and thought I'd got rid of them but they came back a few weeks later I loaded Spybot S amp D and firewall Can't my! Seneka, oh enable Vundo, too? ... Superantispyware and they all seemed to find different problems such as Vundo Virtumonde etc Every time I scan and clean and then re-scan something else appears The last time it was Seneka rootkit Following this fourum's guidelines I also tried to enable my windows internet firewall but it is grayed out for enabling don't know if that is another spyware issue I have installed and run OneCare maybe Vundo, Seneka, ... oh my! Can't enable firewall too? that stops me using the windows firewall I've included the DDS and hijackthis logs below - thanks DDS DDS Ver - - - NTFSx Run by McDonagh at on Fri Internet Explorer Microsoft Windows XP Home Edition GMT - AV Windows Live OneCare On-access scanning enabled Updated FW Windows Live OneCare Firewall enabled Running Processes C WINDOWS system svchost -k DcomLaunchsvchost exeC Program Files Microsoft Windows OneCare Live Antivirus MsMpEng exeC WINDOWS System svchost exe -k netsvcsC WINDOWS system svchost exe -k WudfServiceGroupsvchost exesvchost exeC WINDOWS system spoolsv exeC Program Files Bonjour mDNSResponder exeC WINDOWS Microsoft NET Framework v mscorsvw exeC Program Files Java jre bin jqs exeC WINDOWS system nvsvc exeC Program Files Microsoft Windows OneCare Live OcHealthMon exeC Program Files Photodex ProShowGold ScsiAccess exeC WINDOWS system svchost exe -k imgsvcC Program Files Linksys Wireless-G PCI Wireless Network Monitor WLService exeC Program Files Linksys Wireless-G PCI Wireless Network Monitor WMP Gv exeC Program Files Microsoft Windows OneCare Live Firewall msfwsvc exeC WINDOWS system Tablet exeC Program Files Microsoft Windows OneCare Live winss exeC Program Files Canon CAL CALMAIN exeC WINDOWS Explorer EXEC WINDOWS system WTablet TabUserW exeC WINDOWS system Tablet exeC Program Files Microsoft Windows OneCare Live winssnotify exeC WINDOWS system wuauclt exeC Program Files CyberLink PowerDVD PDVDServ exeC WINDOWS system spool drivers w x hpztsb exeC Program Files Analog Devices Core smax pnp exeC Program Files Analog Devices SoundMAX Smax exeC Program Files Java jre bin jusched exeC WINDOWS system RUNDLL EXEC WINDOWS system ctfmon exeC Program Files SUPERAntiSpyware SUPERAntiSpyware exeC Program Files Common Files Intuit QuickBooks QBUpdate qbupdate exeC Program Files SpeedFan speedfan exeC WINDOWS system Defrag exeC Program Files Internet Explorer iexplore exeC Documents and Settings McDonagh Desktop dds scr Pseudo HJT Report uStart Page hxxp news yahoo com i uInternet Settings ProxyOverride localBHO Adobe PDF Reader Link Helper e f-c d - d -b d- b d be b - c program files common files adobe acrobat activex AcroIEHelper dllBHO Java Plug-In SSV Helper bb-d f - c-b eb-d daf d d - c program files java jre bin ssv dllBHO Java Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dllBHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dlluRun ctfmon exe c windows system ctfmon exeuRun EPSON Stylus Photo R Series c windows system spool drivers w x e fatibna exe fu quot c windows temp E S C tmp quot EF quot HKCU quot uRun AdobeUpdater c program files common files adobe updater AdobeUpdater exeuRun AdobeBridge uRun SUPERAntiSpyware c program files superantispyware SUPERAntiSpyware exemRun NvCplDaemon RUNDLL EXE c windows system NvCpl dll NvStartupmRun nwiz nwiz exe installmRun AsusStartupHelp c program files asus aasp AsRunHelp exemRun NeroFilterCheck c windows system NeroCheck exemRun RemoteControl quot c program files cyberlink powerdvd PDVDServ exe quot mRun HPDJ Taskbar Utility c windows system spool drivers w x hpztsb exemRun SoundMAXPnP c program files analog devices core smax pnp exemRun SoundMAX ... Read more

A:Vundo, Seneka, ... oh my! Can't enable firewall too?

Hi pesci,

My name is Syler and I will be helping you to clean your computer, please give me some time
to look over your logs and I will get back to you as soon as possible.

Thanks

http://www.bleepingcomputer.com/forums/t/212503/vundo-seneka-oh-my-cant-enable-firewall-too/
Relevancy 52.46%

i have window xp i have been trying to enable my firewall. i check the box and then ok. then i will go right back to it and it is still check but if i go back just a little bit later its now uncheck. what can i do to make it stay checked??
 

Relevancy 52.46%

Everything has started three days ago with Google results redirecting to strange pages in Chrome Running MalwareBytes from Safe Mode resulted in MB finding or rootkit zeroaccess infections Ran SuperAntiSpyware finding other infected files and finally Avira free which is continually detecting infections that have been regularly quarantined This routine has been followed different times in these days I ran also TDSSkiller Now after a reboot I ve just detected several trojans with an Avira scan but I can t understand if it s simply detecting files a ready in the TDSS quarantine Everything seems to work but I can not enable Windows defender activate security center and Win Firewall AND THIS IS REALLY BAD I am under the impression that the rootkit hasn t been really removed and something better than my poor knowledge has to be done Already downloaded combofix but avoided to use it before having received some serious advice If someone will help it will be great Thanks --> enable not infection Rootkit firewall can DDS Ver - - - NTFSx Internet Explorer BrowserJavaVersion Run by andrea at on - - Microsoft Windows Vista Business GMT AV Avira Desktop Enabled Updated F B DE -C B - C F- EFF- C BD D C C SP Avira Desktop Enabled Updated D AAC -E E- B - F- F C DA SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system ibmpmsvc exe C Windows system svchost exe -k rpcss C Windows System svchost exe -k LocalServiceNetworkRestricted C Rootkit infection --> can not enable firewall Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system svchost exe -k GPSvcGroup C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Rootkit infection --> can not enable firewall Windows system svchost exe -k NetworkService C Windows system WLANExt exe C Windows System spoolsv exe C Windows system taskeng exe C Program Files Avira AntiVir Desktop sched exe C Program Files ThinkVantage Fingerprint Software upeksvr exe C Program Files Common Files Adobe ARM armsvc exe C Windows System svchost exe -k Akamai C Program Files Avira AntiVir Desktop avguard exe C Program Files Microsoft Small Business Business Contact Manager BcmSqlStartupSvc exe C Windows system svchost exe -k bthsvcs C Program Files ThinkPad Bluetooth Software bin btwdins exe C Windows System svchost exe -k LocalServiceNoNetwork C Program Files LENOVO VIRTSCRL lvvsst exe C Program Files Macrium Reflect ReflectService exe c Program Files Microsoft SQL Server Shared sqlbrowser exe c Program Files Microsoft SQL Server Shared sqlwriter exe C Windows system svchost exe -k imgsvc C Windows System TPHDEXLG exe C Program Files Lenovo Rescue and Recovery rrpservice exe C Program Files Lenovo Rescue and Recovery rrservice exe C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C PROGRA LENOVO VIRTSCRL virtscrl exe C Windows system taskeng exe C Windows system Dwm exe C Windows Explorer EXE C Program Files Avira AntiVir Desktop avshadow exe C Program Files Avira AntiVir Desktop avgnt exe C Windows System TpShocks exe C Program Files Lenovo HOTKEY LVOSDSVC exe C Program Files Common Files Java Java Update jusched exe C Program Files Samsung Kies External FirmwareUpdate KiesPDLR exe C Users Butler AppData Local Akamai netsession win exe C Program Files Lenovo HOTKEY TPONSCR exe C Program Files Lenovo Zoom TpScrex exe C Users Butler AppData Local Akamai netsession win exe C Windows Microsoft NET Framework v WPF WPFFontCache v exe C Windows system svchost exe -k LocalServiceAndNoImpersonation C Users Butler AppData Local Google Chrome Application chrome exe C Users Butler AppData Local Google Chrome Application chrome exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Windows system DllHost exe C Windows system DllHost exe C Windows ... Read more

A:Rootkit infection --> can not enable firewall

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I?ve given you the ?All clear.? Absence of symptoms does not mean your machine is clean! Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed. Download Combofix from either of the links below, and save it to your desktop. Link 1Link 2**Note: It is important that it is saved directly to your desktop**--------------------------------------------------------------------IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link--------------------------------------------------------------------Double click on ComboFix.exe & follow the prompts. If you have trouble, stop and post back. Do not try to repeatedly run comboFix!When finished, it will produce a report for you..Note: If after running ComboFix you receive a message stating, "Illegal Operation Attempted on a registery key that has been marked for deletion" rebooting your computer will resolve the problem.Please include the following in your next post:ComboFix log

http://www.bleepingcomputer.com/forums/t/446612/rootkit-infection-can-not-enable-firewall/
Relevancy 52.46%

NIS 2011 is great, but i like interaction with the firewall - i would like to disable the smart firewall so that it ASKS for every programs once (i can choose remember)

can this be done?
 

https://forums.techguy.org/threads/nis-2011-firewall-how-do-i-enable-notifications.952552/
Relevancy 52.46%

Thank you in advance for your help In the past week had issues getting online I started receiving a connection failure notification window then many instances of page not found with no network connection messages If I refresh a few times rootkit dds or firewall cannot run enable detected the page will eventually load but it is slow and usually pointless If I keep trying sometimes I can get on-line and have about an hour without the rootkit detected cannot run dds or enable firewall errors but it is still much slower loading a new page and I'm constantly rootkit detected cannot run dds or enable firewall interrupted when my screen suddenly displays an error screen This is through firefox Internet Explore will not work at all anymore - I only get the Internet Explorer can't display the webpage with a link to diagnose never results in anything I looked at my network connections and found a sony phone listed as a network device I took a picture of the properties and while i did the device just went away my IT guy at work told me to run combofix - sorry I did not know - but when i tried running it I got a message rootkit detected combo fix ran all night and i finally had to reboot with no results After reading the prep guide i found that i can't enable the firewall - i get a message Windows firewall can't change some of your settings Error code x and didn't know it was disabled Also cannot run dds as it just freezes my computer Started program and it froze apparently after about one minute with the Please wait message showing Please help - I promise not to do anything until instructed to I'm using another computer to post and check emails I didn't know if I should provide any info - but just in case here's my system info OS Name Microsoft Windows Enterprise Version Build System Type X -based PC Processor Intel reg Core i CPU GHz Mhz Core s Logical Processor s BIOS Version Date LENOVO D KT A SMBIOS Version Windows Directory C Windows System Directory C Windows system Installed Physical Memory RAM GB Total Physical Memory GB Available Physical Memory GB Total Virtual Memory GB Available Virtual Memory GB Page File Space GB Page File C pagefile sys thanks again

A:rootkit detected cannot run dds or enable firewall

Hello pooltart I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.I would like you to run this program for me.Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.Gringo

http://www.bleepingcomputer.com/forums/t/523916/rootkit-detected-cannot-run-dds-or-enable-firewall/
Relevancy 52.46%

Original post here I am working on a computer for a friend of mine It was a barebones kit from Newegg ie no brand and model The motherboard is Asus something or another if that is LAC, will ipconfig enable, no not Firewall error, etc relevant here I can find out what exactly I sat down at this machine and noticed a Firewall will not enable, no LAC, ipconfig error, etc quot Windows Security Alert quot notifying of the firewall being turned off I attempted to turn it back on but to no avail It has been a downward spiral since Firewall will not enable, no LAC, ipconfig error, etc then of discovering more and more issues With so many things at once I assume this is some sort of infection and not everything coincidentally going haywire at once I ve Googled many of the issues independently but I feel like treating things one at a time isn t going to get to the root of the problem s I ve tried to include here as much as I can regarding what errors I ve received and what I ve done Windows Firewall alert - quot Windows Firewall settings cannot be displayed because the associated service is not running Do you want to start the Windows Firewall Internet Connection Sharing ICS service quot Yes - quot Windows cannot start the Windows Firewall Internet Connection Sharing ICS service quot CP gt Services gt start Windows Firewall Internet Connection Sharing ICS - quot Could not start the Windows Firewall Internet Connection Sharing ICS service on Local Computer Error The dependency service or group failed to start quot CP gt Network Connections - blank but am able to browse with FF after clearing proxy settings CP - Internet Options is not listedWhen I open IE I am unable to browse at all Internet Options is visible but grayed out and inaccessible ipconfig - quot This application has failed to start because RASAPI dll was not found Re-installing the application may fix this problem quot Malwarebytes will finish installing but upon trying to run - quot Run-time error File not found shfolder quot I ve removed the drive and scanned it as a slave No significant infections were found actually found more on the host computer lol I ve ran ComboFix but it didn t seem to make any difference I have attached the ComboFix log in case it would be useful DDS txt follows DDS Ver - - - NTFSx Run by Andrew at on Sun Internet Explorer Microsoft Windows XP Professional GMT - AV avast Antivirus Enabled Updated DB - F - A -B - A FD D Running Processes C WINDOWS system svchost exe -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcsC WINDOWS system svchost exe -k WudfServiceGroupsvchost exesvchost exeC Program Files Alwil Software Avast AvastSvc exeC WINDOWS Explorer EXEC WINDOWS RTHDCPL EXEC WINDOWS system RUNDLL EXEC Program Files Saitek SD Software ProfilerU exeC Program Files Saitek SD Software SaiMfd exeC Program Files Nero Nero InCD NBHGui exeC Program Files Nero Nero InCD InCD exeC WINDOWS system ctfmon exeC Program Files Pidgin pidgin exeC WINDOWS system spoolsv exesvchost exeC Program Files AskBarDis bar bin AskService exeC Program Files AskBarDis bar bin ASKUpgrade exeC Program Files Nero Nero InCD InCDsrv exeC Program Files Common Files LightScribe LSSrvc exeC Program Files CDBurnerXP NMSAccessU exeC WINDOWS system nvsvc exeC Program Files CyberLink Shared files RichVideo exeC WINDOWS system svchost exe -k imgsvcC Program Files Compact Wireless-G USB Adapter Wireless Network Monitor WLService exeC Program Files Compact Wireless-G USB Adapter Wireless Network Monitor WUSB GC exeC WINDOWS system wscntfy exeC Program Files Mozilla Firefox firefox exeC Program Files Mozilla Firefox plugin-container exeC Program Files DAEMON Tools Pro DTProShellHlp exeC Documents and Settings Andrew Desktop dds scr Pseudo HJT Report uStart Page www google comBHO Adobe PDF Reader Link Helper e f-c d - d -b d- b d be b - c program files common files adobe acrobat activex AcroIEHelper dllBHO AskBar BHO f d - - d - c -aa e ed - c program files askbardis bar bin askBar... Read more

A:Firewall will not enable, no LAC, ipconfig error, etc

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

http://www.bleepingcomputer.com/forums/t/394975/firewall-will-not-enable-no-lac-ipconfig-error-etc/
Relevancy 52.03%

After turning my computer on this morning I received a Balloon pop up from Windows security Centre (red shield in the system tray) informing me that No antivirus and firewall are currently running. I have online armour and AVG Free installed and running (and have had for years). I have tried deleting the contents of WINDOWS\system32\wbem\Repository so the data base could be rebuilt upon start up, no success.

Please note:
- I Have XP professional with Sp3 installed
- AVG and online armour are running fine
- I do not wish to tick the monitor my firewall/antivirus Option found in windows security centre recommendations
- I installed Skype’s whiteboard meeting app last night, besides that nothing has changed from yesterday.

Any Help on this would be greatly Appreciated.
Thanks,
Tom

A:False 'No Antivirus' and 'Firewall Running' Alert from Windows Security Centre (system tray)

Never used it myself but this may help: How To Use Dial-a-fix To Repair Windows Internals Problems http://www.bleepingcomputer.com/forums/topic160132.html

http://www.bleepingcomputer.com/forums/t/385410/false-no-antivirus-and-firewall-running-alert-from-windows-security-centre-system-tray/
Relevancy 52.03%

I am not very technology smart but here goes, My dell laptop will not connect to the internet and there is no firewall it will not let me enable it. I just keep getting error messages It is on vista.
 

A:Firewall not working Cannot enable No internet access

ip

you may have to sue a private address
 

http://www.techspot.com/community/topics/firewall-not-working-cannot-enable-no-internet-access.140621/
Relevancy 52.03%

I have been having problems with being enable Google firewall redirect, unable to directed Google redirect, unable to enable firewall to sites like find-answers-fast com when clicking on google links and having new tab pop ups to sites like hxxp testendonline com d p i d I have Guard Online infecting my computer and need to remove it I am unable to enable my windows firewall and get x c error message I have tried AVG Full and Rootkit scans Kaspersky Virus Removal Tool v Checked Internet Options for proxy I found this posting http www bleepingcomputer com forums topic html and have included the following logs DDS and GMER GMER Log GMER - http www gmer net Rootkit scan - - Windows Service Pack Running h nrz k exe ---- Registry - GMER ---- Reg HKCU Software Microsoft Windows CurrentVersion Shell Extensions Approved A DCC A-A E- F A-E B-A D C Reg HKCU Software Microsoft Windows CurrentVersion Shell Extensions Approved A DCC A-A E- F A-E B-A D C hacgmnpmjfnjdboo x A x x x Reg HKCU Software Microsoft Windows CurrentVersion Shell Extensions Approved A DCC A-A E- F A-E B-A D C iamfgbfoiaeeknbeke x A x x x ---- Files - GMER ---- File C ProgramData Microsoft Search Data Applications Windows MSS log bytes ---- EOF - GMER ---- DDS Log DDS Ver - - - NTFSAMD NETWORK Internet Explorer BrowserJavaVersion Run by Beejous at on - - Microsoft Windows Home Premium GMT - AV AVG Internet Security Disabled Updated A B -DEE -F A-FBCD-ADB C F SP AVG Internet Security Disabled Updated E A -F D -F D -C D- C DBE F D SP Windows Defender Disabled Updated D DDC A- F- fae- E -DA C ACF FW AVG Firewall Disabled CC - -F -D - E EA B Running Processes C windows system wininit exe C windows system lsm exe C windows system svchost exe -k DcomLaunch C windows system svchost exe -k RPCSS C windows System svchost exe -k LocalServiceNetworkRestricted C windows system svchost exe -k netsvcs C windows system svchost exe -k LocalSystemNetworkRestricted C windows system svchost exe -k LocalService C windows system svchost exe -k NetworkService C windows system svchost exe -k LocalServiceNoNetwork C windows Explorer EXE C windows system ctfmon exe C Program Files x Mozilla Firefox firefox exe C Program Files x Mozilla Firefox plugin-container exe C windows SysWOW ping exe C windows system conhost exe C Program Files x Secunia PSI PSI TRAY exe C Program Files x Secunia PSI psi exe C windows SysWOW cmd exe C windows system conhost exe C windows SysWOW cscript exe C windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp www google com uDefault Page URL hxxp www google com ig redirectdomain brand TSNA amp bmod TSNA mDefault Page URL hxxp www google com ig redirectdomain brand TSNA amp bmod TSNA mStart Page hxxp www google com ig redirectdomain brand TSNA amp bmod TSNA uInternet Settings ProxyOverride local lt local gt uURLSearchHooks H - No File uURLSearchHooks BitTorrentBar Toolbar c f aa-f f- c- f e-b d a - C Program Files x BitTorrentBar tbBitT dll mURLSearchHooks BitTorrentBar Toolbar c f aa-f f- c- f e-b d a - C Program Files x BitTorrentBar tbBitT dll mWinlogon Userinit userinit exe C windows system config systemprofile AppData Roaming appconf exe BHO -ddca- ecf- -d fef - C Users Beejous AppData Local Internetx x dll BHO D -C F - efb- B - ECA - No File BHO HP Print Enhancer c e- - -bf - c - C Program Files x HP Digital Imaging Smart Web Printing hpswp printenhancer dll BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll BHO Conduit Engine f b -b - - b- fba bd d - C Program Files x ConduitEngine ConduitEngine dll BHO DivX Plus Web Player HTML lt video gt e d- - fd- c - a f - C Program Files x DivX DivX Plus Web Player ie DivXHTML DivXHTML dll BHO AVG Safe Search ca f - f e- b -a e- e e c c - C Program Files x AVG AVG avgssie dll BHO C C A-E - b - D - CECB - No File BHO BitTorrentBar Toolbar c f aa-f f- c- f e-b d a - C Program Files x BitTorrentBar tbBitT dll BHO Windows Live Sign-in Hel... Read more

A:Google redirect, unable to enable firewall

I have broken the dds log up into different txt files because the original is too large to attach. The following are not the full log.

http://www.bleepingcomputer.com/forums/t/423678/google-redirect-unable-to-enable-firewall/
Relevancy 52.03%

How to you disable and anable your computer's firewall. I've done it before but I just don't remember how to click to get there.

A:Simple question: Firewall disable / enable

goto control panel, click on Firewall Settings.

http://www.techsupportforum.com/forums/f10/simple-question-firewall-disable-enable-79478.html
Relevancy 52.03%

Hi

I've got a problem with McAfee causing BSODs and have been advised in another thread to uninstall it and use MS Security Essentials in combination with Malwarebytes and SuperAntiSpyware instead.

I was also advised to enable my firewall and therein lies my problem.

The user manual for the 7800N is not great and doesn't mention anything about being able to enable or disable the firewall. It just talks about Packet Filtering and blocking WAN ping.

I have no idea if the firewall is on or off by default and can find no obvious settings in the router's setup page.

Should I enable WAN ping blocking or Intrusion detection? I want to ensure that my computer is safe when I uninstall McAfee.

Screenshot of the setup page is attached.

Thanks

Sally

A:How to enable firewall on Billion BiPAC 7800N?

The firewall that you should be enabling is built into windows.

Click your start button, and enter "firewall" in the search box. Windows Firewall should be on the list. Click it. On the left side of the window is a "link" that says "Turn Windows Firewall on or off". In the next window, enable the firewall, and hit ok.

http://www.sevenforums.com/network-sharing/217462-how-enable-firewall-billion-bipac-7800n.html
Relevancy 52.03%

Hey all,

If I disable the windows firewall, I am able to turn on file sharing and network discovery. However, if I turn the firewall on, every time I try to enable file sharing and network discovery, they wont turn on..

I tried to go into the firewall settings and enable file sharing but it's not an option that's available?

Windows 7 has been one problem after another when trying to do anything that involves networking/sharing..

Thanks,

-TheChad

A:No Option to enable file sharing in firewall?

  
Quote: Originally Posted by ThaChad


Hey all,

If I disable the windows firewall, I am able to turn on file sharing and network discovery. However, if I turn the firewall on, every time I try to enable file sharing and network discovery, they wont turn on..

I tried to go into the firewall settings and enable file sharing but it's not an option that's available?

Windows 7 has been one problem after another when trying to do anything that involves networking/sharing..

Thanks,

-TheChad


If network discovery isn't staying on then you have a bigger problem than just enabling sharing which is done through the Advanced Network Settings at the Network and Sharing Center.

This problem has come up many times and is typically fixable by repairing the base filtering engine which is the actual cause of the problem with network discovery not staying on.

The following link shows you how to fix this problem.

I receive the message that my ESET installation ended prematurely - ESET Knowledgebase

http://www.sevenforums.com/network-sharing/307754-no-option-enable-file-sharing-firewall.html
Relevancy 52.03%

I can't enable firewall protection on WindowsXP. Here's the actual message printed in the window where the option should be:

"Windows cannot display the properties of this connection. The Windows Management Instrumentation (WMI) information might be corrupted. To correct this, use System Restore to restore Windows to an earlier time (called a restore point). System Restore is located in the System Tools folder in Accessories."

The only problem is that I just cleared out all of my system restore points when I turned it off to clean up some ad and spyware remains. Is there anyway to fix this problem without completely re-installing Windows? It's takes a long time to re-install and it's a pain to download all the critical updates and service packs, especially on dial-up! Help!!
 

A:Cannot enable firewall on internet connection in winXP

No ones knows?

Would re-installing Windows fix the problem?
 

https://forums.techguy.org/threads/cannot-enable-firewall-on-internet-connection-in-winxp.258596/
Relevancy 52.03%

Hi all and thanks in advance for any help you can provide A few days ago I was infected with Win Antispyware and followed the directions on http www bleepingcomputer com virus-removal remove-win- -antispyware- I no longer get the Win popups but google is redirecting and randomly new windows will open with advertisements and web pages stating I ve won things I tried to follow the directions on this topic http www bleepingcomputer com forums topic html but was not able to enable the firewall I have Win and tried to enable firewall via Control Panel but get the following message Windows firewall can t change some of your settings Error code x c Thank you for any help DDS Ver - - - NTFSAMD Internet Explorer BrowserJavaVersion Run by Fred at on - - Microsoft Windows Home Premium GMT - SP Windows Defender Enabled Updated D DDC A- F- fae- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System TDSS, Redirects enable Google firewall and cant svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows System DriverStore FileRepository stwrt inf amd neutral d ed de d STacSV exe C Windows system svchost exe -k LocalService C Windows system Hpservice exe C Windows system svchost exe -k NetworkService C Windows system WLANExt exe C Windows system conhost exe C Windows System spoolsv exe C Windows System DriverStore FileRepository stwrt inf amd neutral d ed de d AESTSr exe C Windows System svchost exe -k LocalServiceNoNetwork C Windows system svchost exe -k LocalServiceAndNoImpersonation C Program Files x Common Files LightScribe LSSrvc exe C Program Files x TDSS, Google Redirects and cant enable firewall Intel Intel reg Management Engine Components LMS LMS exe C Program Files x CyberLink Shared files RichVideo exe C Windows system svchost exe -k imgsvc C Windows system taskhost exe C Windows system taskeng exe C Windows system Dwm exe C Windows Explorer EXE C Windows System igfxtray exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files IDT WDM sttray exe C Windows system igfxsrvc exe C Program Files Hewlett-Packard HP MediaSmart SmartMenu exe C Program Files Java jre bin jusched exe C Program Files x Common Files LightScribe LightScribeControlPanel exe C Program Files x Hewlett-Packard HP Advisor HPAdvisor exe C Program Files x AIM aim exe C Program Files x McAfee Security Scan SSScheduler exe C Users Fred AppData Local Autobahn mlb-nexdef-autobahn exe C Program Files x Microsoft Office Office ONENOTEM EXE C Program Files x PdaNet for Android PdaNetPC exe C Program Files Synaptics SynTP SynTPHelper exe C Windows system SearchIndexer exe C Windows Microsoft Net Framework v WPF PresentationFontCache exe C Program Files x Hewlett-Packard HP Quick Launch Buttons QLBCtrl exe C Program Files x HP HP Software Update hpwuschd exe C Program Files x Hewlett-Packard HP Wireless Assistant HPWAMain exe C Program Files x Common Files Adobe ARM AdobeARM exe C Program Files x Common Files Real Update OB realsched exe C Program Files x Common Files Java Java Update jusched exe C Program Files x Malwarebytes Anti-Malware mbamgui exe C Program Files Windows Media Player wmpnetwk exe C Program Files x Hewlett-Packard Shared hpqwmiex exe C Windows system wbem wmiprvse exe C Program Files x Hewlett-Packard HP Quick Launch Buttons Com QLBEx exe c Program Files x Hewlett-Packard TouchSmart Media Kernel CLML CLMLSvc exe C Windows System svchost exe -k LocalServicePeerNet C Program Files x Hewlett-Packard Shared hpqToaster exe C Program Files x Mozilla Firefox firefox exe C Program Files x Hewlett-Packard HP Health Check hphc service exe C Program Files x Malwarebytes Anti-Malware mbamservice exe C Program Files x Intel Intel reg Management Engine Components UNS UNS exe C Windows ... Read more

A:TDSS, Google Redirects and cant enable firewall

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 31. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Double click on combofix.exe & follow the prompts.When finished, it will produce a report for you. Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stallNote 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer"information and logs"In your next post I need the following
Log from Combofixlet me know of any problems you may have had
How is the computer doing now?Gringo

http://www.bleepingcomputer.com/forums/t/435009/tdss-google-redirects-and-cant-enable-firewall/
Relevancy 52.03%

hii,my system's (both office & home) are infected with some kind of spyware/malware/virus ( dont know excatly)!it entered through a pendrive of my frnd @ home pc & when i connected my USB hdd to my office system it entered to this system also !suddenly my antivirus/takmanager/regedit disabled then i tried to log into safemode but badluck it was showing as drivers loading but restarts !!(i have no trouble in logging as a normal user & administrator )i tried RRT it enabled taskbar & rgedit ! but both of them closes as soon as i open them with in seconds!!i tried some other tools also like MBAM,ATF cleaner... but of no use !!is there any tool or antivirus which can get back my setting's to normal !!thanks in advance !!

A:enable antivirus

Please reboot the computerOpen MBAM and click Update tab, select Check for Updates,when doneclick Scanner tab,select FULL scan After scan click Remove Selected, Post new scan log for review, so we can see what you have

http://www.bleepingcomputer.com/forums/t/193646/enable-antivirus/
Relevancy 51.6%

Hi I have microsoft.windows.securitycentre.firewall... detections coming Antivirus a being back, and pop-ups that keep spyware one main 2009 recently managed to get a virus spyware malware im afraid my computer Antivirus 2009 pop-ups and spyware detections that keep coming back, a main one being microsoft.windows.securitycentre.firewall... knowledge is really useless I will try my best to be technical Antivirus 2009 pop-ups and spyware detections that keep coming back, a main one being microsoft.windows.securitycentre.firewall... which I first recognised because when I started internet explorer a bunch of pop-ups came up saying I had to download Anti-Virus It looked similar to a Microsoft notice but it was slightly different in colour and not very detailed so I knew it was a fake and each time I start Internet Explorer the pop-ups come up again At the time I had a SpyBot installed and Semantic anti-virus the Semantic anti-virus found nothing the SpyBot found a lot of things probably not all related to the main issue all of which I deleted because I didn t know what else to do But the pop-ups came back the next time I started internet explorer So I ran SpyBot a few more times each time it found a few more things which I deleted but kept coming back The main thing that SpyBot kept finding again was microsoft windows securitycentre firewallbypass and when I gave up with SpyBot the last search also showed a Virtumonde prx and virtumonde dll Running in a panic to my mum she told me I should get the anti virus and spyware that she has which we get free through our BT Broadband called BT NetProtect Plus which when I phoned the company they installed for me and it comes up on my computer as McAfee although I don t know if it is a complete version of McAfee because it is through BT After running this scan it found a few things which were not the same as the things SpyBot found which it quarentined for me although it doesn t give me the option to delete them but again this didn t stop the pop ups and after running the scan a few more times in normal and in safe mode it still found nothing Also my computer has slowed right down It now takes about hours to run a scan I am really useless when it comes to computers and I found a few sites which mentioned how to get rid of Antivirus or microsoft windows securitycentre firewallbypass but the instructions given were aimed at the more knowledgable computer owner and I just didn t know how to follow them I found a link to a converstation on your forum which seemed more descriptive so I hope you can help me I have Windows XP on a desktop computer I hope I have provided you with enough information Many thanks for any of you time and guidance Charlie

A:Antivirus 2009 pop-ups and spyware detections that keep coming back, a main one being microsoft.windows.securitycentre.firewall...

Hi and welcome. We need to know a couple of things.. Are you running XP?Do you now have both Symantec and McCaffee running as you can only have one. They will cause conflicts with each other.Now for the time being Disable or turn off Spybot for this scan..Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply and exit MBAM.Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you after scanning with MBAM. Please temporarily disable such programs or permit them to allow the changes.

http://www.bleepingcomputer.com/forums/t/184847/antivirus-2009-pop-ups-and-spyware-detections-that-keep-coming-back-a-main-one-being-microsoftwindowssecuritycentrefirewallbypass/
Relevancy 51.6%

Hello,

I cannot enable the (Windows) firewall. (I am behind a router.)

See attachments reflecting my trying to do so.

Thanks.

Ben.
 

Relevancy 51.17%

Hi,
I am using avast antivirus, and using file shield protection only. If i enable, the web shield and mail and other shield, avast open some ports . I do not know, whether the shield will scan only my outgoing email and incoming email only. Should i enable these shields as normally google sends spam mails in separate enclosure. Please advise, the antivirus, use about 10 to 15 ports to the minimum. This i understand, when i went to the settings of the concerned scans.
Please say , the background scan also takes so much of cpu resources, that even the computer sometimes hangs with no movement whatsover.
Any how i have to have a antivirus. My question is : is it enough if file protection is enough, as all the mails are filtered by respective service mail providers

http://www.sevenforums.com/general-discussion/392872-should-i-enable-all-shield-antivirus.html
Relevancy 51.17%

Hi,
I am using avast antivirus, and using file shield protection only. If i enable, the web shield and mail and other shield, avast open some ports . I do not know, whether the shield will scan only my outgoing email and incoming email only. Should i enable these shields as normally google sends spam mails in separate enclosure. Please advise, the antivirus, use about 10 to 15 ports to the minimum. This i understand, when i went to the settings of the concerned scans.
Please say , the background scan also takes so much of cpu resources, that even the computer sometimes hangs with no movement whatsover.
Any how i have to have a antivirus. My question is : is it enough if file protection is enough, as all the mails are filtered by respective service mail providers

http://www.sevenforums.com/system-security/392872-should-i-enable-all-shield-antivirus.html
Relevancy 51.17%

Tried to install ESET Av program would prematurely terminate said quot Can t verify the publisher of this driver software quot Tried to install MS Security essentials would not start the firewall error code x Any help is greatfully appreciated Rob Logs DDS Ver - - - NTFSx Internet Explorer BrowserJavaVersion Run by rschott at on - - Microsoft Windows Professional GMT - AV Microsoft Security Essentials Enabled Updated DAC -C - B windows firewall 7 start Win Infected...can't -BB - DA SP Microsoft Security Essentials Enabled Updated ABEC DA -E C- F - B -AA E D BDD SP Windows Defender Disabled Updated D DDC A- Infected...can't start windows firewall Win 7 F- fae- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows System DriverStore FileRepository stwrt inf x neutral f a a ad STacSV exe C Windows system svchost exe -k LocalService C Windows system svchost exe -k NetworkService C Windows system WLANExt exe C Windows system conhost exe C Windows System spoolsv exe C Program Files Common Files Adobe ARM armsvc exe C Windows System DriverStore FileRepository stwrt inf x neutral f a a ad aestsrv exe C Program Files Common Files Apple Mobile Device Support AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe c Program Files WIDCOMM Bluetooth Software btwdins exe C Windows System svchost exe -k LocalServiceNoNetwork C Windows system svchost exe -k LocalServiceAndNoImpersonation C Windows system svchost exe -k hpdevmgmt C Program Files Intel Intel reg Management Engine Components LMS LMS exe c Program Files Microsoft SQL Server MSSQL SQLEXPRESS MSSQL Binn sqlservr exe C Windows System svchost exe -k HPZ C Windows System svchost exe -k HPZ c Program Files Microsoft SQL Server Shared sqlwriter exe C Windows system svchost exe -k imgsvc C Windows system svchost exe -k HPService C Windows system taskeng exe C Windows system Dwm exe C Windows Explorer EXE C Windows system taskhost exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files IDT WDM sttray exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files STMicroelectronics AccelerometerP FF Protection exe C Program Files Synaptics SynTP SynTPHelper exe C Program Files HP HP Software Update hpwuschd exe C Program Files iTunes iTunesHelper exe C Program Files HP Digital Imaging bin hpqtra exe C Users rschott AppData Roaming Dropbox bin Dropbox exe C Program Files iPod bin iPodService exe C Windows system SearchIndexer exe C Program Files Windows Media Player wmpnetwk exe C Program Files Real RealPlayer update realsched exe C Program Files Real RealPlayer RealPlay exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging bin hpqbam exe C Program Files Mozilla Firefox firefox exe C Program Files HP Digital Imaging bin hpqgpc exe C Program Files Intel Intel reg Management Engine Components UNS UNS exe C Program Files Common Files Java Java Update jusched exe C Program Files Mozilla Firefox plugin-container exe C Program Files Common Files Java Java Update jucheck exe C Windows system conhost exe C Windows system wbem wmiprvse exe Pseudo HJT Report uStart Page hxxp google com uInternet Settings ProxyOverride local uURLSearchHooks Vuze Remote Toolbar ba e- - -b f - e d cc - c program files vuze remote prxtbVuze dll uURLSearchHooks Road Runner Toolbar e b -e c - -b e - f f b - c program files road runner prxtbRoad dll mURLSearchHooks Vuze Remote Toolbar ba e- - -b f - e d cc - c program files vuze remote prxtbVuze dll mURLSearchHooks Road Runner Toolbar e b -e c - -b e - f f b - c program files road runner prxtbRoad dll BHO HP Print Enhancer c e- - -bf - c - c program files hp digital imaging smart web printing hpswp printenhancer dll... Read more

A:Infected...can't start windows firewall Win 7

PLEASE CLOSE. found the problem. Combo-fix removed some drivers that had been corrupted. thanks for your consideration

http://www.bleepingcomputer.com/forums/t/433149/infectedcant-start-windows-firewall-win-7/
Relevancy 50.74%

http www bleepingcomputer com forums topic html page gopid entry was sent here with said problem DDS Ver - - - NTFSAMD Internet Explorer BrowserJavaVersion Run by Rival at on - - Microsoft Windows Home Premium GMT - SP Windows Defender Disabled Updated CDATA ipb topic inSection 'topicview' ipb topic topic id ipb 0x800070424 Redirect, enable Error Firewall Goggle ad popups, topic forum id ipb topic redirectPost ipb topic start id ipb topic page id ipb topic topPid ipb topic counts postTotal curStart ipb topic start id perPage Search Setup ipb vars 'search type' 'forum' ipb vars 'search type id' ipb vars Goggle Redirect, ad popups, Firewall enable Error 0x800070424 'search Goggle Redirect, ad popups, Firewall enable Error 0x800070424 type ' 'topic' ipb vars 'search type id ' Delete stuff set up ipb topic deleteUrls 'hardDelete' new Template ipb vars 'base url' app forums module moderate section moderate do f t page auth key ea a ea e fbdc a p pid ipb topic deleteUrls 'softDelete' new Template ipb vars 'base url' app forums module moderate section moderate do postchoice tact sdelete t f auth key ea a ea e fbdc a selectedpids pid pid pid pid ipb topic modPerms ipb templates 'post moderation' new Template div id 'comment moderate box' class 'ipsFloatingAction' style 'display none' span class 'desc' With span id 'comment count' count span checked posts span select id 'tactInPopup' class 'input select' option value 'approve' Approve option option value 'delete' Hide option option value 'sundelete' Unhide option option value 'deletedo' Delete option option value 'merge' Merge option option value 'split' Split option option value 'move' Move option select nbsp nbsp input type 'button' class 'input submit' id 'submitModAction' value 'Go' div Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system svchost exe -k RPCSS C Windows system atiesrxx exe C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system atieclxx exe C Windows system svchost exe -k LocalService C Program Files Tablet Pen Pen TouchService exe C Windows SYSTEM WISPTIS EXE C Windows system svchost exe -k NetworkService C Windows System spoolsv exe C Program Files SUPERAntiSpyware SASCORE EXE C Program Files x Common Files Adobe ARM armsvc exe C Program Files ATI Technologies ATI ACE Fuel Fuel Service exe C Program Files DAZ D Content Management Service ContentManagementServer exe C Windows SysWOW AsHookDevice exe C Windows System svchost exe -k LocalServiceNoNetwork C Windows System svchost exe -k HPZ C Windows System svchost exe -k HPZ C Windows system svchost exe -k imgsvc C Program Files Tablet Pen Pen Tablet exe C Program Files Common Files Microsoft Shared Windows Live WLIDSVC EXE C Program Files Common Files Microsoft Shared Windows Live WLIDSvcM exe C Windows system WUDFHost exe C Windows system taskhost exe C Windows system taskeng exe C Windows SYSTEM WISPTIS EXE C Program Files Common Files microsoft shared ink TabTip exe C Windows system Dwm exe C Program Files x Common Files Microsoft Shared Ink TabTip exe C Windows Explorer EXE C Program Files Tablet Pen Pen TouchUser exe C Program Files x ASUS EPU- Engine FourEngine exe C Program Files x AIM aim exe C Program Files x MultiScreen MultiScreen exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C Program Files x Windows Live Messenger msnmsgr exe C Program Files Tablet Pen Pen TabletUser exe C Program Files x MagicTune Premium GammaTray exe C Program Files x VIA VIAudioi VDeck VDeck exe C Program Files x ASUS AI Manager AsShellApplication exe C Program Files x Winamp winampa exe C Program Files x Common Files Java Java Update jusched exe C Program Files x ATI Technologies ATI ACE Core-Static MOM exe C Program Files Tablet Pen Pen Tablet exe C Program Files x MagicTune Premium MagicTune exe C Windows system Search... Read more

A:Goggle Redirect, ad popups, Firewall enable Error 0x800070424

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster. NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer. NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.Security CheckDownload Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you. Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stallNote 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer"information and logs"In your next post I need the following
Log from Combofixlet me know of any problems you may have had
How is the computer doing now?Gringo

http://www.bleepingcomputer.com/forums/t/460106/goggle-redirect-ad-popups-firewall-enable-error-0x800070424/
Relevancy 50.74%

This morning suddenly Mcaffe Real Time Scanning stopped and every time i click and re-enable it , it get disabled again.. i am new to computers so dont exactly know what to do.
I am working on windows 8.1 and have a lenovo ideapad Z510.
Quick and Effective Help is Appreciated..

A:Antivirus Has Been Disabled!!! Wont Re-enable !!!

Welcome... Let's see if we can find some malware here.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the tool.Vista/Windows 7/8 users right-click and select Run As Administrator.Click on the Scan button.AdwCleaner will begin...be patient as the scan may take some time to complete.After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.After reviewing the log, click on the Clean button.Press OK when asked to close all programs and follow the onscreen prompts.Press OK again to allow AdwCleaner to restart the computer and complete the removal process.After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.Copy and paste the contents of that logfile in your next reply.A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.-- Note: The contents of the AdwCleaner log file may be confusing. Unless you see a program name that you recognize and know should not be removed, don't worry about it. If you see an entry you want to keep, return to AdwCleaner before cleaning...all detected items will be listed (and checked) in each tab. Click on each one and uncheck any items you want to keep (except you cannot uncheck Chrome and Firefox preferences lines).. Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.....Last run ESET.Hold down Control and click on this link to open ESET OnlineScan in a new window.Click the button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the icon on your desktop.Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:Scan potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technologyESET will then download updates for itself, install itself, and begin scanning your... Read more

http://www.bleepingcomputer.com/forums/t/540300/antivirus-has-been-disabled-wont-re-enable/
Relevancy 50.74%

Hi
somedays ago , i disabled the notification banner for my antivirus
at every virus signature updates , i got a notificaition banner

well in the preferences-> notification ->i disabled it for my antivirus

today i wanted to re-enable but there is no more in the list of the application

how can i do it?
thanks

A:how can i re-enable the notification banner of my antivirus ?

hi
or reset them ,some of them are gone

i add a screenshot

http://www.tenforums.com/antivirus-firewalls-system-security/39938-how-can-i-re-enable-notification-banner-my-antivirus.html
Relevancy 50.74%

First post newbie here I did read up on post rules so I think I am Infected? 7 IE issue/ adware Windows firewall 9 doing this right My dell laptop is having some serious issues Compter info Windows factory installed Use Internet explorer for browser Microsoft security essentials Infected? Windows 7 firewall issue/ IE 9 adware for av Issues Windows firewall will not start Comes up with error code x c Went to services and tried to turn it on manually no go Searched in device manager hidden files found the Infected? Windows 7 firewall issue/ IE 9 adware firewall disabled there Tried to start no go Browser is redirected to ad sites No porn sites but ad sites nonetheless I have ran plenty of Microsoft Security Esential scans First one found Trojan Win Sirefef Exploit Java CVE- - EJ and TrojanDownloader Win Bebeber A Still getting redirected I did a scan in safe mode and found nothing I did upgrade to the latest explorer but still getting redirected Hopefully I gave enough info Please help right now I have it disabled from our home network so nothing else gets affected So I will download all programs on this laptop and send them to the infected by USB good idea Thank you DTD Thank you

A:Infected? Windows 7 firewall issue/ IE 9 adware

Hello and to BleepingComputer.Let's see what we're dealing with here.Please download RKill by Grinler from one of the 4 links below and save it to your desktop.Link 1Link 2Link 3Link 4Before we begin, you should disable any anti-malware software you have installed so it does not interfere with RKill running. This is because some anti-malware software mistakenly detects RKill as malicious. Please refer to this page if you are not sure how to disable your security software.Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed. If nothing happens or if the tool does not run, please let me know in your next reply***************************************************Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download linkIMPORTANT!!! - when you save the file, rename it to something random, such as bubbles.exe This must be done before beginning the download!MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from http://data.mbamupdates.com/tools/mbam-rules.exe'>here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Exit MBAM when done.Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.~BladeIn your next reply, please include the following:Malwarebytes Log

http://www.bleepingcomputer.com/forums/t/404927/infected-windows-7-firewall-issue-ie-9-adware/
Relevancy 50.31%

Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Microsoft Windows OneCare Live Antivirus MsMpEng exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C Program Files Intel Wireless Bin WLKeeper exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system LEXBCES EXE C WINDOWS system spoolsv exe C WINDOWS system LEXPPS EXE C Program Files Common Files AOL ACS AOLAcsd exe C Program Files Common Files AOL TopSpeed aoltsmon exe C Program Files Bonjour mDNSResponder exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Common Files AOL TopSpeed aoltpspd exe C Program Files Microsoft Windows OneCare Live OcHealthMon exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin Firewall No remove Trojan.PWS.Trans to Disabled Help! and Must Enable Option regkeys RegSrvc Help! Firewall Disabled No Option to Enable Must remove regkeys and Trojan.PWS.Trans exe C Program Files Dell Support Center bin sprtsvc exe Help! Firewall Disabled No Option to Enable Must remove regkeys and Trojan.PWS.Trans C WINDOWS system svchost exe C Program Files Viewpoint Common ViewpointService exe C WINDOWS wanmpsvc exe C Program Files Microsoft Windows OneCare Live winss exe C WINDOWS system wbem wmiprvse exe C Program Files Intel Wireless Bin ZcfgSvc exe C Program Files Microsoft Windows OneCare Live winssnotify exe C WINDOWS system wscntfy exe C WINDOWS Explorer EXE C PROGRA Intel Wireless Bin XConfig exe C WINDOWS system wuauclt exe C Program Files Java jre bin jusched exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files CyberLink PowerDVD DVDLauncher exe C WINDOWS system dla tfswctrl exe C Program Files Dell Media Experience DMXLauncher exe C WINDOWS System svchost exe C Program Files Common Files AOL ee AOLSoftware exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS system igfxsrvc exe C Program Files BroadJump Client Foundation CFD exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Dell Support Center bin sprtcmd exe C Program Files DellSupport DSAgnt exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Digital Line Detect DLG exe C Program Files HP Digital Imaging bin hpqtra exe c program files common files aol ee services antiSpywareApp ver AOLSP Scheduler exe c program files common files aol ee aolsoftware exe C Program Files Sony Sony Picture Utility VolumeWatcher SPUVolumeWatcher exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging bin hpqbam exe C Program Files HP Digital Imaging bin hpqgpc exe C Program Files NoAdware NoAdware exe C Program Files Yahoo Messenger YahooMessenger exe C Program Files internet explorer iexplore exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Program Files HP Digital Imaging Smart Web Printing hpswp clipbook exe C Program Files internet explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe C WINDOWS system wbem wmiprvse exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www defaulthomepage info R - HKLM Software Microsoft Internet Explorer Main Default Search URL http us rd yahoo com customize ie defaults su msgr http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie defaults sb msgr http www yahoo com ext search search html R - HKLM ... Read more

https://forums.techguy.org/threads/help-firewall-disabled-no-option-to-enable-must-remove-regkeys-and-trojan-pws-trans.736647/