Windows Firewall errors 8007042c and 1068

Welcome to the forum, Bill48!

Please use the following diagnostic tool. It has a powerful detection mechanism, and may help us get to the cause of your issues:

Please use the Farbar Recovery Scan Tool.
Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system 64-bit
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.

When done, the tool produces a log, FRST.txt, in the same directory from which the tool is run (Desktop).
Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply.


Also, use the Farbar Service Scanner.
Download: Downloading Farbar Service Scanner

We will get a view of all services and dependencies scoped by the tool...

Make sure the following options are checked:
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender

Press: Scan
When done, FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

Thank you.

No wonder you have problems!!

ZeroAccess using RLO (right-to-left override), creating junctions, and playing havoc with services.

Will need to do a careful review of your reports, and provide you the means for fixing the problems.
I am about to sign off for tonight, but, will get back with you tomorrow.

It is Wed Feb 26, 2:34PM AEDT for you and Tuesday Feb 25, 9:34PM CST here, so we have a 17 hour time difference.

Please try not to use the infected computer in the meantime.

Thank you for your patience.

Here goes round 1...

Please open notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below to Notepad. (Do not copy the word 'code')
Save it to the Desktop, where FRST is located, and name it: fixlist.txt

Code:

start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox]  
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\Run: [Google Update*] 
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {2fa2a0e9-dad2-11e1-a84a-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {4bb12b67-ef36-11e1-849e-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {4bb12b72-ef36-11e1-849e-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {4bb12b7e-ef36-11e1-849e-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {549e319d-2066-11e1-90ed-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {6329fef5-dac3-11e1-805b-001e101f82a7} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {72f59203-d563-11e1-8b78-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {72f5920f-d563-11e1-8b78-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {7d34f052-2686-11e1-85ca-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {b8fd0cb7-1628-11e1-858a-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {b8fd0cc5-1628-11e1-858a-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {b8fd0cf8-1628-11e1-858a-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {c62be58e-de79-11e1-a4d9-c80aa9fafa16} - G:\AutoRun.exe
HKU\S-1-5-21-732495969-821207150-1202094883-1000\...\MountPoints2: {d345db4c-94fe-11e1-bc18-c80aa9fafa16} - G:\setup.exe -a
URLSearchHook: HKCU - (No Name) - {37483b40-c254-4a72-bda4-22ee90182c1e} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKCU - No Name - {37483B40-C254-4A72-BDA4-22EE90182C1E} -  No File
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
S2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{f8f0f10f-4f17-6d7b-d4c3-90b2305077a0}\   \...\???\{f8f0f10f-4f17-6d7b-d4c3-90b2305077a0}\GoogleUpdate.exe" 
C:\Program Files (x86)\Google\Desktop\Install
S1 fsqwxfuj; \??\C:\Windows\system32\drivers\fsqwxfuj.sys [X]
C:\Users\Bill\AppData\Local\Google\Desktop\Install
C:\$Recycle.Bin\S-1-5-21-732495969-821207150-1202094883-1000\$f8f0f10f4f176d7bd4c390b2305077a0
C:\$Recycle.Bin\S-1-5-18\$f8f0f10f4f176d7bd4c390b2305077a0
DeleteJunctionsIndirectory: C:\Program Files\Microsoft Security Client
CMD: ipconfig /flushdns
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST, and press the Fix button, just once, and wait.

When done, the tool creates a report on the Desktop called: Fixlog.txt
Please post the Fixlog.txt in your reply.

Good job!!

Let's see if the following tool can take care of the issues. If not, we will need to go at it manually.


Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two


Now, please download the ESET ServiceRepair tool:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
(Direct link only available)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.

Please provide the CC Support\Logs\SvcRepair.txt in your reply.


Next, please run the Farbar Service Scanner once again, and provide the FSS.txt in your reply.

Thanks!

Getting better!! :)

Please download the following files and save them to your Desktop:
(Direct links only available)

PolicyAgent:
http://download.bleepingcomputer.com/win-services/7/PolicyAgent.reg

RemoteAccess:
http://download.bleepingcomputer.com/win-services/7/RemoteAccess.reg

Now double-click on the PolicyAgent.reg file.
A prompt appears asking if you want to merge the information contained in the file into the Registry.
Confirm the prompt to merge to your Registry.
Click: OK

Next, double-click on the RemoteAccess.reg file.
Also confirm the prompt to merge to your Registry.
Click: OK


Last, let's merge a missing Action Center key into the Registry:

Please open Notepad by pressing the Windows key and the R key at the same time.
In the Open area, type: notepad
Copy and paste all the text inside the code box below to Notepad:

Code:

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
"AutoStart"=""

In Notepad, go to File > Save As
Save the file to: Desktop
Save the file as: fixac.reg
Save type as needs set to: All files

On the Desktop, double-click: fixac.reg
Confirm the prompt to merge to your Registry.
Click: OK

Restart the computer.

On the Desktop, right-click fixac.reg, and select: Delete
Do the same for PolicyAgent.reg and the RemoteAccess.reg

Also empty the Recycle Bin.

Now, once again press the Windows key and the R key at the same time.
In the Open area, type: services.msc

In the Services console, make sure Security Center is there, and:
Startup Type is set to: Automatic (Delayed Start)
Service Status is set to: Started

When done, please run the Farbar Service Scanner once again, and post its new FSS.txt report.


.