UAC Prompts me any time I run a program

[spatel93]

Hi all,

Every time I try to run a program - firefox, spotify, itunes, microsoft security essentials, hell even windows explorer - I get a User Account Control Prompt. I click allow and I can use my programs just fine, but why is the prompt coming up for EVERY SINGLE program I use, and EVERY SINGLE time?

I can't even open up things like control panel or my computer without a prompt.

What's going on, and can I fix this?

Thanks!

 

[GamePlanner]

Change it from "alwats notify" level to "default level"
Thats it

 

[wds7]

hi all,

every time i try to run a program - firefox, spotify, itunes, microsoft security essentials, hell even windows explorer - i get a user account control prompt. I click allow and i can use my programs just fine, but why is the prompt coming up for every single program i use, and every single time?

I can't even open up things like control panel or my computer without a prompt.

What's going on, and can i fix this?

Thanks!

 

[Petey7]

It is highly recommended to have it at default level. Having it off completely would give malware and hackers full control over your system if it wants it. The prompts are there for a good reason.

 

[spatel93]

It already is at the default level. Keeps happening.

EDIT: Okay it seems that there's a virus in my computer. It tries to mimic windows 7 antivirus. Im running mbam right now to try to get rid of it.

 

[GamePlanner]

It already is at the default level. Keeps happening.

EDIT: Okay it seems that there's a virus in my computer. It tries to mimic windows 7 antivirus. Im running mbam right now to try to get rid of it.

its not give any prompt for web browser in default level

Try lowering a level 1st level (dont turn off) and see if the problem solve or not and reply

 

[Petey7]

The virus could be the cause of it. Some people have serious issues with the fake Windows 7 antiviruses. You might want to start a thread in system security.

 

[spatel93]

I removed the virus - microsoft security essentials is back up and running. cleaned the registries and temp data with ccleaner. Everything seems to be fine except I can't start windows firewall.

I feel like I am so close to fixing everything haha

 

[Golden]

Hi,

Depending on what virus it was (there are lots of flavours of fake Windows 7 anti-virus malware about) you might need to do a bit more work to fully remove it. Can you post your MBAM log file so we can have a look at it?

Regards,
Golden

 

[GamePlanner]

I removed the virus - microsoft security essentials is back up and running. cleaned the registries and temp data with ccleaner. Everything seems to be fine except I can't start windows firewall.

I feel like I am so close to fixing everything haha

Still you have problem pro as win firewall is not starting
Scan with mabm in safe mode
Post your log

 

[spatel93]

Here's the log file.
Database version: 911122201

Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421

12/21/2011 9:58:50 PM
mbam-log-2011-12-21 (21-58-50).txt

Scan type: Quick scan
Objects scanned: 172486
Time elapsed: 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CLASSES_ROOT\.exe\(default) (PUM.HijackExefiles) -> Bad: (6v) Good: (exefile) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Admin\AppData\Local\Temp\gtbjcdgwxp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Admin\AppData\Local\Temp\jzv.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Ran it again and this is the log file for that

Database version: 911122201

Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421

12/21/2011 10:00:13 PM
mbam-log-2011-12-21 (22-00-13).txt

Scan type: Quick scan
Objects scanned: 172440
Time elapsed: 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

 

[Golden]

OK. Can you turn on your Windows Firewall yet? For future reference, MBAM is best run on a normal bootup, not in Safe Mode.

If you can't turn on the firewall, then you will probably need some more experienced help that I can request for you. Let us know.

Regards,
Golden

 

[spatel93]

No, I can't turn it on. I get a message saying

Windows firewall cannot change some of your settings
Error code 0x80070424

 

[GamePlanner]

Type "services.msc" in Run
Select windows firewall service
In "properties" enable it
Now turn on windows firewall
Try this and report

 

[spatel93]

It's not there. Looked through the list three times.

 

[GamePlanner]

It's not there. Looked through the list three times.

what"s not there
is it windows firewall services
Please post screenshot of msc.services.com if u can

 

[Golden]

Hi,

OK, lets try one more thing.

Open an elevated (Run as administrator) cmd window. At the prompt, type sfc /scannow and hit enter.

Paste a screen capture of the results when its completed.

Regards,
Golden

 

[spatel93]

Here's the screenshots!

 

[GamePlanner]

I think virus had messed up the system and if i was you I had reinstall my os . Even your firewall service is not present here.
Maybe you can try online scan from eset and hitman pro and look if it can solve your problem.

Maybe some experienced users can help you more

 

[Golden]

Spatel - I've asked one of our security MVP's (Jacee) to have a look at this for you if she hets a chance.

Regards,
Golden