Unable to enable windows firewall , error code 0x8007042c

[sxcherzinger]

I just removed it, restart

then scan again, the same thing is detected again ...

 

[Golden]

OK. lets try an online scan using ESET

If this does not help, I'll ask someone more experienced to look at this for you.

Regards,
Golden

 

[sxcherzinger]

OK. lets try an online scan using ESET

If this does not help, I'll ask someone more experienced to look at this for you.

Regards,
Golden

Sure I'll come back to you later, thanks

 

[Golden]

Hi,

I just thought of one other trick we might try. Please download this file to your Desktop, double-click it and then click YES - I'm hoping we can repair your registry, which is where the issue seems to lie. Try this before the ESET scan, and see if you can manually restart the firewall.

http://download.bleepingcomputer.com/reg/FixNCR.reg

Regards,
Golden

 

[sxcherzinger]

Hi,

I just thought of one other trick we might try. Please download this file to your Desktop, double-click it and then click YES - I'm hoping we can repair your registry, which is where the issue seems to lie. Try this before the ESET scan, and see if you can manually restart the firewall.

http://download.bleepingcomputer.com/reg/FixNCR.reg

Regards,
Golden

Hi Golden,

The regfix doesn't work ... And I finish a scan using ESET, well it shows multiple threats and I already removed them ... Still firewall doesn't work ...

Do a scan again using malware bytes and it shows that no malware is found ...

Should I check into the 'Windows Firewall Authorisation Driver' ? Because windows seems to detect problem about that particular driver, state that its not working properly ...

 

[sxcherzinger]

After the ESET online scan, the same problem happen again, threat is removed, I restarted and I cant open windows ... Have to use system restore again back to the point I havent do the ESET scan ... However later I use Malwarebytes to do quick scan, it does not detect any threat ...

 

[Golden]

Hi,

Well, I think the best option now is probably a clean install - your system seems heavily infected as each tools finds remnants of malware. We could spend days on this and still not be 100% sure its completely clean, whereas a clean install will sort it out in a matter of hours.

My recommendation is to bite the bullet and perform a clean install, wiping the hard drive at the same time using CLEAN ALL:

http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html

Let us know if you need help with this.

Regards,
Golden

 

[sxcherzinger]

Hi,

Well, I think the best option now is probably a clean install - your system seems heavily infected as each tools finds remnants of malware. We could spend days on this and still not be 100% sure its completely clean, whereas a clean install will sort it out in a matter of hours.

My recommendation is to bite the bullet and perform a clean install, wiping the hard drive at the same time using CLEAN ALL:

http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html

Let us know if you need help with this.

Regards,
Golden

Hi Golden,

Thanks for the recommendation, actually what is really a clean install ? Does it mean something like re-format the whole system and install a new window ?

I'll come back to this soon, quite busy with my work ... luckily I had a backup laptop ...

 

[Jacee]

Trojan:Win64/Sirefef.b is more notorious as Zero access rootkit

 

[Golden]

Hi,

Thats correct : cleasn install = formay and reinstallation of everything. Given Jacees info, I would be even more inclined to that route.

Regards,
Golden

 

[sxcherzinger]

Hi,

Thats correct : cleasn install = formay and reinstallation of everything. Given Jacees info, I would be even more inclined to that route.

Regards,
Golden

Hi Golden,

Does it mean I have no more options but to do a clean install ?

 

[sxcherzinger]

Trojan:Win64/Sirefef.b is more notorious as Zero access rootkit

Yea can you help me with that ?

 

[Golden]

Hi,

I've done some reading up on Zero Access, and now I know why its so hard to remove - even after throwing multiple well-known tools at it. Apparently, in some cases its impossible to clean. You could spend days throwing other tools at this in the hope that it is eradicated, but success is not guaranteed.

http://www.2-viruses.com/remove-zeroaccess-rootkit

Unless Jacee has other suggestions, bite the bullet, and do a clean install as recommended earlier.

Regards,
Golden

 

[Guardian Ares]

I'm having the same problem so far. I'm currently running the Microsoft Safety Scanner as well as Trend Micro Titanium. Both Full Scans. Afterward I'm going to run the RKill and Malwarebytes. I just installed some Windows 7 updates and I noticed the Action Center informing me about the Windows Firewall. That's how this all started. I'll post a reply with my results. I'm hoping I don't have to do a clean install seeing as how I have over a TB of media on my PC and no way to get a larger HD.

Well, my PC restarted with no problems after the scans. It seems like I may have the same problem with a different cause. I'm gonna continue researching it.

Rkill was run on 05/23/2012 at 22:23:24. 
Operating System: Windows 7 Professional 

Processes terminated by Rkill or while it was running: 
C:\ProgramData\adob\copy.exe
C:\ProgramData\adob\svchost.exe
C:\Users\Guardian\AppData\Local\Temp\6F45.tmp\rundll32.exe

Rkill completed on 05/23/2012 at 22:23:40.

Malwarebytes Anti-Malware 1.61.0.1400
[URL="http://www.malwarebytes.org"]www.malwarebytes.org[/URL]
Database version: v2012.05.24.01
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Guardian :: G222-ELITE [administrator]
5/23/2012 10:27:19 PM
mbam-log-2012-05-24 (00-12-12).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 360734
Time elapsed: 1 hour(s), 29 minute(s), 
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Adob (Trojan.Banker) -> Data: C:\ProgramData\adob\color.vbs -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|adobe (Trojan.Banker) -> Data: C:\ProgramData\adob\color.vbs -> No action taken.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\ProgramData\adob\color.vbs (Trojan.Banker) -> No action taken.
(end)

 

[rcent]

firewalls disabled in WIN7 64

I spent the last 4-5 days working on this Laptop Win7 64 and I finially fixed it and after reading every thing i could I found the answer... If you want to try this it may work for you also. *
BUT get rid of the Virus with Anti virus, and this will help fix the rest for you.... good luck.
Download

Windows repair tool

Extract and launch the Repair_Windows.ex file

Click on Start repairs tab-click on Start

check mark following options alone: (deselect all, and only check these)

Reset registry permissions
reset file permissions
Repair WMI
Repair Windows Firewall.
Remove Policies Set By Infections
Repair Winsock & [FONT=inherit !important][FONT=inherit !important]Cache[/FONT][/FONT]
Repair hosts


**Checkmark Restart System When Finished option
click the Start button

System should restart after repair

remember to disable Antivirus before hand... and again good luck!!!

 

[cottonball]

rcent,

The posts in these thread date back to 2012.

Also, Windows Repair (All in One) is not a tool used to fix Sirefef or ZeroAccess Rootkit.

It use is meant for doing repairs after an infection is removed.