Solved Windows FireWall Problem, Error 0x8007042c

[AngryCircle]

Hello all!

ive been trying to work around this issue for about 5 hours now. I have tried many fixes that people are suggesting from all coners of the internet! If anyone else can help out that would be great!

Here are the things i have tried;

• I first started this journey with the error code 0x80070424, which was fixed with the microsoft FixIt
• I have now been given the error code 0x8007042c, as stated above in the title
• I have tried to get poast this with FixIt from MS but with no luck.
• I then went onto trying the manually starting windows fix from this website; http://support.microsoft.com/kb/2530126 , i can get all the way through the steps untill the last one "BFE" because this gives me an error code: 5, access denied.
• Ive removed all antivirus software thinking that this may be blocking the firewall by some chance.
• I have done many virus scans with all the recommened tools, and i have found nothing.

I have also gone through some of the previous threads about this problem and tried them also. It just seems that i can get past this shit if i can give myself the permission to turn on "BFE". Although im the only account on this pc so its the admin account.

So as you can see i swear im coming to the end of all the fixes out there and everything is leading to a complete reinstall of windows 7; which is a no go, because i can not be bothered with download a TB worth of games haha. ill just deal with the no window fire wall. But any help to get this fixed is welcome!

 

[AngryCircle]

Here are the things from FRST 64bit, if you ask this question.

 

[VistaKing]

Open Notepad. Inside notepad paste the highlighted text below


start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$51aeb6e67aa0c6a4c9f48f44a4e2eacf\n. ATTENTION! ====> ZeroAccess?
2013-08-09 21:15 - 2012-07-02 18:14 - 00000000 ____D C:\Users\Matt\AppData\Roaming\OpenCandy
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-970031482-4028908929-1221085803-1000\$51aeb6e67aa0c6a4c9f48f44a4e2eacf

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$51aeb6e67aa0c6a4c9f48f44a4e2eacf

C:\Users\Matt\jagex_cl_oldschool_LIVE.dat
C:\Users\Matt\jagex_cl_runescape_LIVE.dat
C:\Users\Matt\jagex_cl_runescape_LIVE_BETA.dat
C:\Users\Matt\random.dat
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
end


Click on File select Save As

Save to : Desktop
File Name: Fixlist.txt
Save as type: All files

Click on Save button . Close Notepad

Open FRST64.exe and click on the Fix button once complete it will create a new log called Fixlog.txt . Upload the log with your reply

   Note

Fixlog.txt will be on the Desktop

Farbar Service Scanner

Click here :ar: to DOWNLOAD

Place the file onto your desktop

Right click on FSS.exe select

Place a check mark next to the following options

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender

Press the Scan button

Farbar Service Scanner will create a log, called FSS.txt, on the Desktop. Upload the FSS.txt with your reply

 

[Jacee]

AngryCircle, you are infected with a ZeroAccess Rootkit .... Complex ZeroAccess Rootkit Installed More Than 9 Million Times, Says Sophos | SecurityWeek.Com

 

[AngryCircle]

Hey, thanks for the replies. ill try both of these methods now and get back to you soonish.

 

[AngryCircle]

Open Notepad. Inside notepad paste the highlighted text below


start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$51aeb6e67aa0c6a4c9f48f44a4e2eacf\n. ATTENTION! ====> ZeroAccess?
2013-08-09 21:15 - 2012-07-02 18:14 - 00000000 ____D C:\Users\Matt\AppData\Roaming\OpenCandy
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-970031482-4028908929-1221085803-1000\$51aeb6e67aa0c6a4c9f48f44a4e2eacf

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$51aeb6e67aa0c6a4c9f48f44a4e2eacf

C:\Users\Matt\jagex_cl_oldschool_LIVE.dat
C:\Users\Matt\jagex_cl_runescape_LIVE.dat
C:\Users\Matt\jagex_cl_runescape_LIVE_BETA.dat
C:\Users\Matt\random.dat
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
end


Click on File select Save As

Save to : Desktop
File Name: Fixlist.txt
Save as type: All files

Click on Save button . Close Notepad

Open FRST64.exe and click on the Fix button once complete it will create a new log called Fixlog.txt . Upload the log with your reply

   Note

Fixlog.txt will be on the Desktop

Farbar Service Scanner

Click here :ar: to DOWNLOAD

Place the file onto your desktop

Right click on FSS.exe select

Place a check mark next to the following options

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender

Press the Scan button

Farbar Service Scanner will create a log, called FSS.txt, on the Desktop. Upload the FSS.txt with your reply

Thankyou, please find attacthed what you asked for.

 

[VistaKing]

Download the reg files below and right click on each of them select merge then click OK . Once done restart the PC and rerun the FSS.exe tool and upload the new FSS.txt log

Regfiles

• 
  Windefend.reg
  
• 
  SharedAccess.reg
  
• 
  iphlpsvc.reg

 

[AngryCircle]

Download the reg files below and right click on each of them select merge then click OK . Once done restart the PC and rerun the FSS.exe tool and upload the new FSS.txt log

Regfiles

• 
  Windefend.reg
• 
  SharedAccess.reg
• 
  iphlpsvc.reg

Hello, i've done the things you have asked.

 

[VistaKing]

Download Services Repair

:ar: http://kb.eset.com/library/ESET/KB Team Only/Malware/ServicesRepair.exe

When done . Drag the file to your desktop

Right click on ServicesRepair.exe choose

Click on Yes or Continue . Once the tool has completed it will ask you to restart . Please restart the PC .

 

[AngryCircle]

Download Services Repair

:ar: http://kb.eset.com/library/ESET/KB Team Only/Malware/ServicesRepair.exe

When done . Drag the file to your desktop

Right click on ServicesRepair.exe choose

Click on Yes or Continue . Once the tool has completed it will ask you to restart . Please restart the PC .

I have finished this step, is there anything else i need to do? As it looks like the firewall is back online!

 

[VistaKing]

Upload the log .

The tool will create a folder called CC Support in the same directory the tool is run. Post the CC Support\Logs\SvcRepair.txt in your next reply.

 

[AngryCircle]

Upload the log .

The tool will create a folder called CC Support in the same directory the tool is run. Post the CC Support\Logs\SvcRepair.txt in your next reply.

Here you go.

 

[AngryCircle]

i could only see the .log and not .txt in that folder, is this correct?

 

[VistaKing]

Yes that is correct . Can you rerun FSS.exe and upload the FSS.txt file ?

 

[AngryCircle]

Yes that is correct . Can you rerun FSS.exe and upload the FSS.txt file ?

yup, here you go.

 

[VistaKing]

FSS.txt looks beautiful .

Lets see what these programs show

Download

HitManPro

64-Bit Version OS :ar: HitmanPro_x64

32-Bit Version OS :ar: HitmanPro

:ar: Save to the Desktop

:ar: Right click on HitmanPro.exe and choose

:ar: When HitmanPro opens up click on Settings uncheck Scan for tracking cookies . Click on OK . Then click on the Next button

:ar: Click on No, I only want to perform a one-time scan to check this computer on the Setup page . Click Next once done .

:ar: Let it scan the PC once its done Click Next

:ar: Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer then click Next

Copy and Paste the contents of the log . Locate in C:\ ProgramData\Hitman Pro\Logs

Run

Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )

Update the definitions and do a full scan

:ar: On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
:ar: If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
:ar: The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
:ar: When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
:ar: Click OK to close the message box and continue with the removal process.
:ar: Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
:ar: Make sure that everything is checked, and click Remove Selected.
:ar: When removal is completed, a log report will open in Notepad.
:ar: The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
:ar: Copy and paste the contents of that report in your next reply and exit MBAM.

Log looks like this : mbam-log-yyyy-mm-dd

Log located : C:\Users\{Your UserName}\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs or C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

   Note

APPDATA and ProgramData are both hidden folders

 

[AngryCircle]

Here is the hitman pro log, the other scan takes ages and ill have to post tomorrow as im up early tomorrow for work.

 

[VistaKing]

Copy and paste the contents of the HitmanPro log . I'm on an iPad for some reason it will not read the log correctly . I see boxes .

 

[AngryCircle]

Copy and paste the contents of the HitmanPro log . I'm on an iPad for some reason it will not read the log correctly . I see boxes .

this was inside it;

[FONT=&quot]

[/FONT]
  [FONT=&quot]
HitmanPro 3.7.7.203[/FONT]
  [FONT=&quot]
www.hitmanpro.com[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
   Computer name . . . . : THE-ALMIGHTY[/FONT]
  [FONT=&quot]
   Windows . . . . . . . : 6.1.1.7601.X64/12[/FONT]
  [FONT=&quot]
   User name . . . . . . : THE-ALMIGHTY\Matt[/FONT]
  [FONT=&quot]
   UAC . . . . . . . . . : Disabled[/FONT]
  [FONT=&quot]
   License . . . . . . . : Trial (Expired)[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
   Scan date . . . . . . : 2013-08-11 22:36:28[/FONT]
  [FONT=&quot]
   Scan mode . . . . . . : Normal[/FONT]
  [FONT=&quot]
   Scan duration . . . . : 4m 48s[/FONT]
  [FONT=&quot]
   Disk access mode  . . : Direct disk access (SRB)[/FONT]
  [FONT=&quot]
   Cloud . . . . . . . . : Internet[/FONT]
  [FONT=&quot]
   Reboot  . . . . . . . : No[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
   Threats . . . . . . . : 0[/FONT]
  [FONT=&quot]
   Traces  . . . . . . . : 5[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
   Objects scanned . . . : 2,292,625[/FONT]
  [FONT=&quot]
   Files scanned . . . . : 49,842[/FONT]
  [FONT=&quot]
   Remnants scanned  . . : 1,081,033 files / 1,161,750 keys[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
Potential Unwanted Programs _________________________________________________[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
   HKU\S-1-5-21-970031482-4028908929-1221085803-1000\Software\Softonic\ (Softonic)[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]
[/FONT]
  [FONT=&quot]

[/FONT]
[FONT=&quot]
[/FONT]

 

[VistaKing]

Run

SystemCheck

Click here :ar: SecurityCheck to Download

Place the file onto your desktop

Right-click the SecurityCheck choose

Press any key to continue

Once the scan is done . It will open up a text file copy and paste the text

Press Ctrl and A to select All of the text
Press Ctrl and C to copy the selected text
In your reply click on the message box and press Ctrl and V to Paste