Windows firewall service cannot start (solved)

[Starbuck]

Hi asmoeone

 

12007 error usually means that the download is being blocked by a security program.

 

My guess is that's probably the Firewall ( as we've just started it again)

Simple way to test this is to turn off the Firewall and then try the update again.

If it works like this, you'll have to add an exception to the firewall rules to allow MBAM.

[asmoeone]

I'd understood that having an open internet connection without a firewall was very risky, even for a short period? Well I guess I trust you because I tried it. The update gave the same error.

 

I checked the MBAM forums, and they seem to point to an uninstall / "mbam-clean.exe" utility / reinstall. Heard of it?

[Starbuck]

I'd understood that having an open internet connection without a firewall was very risky, even for a short period?

It can be, but as we were only trying to access a well known good site to get the update.... it would have been ok.

 

I checked the MBAM forums, and they seem to point to an uninstall / "mbam-clean.exe" utility / reinstall. Heard of it?

I see what they are getting at with the program. Sometimes malware does block MBAM and this will clear out all the mbam entries from the registry.

It's not a program i've actually tried, but as i know 'RubbeR DuckY' fairly well and the fact that he started MBAM .... i'd say he knows a thing or 2. :)

 

Let's give it a try:

 

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.

2. Restart your computer (very important).

3. Download and run mbam clean

4. It will ask to restart your computer (please allow it to).

5. After the computer restarts, install the latest version from Malwarebytes Anti-Malware.

[asmoeone]

I'm embarrassed to admit that when I opened my browser I realised my wireless connection was still disabled. Could have had something to do with the update problem...

 

Anyway, MBAM reinstalled. Scan run. "no malicious items were detected".

[asmoeone]

Malwarebytes' Anti-Malware 1.46

Malwarebytes

 

Database version: 4274

 

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

 

04/07/2010 14:17:19

mbam-log-2010-07-04 (14-17-19).txt

 

Scan type: Full scan (C:\|)

Objects scanned: 163170

Time elapsed: 50 minute(s), 53 second(s)

 

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

 

Memory Processes Infected:

(No malicious items detected)

 

Memory Modules Infected:

(No malicious items detected)

 

Registry Keys Infected:

(No malicious items detected)

 

Registry Values Infected:

(No malicious items detected)

 

Registry Data Items Infected:

(No malicious items detected)

 

Folders Infected:

(No malicious items detected)

 

Files Infected:

(No malicious items detected)

[Starbuck]

I'm embarrassed to admit that when I opened my browser I realised my wireless connection was still disabled. Could have had something to do with the update problem...

it certainly didn't help. http://fc06.deviantart.com/fs4/i/2004/250/7/1/ROFL_by_b4sti.gif

At least you found the problem.

 

Everything looks good now.

But like i said before, there's no 100% guarantee with these backdoor trojans.

We may have got everything, but we can only remove what we can see in the scans.

Let's finish off the cleaning process now:

 

Step 1

• Please double-click OTL.exe to run it.
  
• You should see a CleanUp! button, press that button,
   
  http://img.photobucket.com/albums/v708/starbuck50/cleanupbutton.png
   
  
• This will remove any programs we have asked you to download along with there associated folders.. plus itself.

 

Note:

MBAM will not be removed

 

 

Step 2

Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

 

The easiest and safest way to do this is:

• Go to Start > Programs > Accessories > System Tools and click "System Restore".
  
• Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the Restore Point a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  
• Then go to Start > Run and type: Cleanmgr
  
• Click "OK".
  
• Select the drive for cleaning then click OK (usually 'C' drive)
  
• Click the "More Options" Tab.
  
• Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

 

 

To find out how you may have been infected....read this topic:

So how did i get infected?

 

Not all of the following information will be applicable to you, but it's still best to read it all.

 

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

• Use an AntiVirus Software
  
  • Avira AntiVir ....installation guide Here
    
  • Avast free
    
  • Bitdefender Free
    
  • MS Security Essentials ... see note* ...installation guide Here
    

   

  Note*:

  Upon installation MS Security Essentials will check that your OS is a legal copy.

   

  Only install one AntiVirus program

   

  [*]Update your AntiVirus Software regularly

   

  [*]Use a 3rd party Firewall

  • Online Armor Free
    
  • ZoneAlarm ...Important note below
    
  • Outpost Firewall Free
    
  • Sunbelt Personal Firewall
    

  NOTE: If choosing Zone Alarm be aware that the free version also installs ZoneAlarm Spy Blocker. It is recommended however that you UNcheck this option.

   

  Only install one software Firewall

   

  Some 3rd party Firewalls will turn off the windows firewall when they are installed.

  It's always best to check that the Windows Firewall is turned off:

   

  How to turn off Windows Firewall:

  Start ... Control Panel ...click on 'Classic View'.

  now select Windows Firewall.

  When the Windows Firewall box opens, put a tick against .. Off (not recommended) and then click Ok

   

  [*]Scan regularly with a 'Stand Alone' Anti-Malware scanner:

  Installing another scanner that you can run once or twice a week is always beneficial.

  Something like:

  Malwarebytes Anti-Malware

  SUPERAntiSypware

  Remember to update these programs each time before running.

  You can install more than one of these if you only run them as stand alone programs.

   

  [*] Use an alternative browser:

  Some excellent alternatives to MS Internet Explorer are:

   

  Firefox

  For added security, add the NoScript extension to this browser:

  Allow active content to run only from sites you trust, and protect yourself against XSS and Clickjacking attacks

  also consider adding:

  WOT - Safe Browsing Tool

   

  Web of Trust warns you about risky sites that cheat customers, deliver malware or send spam. Millions of members of the WOT community rate sites based on their experience, giving you an extra layer of protection when browsing or searching the Web.

  Btw: you don't have to make a contribution.

   

  Opera

   

  They offer better security, more stability, and better speed.

   

  [*]Keep a backup of your registry

  Keeping a regular backup of your registry will help when something goes wrong.

  Use a program like:

  Erunt

   

  A full tutorial on how to set up and use Erunt can be found here:

  Erunt tutorial

   

  [*]Keep your system clean of temp files etc, using a 'Cleaner':

  Cleaners are programs that will help to clean out your:

  Windows temp files

  Current user temp files

  Cookies

  Temporary Internet flies

  Browser history

  Recycle bin

  Etc.......

  In other words.... all the rubbish that you accumalate over the course of your browsing and day to day usage of your pc.

  Programs like:

  CCleaner

  TFC by OldTimer

  ATF Cleaner

   

  [*]Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.

   

  [*]Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

   

  A tutorial on installing & using this product can be found here:

  Using and installing SpywareBlaster

   

  [*]Update all your 'Security' programs regularly - Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

 

Glad I was able to help.

 

Safe surfing. http://fc08.deviantart.net/fs71/f/2010/033/b/3/Computer_addict__by_Sinister_Starfeesh.gif

[asmoeone]

Done.

 

Many, many thanks for your help. The process has been a pleasure for me and I'm frankly amazed to have received such professional and timely assistance, all volunteered for nothing. I shall be visiting the donation page for the site.

[Starbuck]

Hi asmoeone,

 

Many thanks for the nice comments.

The staff here do take a lot of pride in their work and we know that most members will want their computer problems sorted as quickly as possible.

All the staff here were once newbies, so we know what it's like to have problems you can't sort out.

Yes, we do offer our time for nothing... a lot of this is because of the belief we have in the site and the members.

 

Once again, i'm glad to have been of help and many thanks for the nice comments.