TechSpot

Windows firewall wont start

By Cinoy
Jun 24, 2008
Topic Status:
Not open for further replies.
  1. Hi, when i try to configure my windows firewall settings, it says windows firewall cannot start because the associated service is not running.Would you like to run the windows/fireball(ICS) service?

    When i click yes it says "cannot run the ics service" or something similar.

    i do not have zone alarm, my hjt log is attached.
     
  2. Blind Dragon

    Blind Dragon TS Evangelist Posts: 4,048

    Ok, not a problem with starting the windows firewall as it can be done, but I would rather see you install zone alarm or comodo. Windows firewall does not provide protection on outgoing connections.

    ----------------------------------------------------

    Next, You have 2 active anti-virus programs, this is not good and can cause serious problems if they are both competing over the same resources or files.

    Please uninstall either AVG or AOL antivirus AVG 7 will quit updating later this year, you would need to upgrade to AVG 8 before the end of the year if you keep AVG

    ------------------------------------------------------

    Next, you have some infections and they have added themselves to the trusted zone in internet explorer so we need to remove these as well as start removing these infections, I want you to complete the above before doing this though.

    Download\install 'SuperAntiSpyware Home Edition Free Version' from HERE
    • Launch SuperAntiSpyware and click on 'Check for updates'.
    • Once the updates have been installed,exit SuperAntiSpyware.

    --------------------------------------------------------
    you may want to print from here down, or copy and paste into notepad and save it to your desktop to have while in safe mode

    Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

    R3 - URLSearchHook: (no name) - ~C09F4845-D08C-8B09-AD3C-FAEA1CEE2591} - (no file)
    R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL
    O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL
    O2 - BHO: Gamevance Text - {7370F91F-6994-4595-9949-601FA2261C8D} - C:\Program Files\Gamevance\gvtl.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
    O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
    O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
    O4 - HKLM\..\Run: [Gamevance] C:\Program Files\Gamevance\gamevance32.exe
    O4 - HKLM\..\Policies\Explorer\Run: [vrfitg] C:\WINDOWS\System32\vrfitg.exe
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Owner\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
    O15 - Trusted Zone: *.adextension.com
    O15 - Trusted Zone: *.crosskirknet.com
    O15 - Trusted Zone: *.dollarrevenue.com
    O15 - Trusted Zone: *.filesharingaccess.com
    O15 - Trusted Zone: *.gimmycash.com
    O15 - Trusted Zone: *.gimmysmileys.com
    O15 - Trusted Zone: *.imagesrvr.com
    O15 - Trusted Zone: *.kabum.pl
    O15 - Trusted Zone: *.kazaa-forum.com
    O15 - Trusted Zone: *.media-motor.com
    O15 - Trusted Zone: *.mediatickets.net
    O15 - Trusted Zone: *.proben.nu
    O15 - Trusted Zone: *.snet.ms
    O15 - Trusted Zone: *.snet.tc
    O15 - Trusted Zone: *.snipernet.biz
    O15 - Trusted Zone: *.snipernet.us
    O15 - Trusted Zone: *.sxload.com
    O15 - Trusted Zone: *.traffic-stats.org
    O15 - Trusted Zone: *.winantivirus.com
    O15 - Trusted Zone: *.windupdates.com
    O15 - Trusted Zone: *.yoursitebar.com
    O15 - Trusted Zone: *.adextension.com (HKLM)
    O15 - Trusted Zone: *.crosskirknet.com (HKLM)
    O15 - Trusted Zone: *.dollarrevenue.com (HKLM)
    O15 - Trusted Zone: *.filesharingaccess.com (HKLM)
    O15 - Trusted Zone: *.gimmycash.com (HKLM)
    O15 - Trusted Zone: *.gimmysmileys.com (HKLM)
    O15 - Trusted Zone: *.imagesrvr.com (HKLM)
    O15 - Trusted Zone: *.kabum.pl (HKLM)
    O15 - Trusted Zone: *.kazaa-forum.com (HKLM)
    O15 - Trusted Zone: *.media-motor.com (HKLM)
    O15 - Trusted Zone: *.mediatickets.net (HKLM)
    O15 - Trusted Zone: *.proben.nu (HKLM)
    O15 - Trusted Zone: *.snet.ms (HKLM)
    O15 - Trusted Zone: *.snet.tc (HKLM)
    O15 - Trusted Zone: *.snipernet.biz (HKLM)
    O15 - Trusted Zone: *.snipernet.us (HKLM)
    O15 - Trusted Zone: *.sxload.com (HKLM)
    O15 - Trusted Zone: *.traffic-stats.org (HKLM)
    O15 - Trusted Zone: *.winantivirus.com (HKLM)
    O15 - Trusted Zone: *.windupdates.com (HKLM)
    O15 - Trusted Zone: *.yoursitebar.com (HKLM)
    O16 - DPF: NDWCab - http://www.neededware.com/ndw4.cab
    O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
    O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - https://www.gamespyid.com/alaunch.cab
    O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/partners/shockwave/stx/install.cab
    O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/spsp29953.01noopt/spyspottercabinstall.cab
    O20 - AppInit_DLLs: C:\WINDOWS\system32\nopdb.dll
    O20 - Winlogon Notify: MediaContentIndex - C:\WINDOWS\system32\jt2q07f5e.dll (file missing)

    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.

    Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

    Please go to Start > Control Panel > Add/Remove Programs and remove the following (if present):

    AskPBar
    Gamevance


    Please note any other programs that you don't recognize in that list in your next response.

    Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these folders (if present):

    C:\Program Files\AskPBar
    C:\Program Files\Gamevance


    Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these files (if present):

    C:\WINDOWS\System32\vrfitg.exe
    C:\WINDOWS\system32\nopdb.dll
    C:\WINDOWS\system32\jt2q07f5e.dll



    Scan with SuperAntiSpyware
    • Start SuperAntiSpyware.
    • On the main screen click on 'Scan your computer'.
    • Check: 'Perform Complete Scan then Click 'Next' to start the scan.
    • Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
    • Make sure everything found has a checkmark next to it,then press 'Next'.
    • Click on 'Finish' when you've done.

      It's possible that the program will ask you to reboot in order to delete some files.

    After that, Reboot, and post a new HijackThis log here in a reply along with the Superantispyware log

    • Obtain the SuperAntiSpyware log as follows:
      Click on 'Preferences'.
      Click on the 'Statistics/Logs' tab.
      Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
      It will then open in your default text editor,such as Notepad.
      Attach the notepad file here on your next reply

    --------------------------------------------------------------

    Attach here:
    1) new hijackthis log scanned after reboot
    2) Superantispyware log
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.