After malware attack I can't turn security center and windows defender on!

sabrinaguth81 · Mar 31, 2012

HI!

I have a huge problem. My computer was attacked by malware a few days ago. I immediately ran a full scan with my Antivirus (AVG Internet Security Business Edition 2012). It found 3 threats and I deleted them. Now, I've noticed that even though I have the pop up blocker turned on, pop up windows open steadily. I'm currently using Google Chrome and I even installed the AdBlocker extension, which makes it a little bit better. Now, every time I open a new website, AVG alerts me that it found a threat and that it has been successfully removed. Problem is, when I check the AVG log and the Virus Vault, it is all empty. A repeated full scan don't show any results. Today I also noticed, that I can't open my Windows Defender. Whenever I try to turn it on, I get an error:
"Windows Defender encountered an error: 0x80070424. The specified service does not exist as an installed service." Then I tried to access the Security Center and when I open it, it tells me Security Center is turned off. Now, when I try to turn it on, it tells me: "The Security Service can't be started." Also, Windows Firewall service is not running either. When I try to update the firewall settings, it tells me: "Windows Firewall was unable to make the requested updates". Trying to turn Windows Firewall on, also fails. Error message "Due to an unidentified problem, Windows cannot display Windows Firewall settings." AND: 2 Windows Security updates failed as well. Security Update for Windows Vista (KB2633171) and Security Update for Windows Vista (KB2507618).

I'm really really desperate and don't know what to do. I've looked up several forums, but can't really find answers. I'm not a computer genius,... so I really need help! I really would appreciate it, if somebody can help me! I attacked several attachments.
:cry:

Thanks!

Ex_Brit · Apr 1, 2012

Tried System Restore to go back to before all this happened? If necessary you can get to it easily in Safe Mode (tap F8 repeatedly while booting up) and choose 'Safe Mode with Networking' for a reason I'll explain in a second.
System Restore is under Start/All Programs/Accessories/System Tools or go to Start/Run and type in rstrui.exe and click OK or Enter. It will initiate OK in this mode while the infection or whatever it is, can't.

Failing that you can do all the following in this mode:

Download, install, update (important) and then run a full scan using the FREE version of this tool: Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Hopefully that will rid you of whatever it is.

richc46 · Apr 1, 2012

If the above does not work, uninstall your anti virus and Defender. You can just reinstall, but I would use Malwarebytes and Microsoft Security Essentials, which has Defender included.

sabrinaguth81 · Apr 1, 2012

Hello Ex_Brit!
First of all, thanks for the advise. I still would like to ask you another question though... How do I know if I have restore points? I tried to get to restore it through Control Panel and Backup and Restore Center, but it told me that I don't have any restore points. It must have been wiped out or something. So, as I'm not really too good in all this, I'm not sure if I should follow the steps you explained me. Any advise?

sabrinaguth81 · Apr 1, 2012

Hello richc46!
Thanks for your advise as well. I already have installed Malwarebytes and it runs and runs forever. I currently have AVG Internet Security Business Edition 2012, that's why it wouldn't let me install Microsoft Security Essentials. Now, if I uninstall AVG and install Microsoft Security Essentials instead, will that be enough protection? Or should I consider exchanging Microsoft Security Essentials later on with AVG again?

Ex_Brit · Apr 1, 2012

Try initiating System Restore in Safe Mode with Networking, it will tell you there if there are restore points. If there aren't any then follow the suggestion to run Malwarebytes in that mode after updating it. In that mode there shouldn't be anything to stop Malwarebytes or delay it.

richc46 · Apr 1, 2012

sabrinaguth81 said:
Hello richc46!
Thanks for your advise as well. I already have installed Malwarebytes and it runs and runs forever. I currently have AVG Internet Security Business Edition 2012, that's why it wouldn't let me install Microsoft Security Essentials. Now, if I uninstall AVG and install Microsoft Security Essentials instead, will that be enough protection? Or should I consider exchanging Microsoft Security Essentials later on with AVG again?

I, plus most of the knowledgeable members here, use only Malwarebytes (free version) and Microsoft Security Essentials; it is definately enough. You do realize that no matter what you use common sense is essential. Stay away from the sites that we all know are trouble, such as porn and downloads that are too good to be true. Stay away from free stuff like icons etc. too.
Also, Defender is included with Security Essentials.

sabrinaguth81 · Apr 2, 2012

Hello!
Ok,... so I ran Malwarebytes the Microsoft Safety Scanner, Microsoft Security Essentials and ComboFix in Safe Mode with Networking. It cleaned everything out and the latest scan of Malwarebytes didn't find anything. Now, I tried to turn Windows Firewall and the Windows Security Center on, and it still gives me the same errors. Does that mean that some important files got damaged? If yes, how can I fix them?

townsbg · Apr 2, 2012

You used combofix? That should only be used by someone highly trained in it's use otheriwse it can severely damage a system. I think that you have some corruption which could have been caused by combofix or by the virus. Try SFC: http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html

Not to contradict the others but I wouldn't try a restore point when you have a known virus attack because a virus could be hiding in those files. If you are sure that your system is clean IMO you should dump the restore points and create a new one. http://www.vistax64.com/tutorials/76332-system-restore-point-create.html In the window shown if you uncheck the box and hit apply the restore points will be deleted but don't forget to turn it back on.

sabrinaguth81 · Apr 3, 2012

Hello townsbg!
I have never used ComboFix before. I found a Guide on how to remove Malware and simply followed it.

Maximum PC | Malware Removal Guide 2011: How to Get Rid of All The Latest Malware - Page 2

After all that it told me that I have a corrupt file and that I can find it in C:/Windows/Logs/CBS/CBS.log But I don't have access to open that file. How can I find out now which file is corrupt and how can I fix it?
After all I was able to turn my Security Center back on. Now, Windows Firewall I still can't turn on, nor can I run the Windows Updates as they fail. All the scans show that they didn't find anything infected on my computer and I have no more issues with Pop-Ups, but yet, my computer is very slow. What should I do next to get my computer back to running normal? And is there any other Anti Virus out there, that is recommended? We spend lots of time browsing on the internet and I'm afraid that Microsoft Security Essentials and Malwarebytes isn't enough. I had AVG Internet Security Business Edition 2012 installed and never had a problem before. But now I keep reading about the AVG Antivirus Virus!

Yard Dog · Apr 3, 2012

You need to use the Elevated Command prompt as indicated in the SFC tutorial.

ilikefree · Apr 3, 2012

townsbg said:
You used combofix? That should only be used by someone highly trained in it's use otheriwse it can severely damage a system. I think that you have some corruption which could have been caused by combofix or by the virus. Try SFC: http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html

Not to contradict the others but I wouldn't try a restore point when you have a known virus attack because a virus could be hiding in those files. If you are sure that your system is clean IMO you should dump the restore points and create a new one. http://www.vistax64.com/tutorials/76332-system-restore-point-create.html In the window shown if you uncheck the box and hit apply the restore points will be deleted but don't forget to turn it back on.

I agree with all of this. I would never use a restore point on an infected computer.
Delete all old restore points and start fresh, but only after you fix the problem with security.
With luck the SFC scan will fix things for you.
Don't forget the restart after running sfc as sometimes it is unable to repair files that are in use.

townsbg · Apr 3, 2012

Not being able to acces the cbs log is a common problem. To get access you need to take ownership: http://www.vistax64.com/tutorials/67717-take-ownership-file.html

If vista won't let you take ownership follow this tutorial: http://www.vistax64.com/tutorials/130137-cannot-rename-move-file-folder-vista-fix.html

Combofix like Hijackthis is a very powerful tool but if used incorrectly it could render your computer inoperable. Only use either when instructed by an expert.

firstcomp · Mar 21, 2013

System restore has the potential to hold viruses that you just removed. Depending on the date of the restore point and the date you contracted a virus. After removing the malware the system restore points need to be cleared, then create a new clean restore point.

Ex_Brit · Mar 21, 2013

Yes, it stands to reason after using System Restore to get rid of an infection that one should temporarily disable System Restore to clean the infected restore point. Sorry I should have spelled that out although it should be pretty obvious I would have thought.

Anyway, the thread is a year old. But good that you pointed that out, thanks.

After malware attack I can't turn security center and windows defender on!

Attachments

My Computer

If you're going through hell, keep going

My Computer

My Computer

My Computer

My Computer

If you're going through hell, keep going

My Computer

My Computer

My Computer

~~тσωηsвg~~

My Computers

My Computer

My Computer

My Computer

~~тσωηsвg~~

My Computers

New Member

My Computer

If you're going through hell, keep going

My Computer

тσωηsвg

тσωηsвg