Trojaner-Board - Win7 Firewall lässt sich nicht starten

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Win7 Firewall lässt sich nicht starten (https://www.trojaner-board.de/143673-win7-firewall-laesst-starten.html)

Nun kannste FSS nochmal machen, aber richtig bitte

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Jup kein problem

Code:

Farbar Service Scanner Version: 24-10-2013

Ran by Lucchini (administrator) on 01-11-2013 at 16:26:18

Running from "C:\Users\Lucchini\Downloads"

Microsoft Windows 7 Professional  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys

[2013-10-10 12:17] - [2013-09-14 02:10] - 0497152 ____A (Microsoft Corporation) 314C17917AC8523EC77A710215012A65
 

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys

[2013-10-10 12:17] - [2013-09-08 03:30] - 1903552 ____A (Microsoft Corporation) 40AF23633D197905F03AB5628C558C51
 

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll => MD5 is legit

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll => MD5 is legit

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\System32\ipnathlp.dll => MD5 is legit

C:\Windows\System32\iphlpsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Bitte schön

Dir Windows-Firewall ist nur inaktiv. Kannst du sie jetzt wieder einschalten?

Wenn ich auf die Firewall klicke steht: Die Windows-Firewall kann nicht aktiviert werden.
ich soll se manuell aktivieren und das geht nicht

bei der erweiterten kommt dann die meldung:
beim öffnen des snap-ins windows-firewall mit erweiterter sicherheit ist ein fehler aufgetreten

Das Snap-In "Windows-Firewall mit erweiterter Sicherheit" konnte nicht geladen werde. Starten sie den Windows-Firewalldinest auf dem von ihnen Verwalteten Computer neu. Fehlercode.0x6D9

Starte mal bitte regedit über Wintaste+R (ausführen)

Navigiere nach

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

Such dann im rechten Teilfenster nach "EnableFirewall" - den doppelklicken und den Wert von 0 auf 1 ändern.

Probier dann mal die Windows-Firewall wieder zu starten

Neues Log mit FSS bitte

Code:

Farbar Service Scanner Version: 24-10-2013

Ran by Lucchini (administrator) on 01-11-2013 at 17:50:21

Running from "C:\Users\Lucchini\Downloads"

Microsoft Windows 7 Professional  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys

[2013-10-10 12:17] - [2013-09-14 02:10] - 0497152 ____A (Microsoft Corporation) 314C17917AC8523EC77A710215012A65
 

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys

[2013-10-10 12:17] - [2013-09-08 03:30] - 1903552 ____A (Microsoft Corporation) 40AF23633D197905F03AB5628C558C51
 

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll => MD5 is legit

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll => MD5 is legit

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\System32\ipnathlp.dll => MD5 is legit

C:\Windows\System32\iphlpsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Nö aber ich hab das jetzt mal gemacht mal schauen was das tool am ende sagt

Edit

Code:

Starting Repairs...

   Start (01.11.2013 18:24:38)
 

01 - Reset Registry Permissions 01/03

   HKEY_CURRENT_USER & Sub Keys

   Start (01.11.2013 18:24:38)

   Running Repair Under Current User Account

   Done (01.11.2013 18:24:49)
 

01 - Reset Registry Permissions 02/03

   HKEY_LOCAL_MACHINE & Sub Keys

   Start (01.11.2013 18:24:49)

   Running Repair Under System Account

   Done (01.11.2013 18:26:52)
 

01 - Reset Registry Permissions 03/03

   HKEY_CLASSES_ROOT & Sub Keys

   Start (01.11.2013 18:26:52)

   Running Repair Under System Account

   Done (01.11.2013 18:27:30)
 

03 - Register System Files

   Start (01.11.2013 18:27:30)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:27:50)
 

04 - Repair WMI

   Start (01.11.2013 18:27:50)

   Running Repair Under Current User Account

   Done (01.11.2013 18:31:16)
 

05 - Repair Windows Firewall

   Start (01.11.2013 18:31:16)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:32:05)
 

06 - Repair Internet Explorer

   Start (01.11.2013 18:32:05)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:32:29)
 

07 - Repair MDAC/MS Jet

   Start (01.11.2013 18:32:29)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:32:38)
 

08 - Repair Hosts File

   Start (01.11.2013 18:32:38)

   Running Repair Under System Account

   Done (01.11.2013 18:32:40)
 

09 - Remove Policies Set By Infections

   Start (01.11.2013 18:32:40)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:32:45)
 

10 - Repair Missing Start Menu Icons Removed By Infections

   Start (01.11.2013 18:32:45)

   Running Repair Under System Account

   Done (01.11.2013 18:32:47)
 

11 - Repair Icons

   Start (01.11.2013 18:32:47)

   Running Repair Under System Account

   Done (01.11.2013 18:32:50)
 

12 - Repair Winsock & DNS Cache

   Start (01.11.2013 18:32:50)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:03)
 

13 - Remove Temp Files

   Start (01.11.2013 18:33:03)

   Running Repair Under System Account

   Done (01.11.2013 18:33:05)
 

14 - Repair Proxy Settings

   Start (01.11.2013 18:33:05)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:10)
 

16 - Repair Windows Updates

   Start (01.11.2013 18:33:10)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:30)
 

17 - Repair CD/DVD Missing/Not Working

   Start (01.11.2013 18:33:30)

   Done (01.11.2013 18:33:30)
 

18 - Repair Volume Shadow Copy Service

   Start (01.11.2013 18:33:30)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:39)
 

20 - Repair MSI (Windows Installer)

   Start (01.11.2013 18:33:39)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:52)
 

22.01 - Repair bat Association

   Start (01.11.2013 18:33:53)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:33:57)
 

22.02 - Repair cmd Association

   Start (01.11.2013 18:33:57)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:02)
 

22.03 - Repair com Association

   Start (01.11.2013 18:34:02)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:07)
 

22.04 - Repair Directory Association

   Start (01.11.2013 18:34:07)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:11)
 

22.05 - Repair Drive Association

   Start (01.11.2013 18:34:11)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:16)
 

22.06 - Repair exe Association

   Start (01.11.2013 18:34:16)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:21)
 

22.07 - Repair Folder Association

   Start (01.11.2013 18:34:21)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:26)
 

22.08 - Repair inf Association

   Start (01.11.2013 18:34:26)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:30)
 

22.09 - Repair lnk (Shortcuts) Association

   Start (01.11.2013 18:34:30)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:35)
 

22.10 - Repair msc Association

   Start (01.11.2013 18:34:35)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:40)
 

22.11 - Repair reg Association

   Start (01.11.2013 18:34:40)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:45)
 

22.12 - Repair scr Association

   Start (01.11.2013 18:34:45)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:50)
 

23 - Repair Windows Safe Mode

   Start (01.11.2013 18:34:50)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:34:54)
 

24 - Repair Print Spooler

   Start (01.11.2013 18:34:54)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:35:09)
 

25 - Restore Important Windows Services

   Start (01.11.2013 18:35:09)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:35:19)
 

26 - Set Windows Services To Default Startup

   Start (01.11.2013 18:35:19)

   Running Repair Under Current User Account

   Running Repair Under System Account

   Done (01.11.2013 18:35:44)
 

Cleaning up empty logs...
 

All Selected Repairs Done.

   Done (01.11.2013 18:35:44)

   Total Repair Time: 00:11:06
 
 

...YOU MUST RESTART YOUR SYSTEM...

   Running Repair Under Current User Account