Author Topic: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED  (Read 23519 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #30 on: November 04, 2011, 08:21:19 PM »
I would like you to try this:

1. Click Start Menu and in the Instant Search type "cmd" once it appears right-click and choose  Run as administrator.
 
 Security note: If UAC is enabled, then you’ll get a UAC prompt on screen. Please specify credentials or permission to pass the UAC elevation.

2. In the command prompt type Netsh firewall set opmode enable and press Enter.

The above command-line based input is to re-enable the Windows® Firewall.

MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #31 on: November 05, 2011, 01:41:49 AM »
The message I am getting is:

IMPORTANT: "netsh firewall" is deprecated;
use "netsh advfirewall firewall" instead.

The service has not been started

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #32 on: November 05, 2011, 01:51:31 PM »
Could you go to control panel > Admin tools > services
Locate Windows Firewall
Right click and ensure it is set to automatic and is started - If not set it to be that
Then select the dependencies tab and let me know of any errors there

MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #33 on: November 05, 2011, 01:57:45 PM »
I clicked start and mid-way during the start i received this message.

Windows could not start the windows firewall on local computer. For more information, review the system event log. If this is a non-Microsoft service, conact the service vendor, and refer to service-specific error code 1753

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #34 on: November 05, 2011, 02:04:37 PM »
Try the MSFixit here and let me know the result http://support.microsoft.com/kb/943996

MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #35 on: November 05, 2011, 02:21:20 PM »
Nothing changed, The windows firewall is unable to start and then once it is done the program wants me to go to some troubleshooter to find addtional ways to fix the issue

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #36 on: November 05, 2011, 03:02:18 PM »
OK lets reregister the necessary elements

Perform the following steps and update the computer:
 
1. Click Start, type Notepad in the Start Search box, and then click Notepad in the Programs list.
 
2. Copy the following text, and then paste the text into Notepad:
 
 
Quote
sc config wuauserv start= auto
sc config bits start= auto
sc config DcomLaunch start= auto
net stop wuauserv
net start wuauserv
net stop bits
net start bits
net start DcomLaunch

 
Click File, click Save As, and then type Repair.bat.
 
 
 
3. In the Save as type box, click All Files (*.*).
 
4. In the Save in box, click Desktop, and then click Save.
 
5. On the File menu, click Exit.
 
6. Right -click the Repair.bat file that you saved in step 5, and then click Run as administrator. This action starts the required services. If you are prompted for an administrator password or confirmation, type the password, or click Continue.
 
Try enabling the firewall after these steps.

MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #37 on: November 06, 2011, 06:27:35 PM »
still nothing. I did notice that during the command prompt...dcomlaunch failed and it said access denied

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #38 on: November 06, 2011, 06:32:12 PM »
Go to control panel > administrative tools > Services and ensure that the dcom launcher is started.
If it isn't then put it to auto start and try again


MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #39 on: November 14, 2011, 12:14:34 AM »
The DCOM Launcher is started but Firewall still will not turn on.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #40 on: November 14, 2011, 09:05:21 PM »
Could you right click on dcom and see what dependencies are running


MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #41 on: November 15, 2011, 03:48:15 AM »
I noticed there was a long list of dependencies but Windows Firewall was not there...should I list all of them for you?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #42 on: November 15, 2011, 09:15:49 PM »
No need because if any were broken it would show

Ok next trick

Please run  "services.msc", stop "Windows Event Controller" service first, then make sure "Base Filtering Engine" service is started.

In the Start Menu type devmgmt.msc, and open Device Manager. On the View tab, choose "Devices by connection" and put a check next to "Show hidden devices". Look for Windows Firewall Authorization Driver (it will have a gold gear icon).Double-click that, and on the Driver tab, make sure the Startup type is set to "Demand".

Then start "Windows Firewall" service.

MikeMello

  • Guest
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #43 on: November 19, 2011, 09:33:21 AM »
I did all the steps and when I get upto the part of starting the Windows Firewall, I am getting this message "Action Center can't turn on Windows Firewall"

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32.DNSChanger VJ.Trj VIRUS INFECTION: IMMEDIATE HELP REQUIRED
« Reply #44 on: November 19, 2011, 12:05:22 PM »
Could you run windows repair again (there is an update - so download and install that)

Then select the elements as below