Firewall problems after Security Shield 2012 Removal

[BrewMeister]

Help...:blush:

 

[BrewMeister]

Well as I read through some of the other threads, I noticed almost all were requested to run COMBOFIX and upload the log. So I did that.
And SHAZAAM! The firewall is on!
Don't see any other abnormalities, although I'm not sure what I should be looking for...
Any further recommendations?

 

[Jack]

Hello,
Can you please run the below scans:
STEP 1. Run a scan with Kaspersky Virus Removal Tool
Click <a title="External link" href="http://www.kaspersky.com/antivirus-removal-tool?form=1" rel="nofollow external" rel="nofollow"><>here</></a> to download the Kaspersky Virus Removal Tool.
<ol>
<li>Save it to your desktop.</li>
<li>Double click the setup file to run it.</li>
<li>Follow the onscreen prompts until it is installed</li>
<li>Click the Options button (the 'Gear' icon), then make sure only the following are ticked:
<ul>
<li><span style="color: #ff0000;">System Memory</span></li>
<li><span style="color: #ff0000;">Hidden startup objects</span></li>
<li><span style="color: #ff0000;">Disk boot sectors</span></li>
<li><span style="color: #ff0000;">Local Disk (C: )</span></li>
<li><span style="color: #ff0000;">Also any other drives (Removable that you may have)</span></li>
</ul>
</li>
<li>Then click on <>Actions</> on the left hand side</li>
<li>Click <>Select Action</>, then make sure both <>Disinfect</> and <>Delete if disinfection fails</> are ticked</li>
<li>Click on <>Automatic Scan</></li>
<li>Now click the <>Start Scanning</> button, to run the scan</li>
<li>After the scan is complete, click the reports button ('Paper icon', next to the 'Gear' icon) on the right hand side</li>
<li>Click <>Detected threats</> on the left</li>
<li>Now click the <>Save</> button, and save it as <>kaslog.txt</> to your <[b]>Desktop</[b]></li>
<li>Please attach kaslog.txt in your next reply.</li>
</ol>
<hr />
[SIZE=4]STEP 2. Run a scan with ESET Online Scanner[/SIZE]
<ol>
<li>Download ESET Online Scanner utility.
<[b]><a title="External link" href="http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" rel="nofollow">ESET Online Scanner Download Link</a></[b]> <em>(This link will automatically download ESET Online Scanner on your computer.)</em></li>
<li>Double click on the Eset installer program (esetsmartinstaller_enu.exe).</li>
<li>Check <[b]>Yes, I accept the Terms of Use</[b]></li>
<li>Click the <[b]>Start</[b]> button.</li>
<li>Check <[b]>Scan archives</[b]></li>
<li>Push the <[b]>Start</[b]> button.</li>
<li>ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.</li>
<li>When the scan completes, push <[b]>List of found threats</[b]></li>
<li>Push <[b]>Export to Text file </[b]> and save the file to your desktop using a unique name, such as <[b]>ESET Scan</[b]>. Include the contents of this report in your next reply.Note - when ESET doesn't find any threats, no report will be created.</li>
<li>Push the <[b]>back</[b]> button.</li>
<li>Push <[b]>Finish</[b]></li>
</ol>
<hr />
[SIZE=4]STEP 3: Download and run OTL[/SIZE]
<ol><li>Download the OTL utility using the below link :
<[b]><a title="External link" href="http://oldtimer.geekstogo.com/OTL.exe" rel="nofollow external">OTL DOWNLOAD LINK</a> <em>(This link will automatically download OTL on your computer)</em></[b]></li>
<li>Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
<img src="http://malwaretips.com/blogs/wp-content/uploads/2012/07/OTL-logo.png" alt="" title="OTL-logo" width="106" height="118" class="alignnone size-full wp-image-3946" /></li>
<li>When the window appears, <[b]>underneath Output</[b]> at the top change it to <[b]>Minimal Output</[b]>.</li>
<li>Check the boxes beside <[b]>LOP Check</[b]> and <[b]>Purity Check</[b]>.</li>
<li>Under the [b]Custom Scan box paste this in:

%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
CREATERESTOREPOINT

</li>
<li>Click the<> Run Scan</[b]> button.</li>
<li>When the scan completes, it will open two notepad windows. <[b]>OTL.Txt</[b]> and <[b]>Extras.Txt</[b]>. These are saved in the same location as OTL.
<[b]>Please post this 2 logs in your first reply.</[b]>.</li></ol>
<em>Note: If OTL.exe will not run, it may be blocked by malware. Try these alternate versions: <a title="External link" href="http://www.itxassociates.com/OT-Tools/OTL.scr" rel="nofollow external">OTL.scr</a>, or <a title="External link" href="http://oldtimer.geekstogo.com/OTL.com" rel="nofollow external">OTL.com</a>.</em>
<hr />
[SIZE=5][b]What's next?

Attach the following logs to your post (You can find [b]herehttp://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072 details on how to use the Attachment System):

1.Kaspersky log
2.ESET log
3.OTL logs
4.Let me know if you had any problems with the above instructions and also let me know how things are running now!
[/SIZE]