[Nutloaf]

Hello Galaxy.

We will attempt to repair Windows services this post. Run the tool and tell me if resolved


1. Tweaking.com Windows Repair

• Use this link to download Tweaking.com Windows Repair Click the Direct Download link and save to Desktop.
• Run the installer, follow the prompts and the program will open.
• Click on the Step 3: Optional tab and click Do It to run System File Checker. The CMD window will open and begin the scan.
• Once complete, click the Step 4 tab and under System Restore click Create
• Once complete, click the Start Repairs tab, then click Start
• Click Unselect All then select the following from the image. Click image to Enlarge.
  
  
  
• On the right of the window check the Restart/Shutdown system when finished box an select Restart System
• Now click start. Windows will restart.

[Advertisements]

1st, security centre still refuses to start
2nd, man, there is a [bleep] of a lot of log files. which ones do you want/need?

cheers mate

[GalaxyOne]

1st, security centre still refuses to start
2nd, man, there is a [bleep] of a lot of log files. which ones do you want/need?

cheers mate

[Nutloaf]

O.K post what you have. It would be easier for yourself to attach the files instead of pasting.

When posting simply click - choose file - then Attach file. The amount is for me to worry about, I only want logfiles that Tweaking produced.

This is strange as all the regular checks have failed. I noticed in the logs that it may be an issue with a Harddrive, so I will look into this also next post to ensure that it's o.k.

In the meantime I would like to make sure the registry is set correctly so peform this OTL scan. The logfile should pop up quickly and is small so O.K to paste in your reply.

OTL Custom Scan

• Right click the OTL icon and select Run as Administrator.
• There are 8 None boxes please check all 8.
• Copy and paste the following into the Custom Scans\Fixes box without the word Quote.
  

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center /s /64
  

• Now Click Run Scan
• OTL will now scan your computer and produce a log file OTL.txt
• Please post in your next reply

P.S best be careful what words you choose as it's a family site

[GalaxyOne]

sorry about that, didn't think it would be picked up as naughty, anyway, heres those log files. will post the OTL log after these.
cheers

Attached Files

•  _Windows_Repair_Log.txt   4.37KB   150 downloads
•  Repair_Icons.txt   624bytes   147 downloads
•  Repair_MSI_Windows_Installer.txt   480bytes   150 downloads
•  Repair_Windows_Firewall.txt   2.09KB   159 downloads
•  Repair_Windows_Updates.txt   746.47KB   224 downloads
•  Repair_Winsock_and_DNS_Cache.txt   1.82KB   167 downloads
•  Repair_WMI.txt   194.93KB   253 downloads
•  Restore_Important_Windows_Services.txt   2.43KB   143 downloads
•  windows_repair_hkey_classes_root_log_3.txt   1020bytes   174 downloads
•  windows_repair_hkey_classes_root_log_4.txt   1020bytes   132 downloads

[GalaxyOne]

2nd half of log files

Attached Files

•  windows_repair_hkey_current_user_3_log.txt   1.01KB   166 downloads
•  windows_repair_hkey_current_user_4_log.txt   1.01KB   153 downloads
•  windows_repair_hkey_local_machine_3_log.txt   158.88KB   131 downloads
•  windows_repair_hkey_local_machine_4_log.txt   158.88KB   175 downloads
•  windows_repair_hkey_local_machine_currentcontrolset_3_log.txt   51.65KB   346 downloads
•  windows_repair_hkey_local_machine_currentcontrolset_4_log.txt   51.65KB   122 downloads

[GalaxyOne]

OTL log file

OTL logfile created on: 1/03/2014 1:03:56 PM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Store\Desktop\Malware Scanners
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16518)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.78 Gb Total Physical Memory | 1.57 Gb Available Physical Memory | 41.49% Memory free
7.56 Gb Paging File | 4.80 Gb Available in Paging File | 63.48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 279.45 Gb Total Space | 151.01 Gb Free Space | 54.04% Space Free | Partition Type: NTFS
Drive D: | 394.18 Gb Total Space | 247.85 Gb Free Space | 62.88% Space Free | Partition Type: NTFS
Drive E: | 6.15 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: MANDYS-PC | User Name: Store | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Custom Scans ==========

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center /s /64 >
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

< End of report >

[Nutloaf]

Hi there

That is a lot of scans, I don't normally get to see these as Tweaking usually deals with these issues. I feel there are some missing entries in the registry. The safest way to do this is with the Microsoft Fix for this particular issue.

Microsoft Fix

• Click here to download and run the Microsoft fix - If you get an error message stating the Operating System is incorrect try the next link below.
  
• Use this link if first link fails
  
• Agree to the terms and click next. The fix will run.
  
• Security Center on?

[GalaxyOne]

that's all the information I could get from the fix, still no luck getting Security Centre to start. I appreciate your patience trying to resolve this issue.

PrintMicrosoft Fix it Solution - MicrosoftFixit20084 Publisher details

Issues found
Microsoft Fix it Solution - MicrosoftFixit20084Microsoft Fix it Solution - MicrosoftFixit20084
Microsoft Fix it automated solution Fixed Fixed
Microsoft Fix it Solution - MicrosoftFixit20084 Completed

Microsoft Fix it Solution - MoreOptionMicrosoft Fix it Solution - MoreOption
Microsoft Fix it automated solution Fixed Fixed
Microsoft Fix it Solution - MoreOption Completed


Issues found Detection details

5 Microsoft Fix it Solution - MicrosoftFixit20084 Fixed Fixed

Microsoft Fix it automated solution
Microsoft Fix it Solution - MicrosoftFixit20084 Completed

Microsoft Fix it automated solution

5 Microsoft Fix it Solution - MoreOption Fixed Fixed

Microsoft Fix it automated solution
Microsoft Fix it Solution - MoreOption Completed

Microsoft Fix it automated solution


Detection details Expand

Collection information
Computer Name: MANDYS-PC
Windows Version: 6.1
Architecture: amd64
Time: Sunday, March 02, 2014 9:12:58 AM

Publisher details Expand

More support options and survey
Look for more support options or participate in a survey to provide feedback to Microsoft about this automated fix.
Package Version: 1.0
Publisher: Microsoft Corporation
Microsoft Fix it Solution - MicrosoftFixit20084
Microsoft Fix it automated solution
Package Version: 1.0
Publisher: Microsoft Corporation
Microsoft Fix it Solution - MicrosoftFixit20084
Microsoft Fix it automated solution
Package Version: 1.0
Publisher: Microsoft Corporation

[GalaxyOne]

just out of interest, if I try to start Windows Security Centre via the Services page, I set it to Automatic, apply, start, it will start but then reports that Windows Defender is now turned off. It (Windows Security Centre)runs for 10 seconds or so, but then just turns itself off again and I end up back at square one.

[Nutloaf]

Thanks for the info.

The fixes I have supplied by myself were to set the Security Centre to Automatic startup and the registry key set to it's default which is Security Centre on. Something else is switching this off. Try this before I look any further:

Seeing as you have been to the Services page can you set Windows Defender start up to Disabled

Just in case: Right click the Windows Defender service. Select Properties and select Disabled as startup type. Click Apply then O.K Now reboot the PC. Next:

I want you to disable your Antivirus. See here for instructions

Now start the Security Centre Service and tell me what happens O.K

[GalaxyOne]

well, I did all that then got this error message,

The Security Centre service on Local Computer started and then stopped. some services stop automatically if they are not in use by other services or programs.

I tried a second time and got,

Error 1058: the service cannot be started because it is disabled or because it has no enabled devices associated with it.

If I try to re-enable my AV, then Security centre turns off pretty much straight away (after starting it again)

If worst comes to worst, I think I will just do a factory reset, but it nags me that this issue is really being difficult to solve.

cheers

PS. Win Defender was already disabled

Edited by GalaxyOne, 02 March 2014 - 02:08 AM.

[GalaxyOne]

just out of interest, I tried HitmanPro. Here's the log file. found 1 malware item but didnt fix my issue.

HitmanPro 3.7.9.212
www.hitmanpro.com

   Computer name . . . . : MANDYS-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : MANDYS-PC\Store
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Trial (30 days left)

   Scan date . . . . . . : 2014-03-02 18:00:43
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 8m 30s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : Yes

   Threats . . . . . . . : 1
   Traces  . . . . . . . : 2

   Objects scanned . . . : 1,544,921
   Files scanned . . . . : 30,290
   Remnants scanned  . . : 483,192 files / 1,031,439 keys

Malware _____________________________________________________________________

   C:\Windows\SysWOW64\netbios2.dll -> Quarantined
      Size . . . . . . . : 303,104 bytes
      Age  . . . . . . . : 173.2 days (2013-09-10 13:07:40)
      Entropy  . . . . . : 6.5
      SHA-256  . . . . . : F979BD6CA9362BF589FE5CD493EB7F1E99A068638F7833EE532780679AA964B5
    > Bitdefender  . . . : Gen:Variant.Symmi.25595
      Fuzzy  . . . . . . : 115.0
      Startup
         C:\Windows\Tasks\pbripoh.job

[GalaxyOne]

Eureka!! I think I have solved the problem. The HitmanPro log got me thinking. It mentioned that the user name was MANDYS-PC\store. In the Services area, when you select, Security centre, properties, there is a tab for Log-on. i tried using the new name and re-entered the password. (I noticed it was 1 letter shorter than normal) anyway, that failed, so I put it back to Local Services and put the PW in again (1 letter shorter again) BINGO!, everything started working again. Might have been a password issue all along. Have put Win Defender back to Auto. Will download Microsoft Security Essentials. Have rebooted just to make sure is running correctly, so far so good. will keep you posted.

Cheers

[Nutloaf]

The password and a scan with ESET was my next port of call. I couldn't think of anything else as we had tried all the regular fixes for this issue. This would have told me if your user account was corrupt........so good news!!

just out of interest, I tried HitmanPro

Please don't use this tool, we have experienced problems with this before causing machines to be unbootable. Only use the tools I give you ok



Let's carry with the malware removal

I will discuss your security programs next post. If you have already installed MSE then fine but I can recommend security software with you and what should be running.


1. UPDATE AND RUN MALWAREBYTES

• Open Malwarebytes select the Updates Tab - Select Check for Updates and click O.K
• Once complete click the Scanner Tab and select Perform quick scan
• The scan will take a few minutes. Once complete click O.K and Show Results
• Make sure anything found is checked and click Remove Selected
• A reboot may be needed please proceed if asked.
• If a reboot was needed the log is automatically saved by MBAM and can be viewed by clicking the Logs Tab then Open Log I need to see this.

2. ESET SCAN ONLY

You will need to disable your currently installed Anti-Virus, how to do so can be read here.


IMPORTANT - Vista / Win7 users: Right-click on the either the IE or FF icon in the Start Menu, Quick Launch Bar or the Taskbar and select Run as Administrator. For Taskbar right click IE then right click the IE icon that appears.

If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.

Now use this link to run an online scan with the ESET Online Scanner

• Click the green ESET Online Scanner box
• Tick the box next to YES, I accept the Terms of Use
  then click on: Start
• You may see a panel towards the top of the screen telling you the website wants to install an addon... click and allow it to install. If your firewall asks whether you want to allow installation, say yes.
• Uncheck the Remove Found Threats box. I want to check the results first as ESET may remove a false positive
• Make sure that the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Click on Start
• The virus signature database will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically. The scan may take several hours.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you copy the logfile
• Then click on: Finish
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste the log in your next reply.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!


Things I want to see in your next post.

• Malwarebytes results
• ESET results
• How are things running now, browsers ok?

[Nutloaf]

Addition to the above post

In the above post the ESET log file will actually be found at:

C:\Program Files (x86)\ESET\EsetOnlineScanner\log.txt.

My mistake sorry