System config utility reset itself to selective startup always/ firewall will not start

[neurodc2000]

I have run the Malwarebytes tool. However I continue to have the following problems:

I am unable to start my windows xpp firewall.

My system config utility continues to reset itself to selective startup after I change it to normal startup.

At times my virus protection is turned off when i start the computer.

There are times when my computer will just shut down on it's own or close my browser and open another.

dds.txt

attach.txt

[Maurice Naggar]

Hello neurodc2000 and welcome to MalwareBytes forums.

Please advise if you have resolved all issues. If not, do the following.

And be advised the likelyhood of this having a rootkit or bootkit is high due to having no firewall.

These steps are for neurodc2000 only. If you are a casual viewer, do NOT try this on your system!

The fixes in this Topic are for this system only! Do not apply the fix-instructions from this topic to any other System!

If you are a casual viewer, do NOT try this on your system!

If you are not the originating-member-poster and have a similar problem, do NOT post here; start your own topic.

Do not run or start any other programs while these utilities and tools are in use!

Do NOT run any other tools on your own or do any fixes other than what is listed here.

If you have questions, please ask before you do something on your own.

But it is important that you get going on these following steps.

Close any of your open programs while you run these tools.

You will want to print out or copy these instructions to Notepad for Safe offline reference!

Please follow my guidance. Ask if you have questions.

IF this is a laptop (notebook) pc, connect it to wall-AC power or UPS system.

Do not do any websurfing on this system. Only go to this forum and the sites I guide you to for tools or online scans.

Close and save any open documents, and exit programs that you started.

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

Set Windows to show all files and all folders.

On your Desktop, double click My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.

"CHECK" (turn on) Display the contents of system folders.

Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.

Next, un-check Hide extensions for known file types.

Next un-check Hide protected operating system files.

Step 3

If you have a previous copy of TDSSKILLER.exe, delete it.

I am going to ask you to read very carefully. I am asking you to download to unique folder !!

Download TDSSKiller.exe and SAVE it to a special folder

>> from Here <<

and be sure to SAVE it in this folder --> C:\Program Files\Malwarebytes' Anti-Malware\Chameleon

Step 4

Step 3. Install the Chameleon driver by doing the following:

Press the Windows key + R and in the Run box, copy and paste the following command then press Enter. Copy All of the line from beginning to end {from the double-quote ...all the way to the last o ......ALL

"C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\mbam-chameleon.exe" /o

A black DOS prompt will appear with a prompt to press any key to continue, please do.

Step 5 run TDSSKILLER

Please read carefully and follow these steps.

• Double-Click on TDSSKiller.exe to run the application, then on Start Scan.
  If running Vista or Windows 7, do a RIGHT-Click and select Run as Administrator to start TDSSKILLER.exe.
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
  

Please Copy & Paste that log in reply.

There will be a lot more to do.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!