[RinAldrin]

Recently my computers were hit with a Trojan known as win64/sirefef I have as of now successfully removed it but at the moment my windows firewall is currently in the red saying in need to update the settings but giving me a 0x80070424 error when I click the button. The action center icon is also missing from the task bar and when I look to revive it the button is greyed out. Lastly from what I can currently find the home group between my 2 computers will not connect (both computers have the issues since both caught it however desktop was not hit as bad as laptop). Info on both systems is posted bellow please offer any assistance as soon as it is possible.

Desktop:
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, Intel64 Family 6 Model 30
Stepping 5
Processor Count: 4
RAM: 6103 Mb
Graphics Card: NVIDIA GeForce GT 220, 1024 Mb
Hard Drives: C: Total - 942369 MB, Free - 5404 MB; D: Total - 11396 MB, Free
- 1647 MB; E: Total - 1430795 MB, Free - 4586 MB;
Motherboard: MSI, IONA
Antivirus: Microsoft Security Essentials, Updated and Enabled

Laptop:
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM)2 Quad CPU Q9000 @ 2.00GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 4
RAM: 4063 Mb
Graphics Card: ATI Mobility Radeon HD 4650, 1024 Mb
Hard Drives: C: Total - 461434 MB, Free - 15553 MB; D: Total - 476936 MB, Free - 150889 MB; E: Total - 15303 MB, Free - 2199 MB;
Motherboard: Hewlett-Packard, 3624
Antivirus: Microsoft Security Essentials, Updated and Enabled

[RinAldrin]

Update I got the base service engine running again but now when i try to start the firewall service it says "Windows could not start firewall on Local computer for more information view the system event log. If this a non-Microsoft service, contact the service vendor, and refer to service-specific error code 5"
and the log is
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7024</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-07-17T21:02:45.098871100Z" />

<EventRecordID>867270</EventRecordID>

<Correlation />

<Execution ProcessID="628" ThreadID="5468" />

<Channel>System</Channel>

<Computer>UserLaptop-PC</Computer>

<Security />

</System>


- <EventData>
<Data Name="param1">Windows Firewall</Data>

<Data Name="param2">%%5</Data>

</EventData>


</Event>

[flavallee]

If you decide that you need help in the Virus & Other Malware Removal section, you will need to read the topmost "sticky" and then submit the required logs and information.

You will also need to start a separate thread there for each computer because multiple computers cannot be dealt with in the SAME thread.

----------------------------------------------------------

[RinAldrin]

okay thank you

[flavallee]

You're welcome, and good luck.

--------------------------------------------------------

[RinAldrin]

Well this thread is gonna end up being for laptop cause I have realized my computer is clean but I am trying to repair what damage happened to computers as it got removed

[RinAldrin]

Update laptop is supposedly clean and firewall is running but still having issues with the action center icon and desktop is still unchanged mostly cause the fix for the laptop ended up wiping all the rules for it