Windows firewall could not turn on...!!!

Golden said:

Follow these instructions:

Windows Genuine and Activation Issue Posting Instructions

And then paste the MGADIAG report here and we'll have a look for you.

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-V9488-FGM44-2C9T3
Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=
Windows Product ID: 00426-OEM-8992662-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {497E74AE-93E1-476E-A19C-842833FCACD5}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7600.win7_gdr.101026-1503
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Enterprise 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{497E74AE-93E1-476E-A19C-842833FCACD5}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2C9T3</PKey><PID>00426-OEM-8992662-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-1825867223-2869065645-579144058</SID><SYSTEM><Manufacturer>BIOSTAR Group</Manufacturer><Model>N68SA-M2S</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="5"/><Date>20100623000000.000000+000</Date></BIOS><HWID>0EBA3607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>India Standard Time(GMT+05:30)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-WKS</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>64BC76978749586</Val><Hash>GW6PzcEVEDTVKeO5Ym5UUm41dBk=</Hash><Pid>89388-707-0441865-65949</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/><App Id="BA" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600010-02-1033-7600.0000-3192011
Installation ID: 018864124115046124122066143716429623808013976986537004
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 2C9T3
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 9/4/2012 8:21:26 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:21:2012 09:52
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAgABAAEAAQABAAAAAQABAAEAeqh0P0AKkgBI0UzHlFpMf5CXUgLI9A==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            Nvidia        NVDAACPI
  FACP            Nvidia        NVDAACPI
  HPET            Nvidia        NVDAACPI
  MCFG            Nvidia        NVDAACPI
  SSDT            PTLTD         POWERNOW
  SLIC            HPQOEM        SLIC-WKS

Now what does this mean...??? Alien lang for me..!!!

NoelDP said:

Unfortunately, it means that you have a counterfeit install of WIndows on there. - and laso what is probably a counterfeit installation of Office.

There is a hacker's Activation Exploit present, to cirumvent activation and validation requirements.

You have a Retail motherboard (from BIOSTAR) - but are attempting to use an OEM_SLP Key for activation.
The Key is from a Hewlett Packard machine.

Whatever else you do, you need to reformat and reinstall Windows using legitimate media and Key - the use of an Activation Exploit opens your system to potential multiple vulnerabilities and threats.

Thanks for the heads up Noel, but as far as I have seen the windows show that it is 100% genuine and I even use MSE which was offered right after the validation. But since you guys are experts what do you suggest me to do now and how? And what is it with my MoBo. Could you please be specific?

vinny1008 said:

Hey guys...
Finally got my windows firewall up and running. I don’t know if the things I do were correct but it got the job done. I was asked by my cousin to follow these steps as he also once faced the same problem. Here are the detailed steps I followed:
-> Used Malwarebytes to scan for infections and removed those which were found.
->Downloaded following file:
-> Base Filtering Engine - Attachment 229894
->Windows firewall - Attachment 229895
->Launched the file and clicked YES at UAC prompt.
->Win+r, type regedit ---- ok
-> go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
-> Right click on BFE ---> Permission
-> Click on ADD and type EVERYONE and click OK
-> Select EVERYONE ---> Below we have permission for users.
-> Select Full Control ----> Apply ----> Ok.
-> win+r and type services.msc and click ok.
-> Search for Base Filtering Engine and double click on it. Start the service and Startup type should be Automatic.
-> Search for Windows Firewall service and follow same steps.
This resolved the issue for my cousin, but not for me.
I still got this error when I tried to start the Windows Firewall service:
Windows could not start Windows Firewall on local computer. See Event Log, if non-windows service, contact vendor, Error code 5.
Then he asked me to download a registry key:
Shared access - Attachment 229896
-> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess
-> Right click on SharedAccess and select Permission
-> Click on Add and type Everyone and click ok.
-> Select Everyone and below give full rights for it as we did for BFE above.
-> Start --->Services.msc ---> Find Windows Firewall and Start the service. Startup type should be Automatic.
This finally did the trick for me. I restarted my system and ran Malwarebytes again. Just to be sure, and no threat was found. I updated the Microsoft Security Essentials and now the system is working fine as before.
Thanks for all the suggestions and support friends. I really appreciate your time and efforts... Cheers...!!!

P.S : I am not sure what all important services should be present on the system in order for windows to work fine. Is there a list of such services that I can refer to?

Thanks Vinny,
I noticed a few days ago that I had no firewall running. While investigating, I found that when running "services" there was no entry for windows firewall, or sharedaccess. Had run a couple of other reg files that already restored BFE and windows firewall services, but your sharedaccess.reg is the only one that worked to restore sharedaccess as a service. I followed your instructions as listed and my firewall service under windows 7 ultimate is finally running. Thanks again.

vinny1008 said:

Hey guys...
Finally got my windows firewall up and running. I don’t know if the things I do were correct but it got the job done. I was asked by my cousin to follow these steps as he also once faced the same problem. Here are the detailed steps I followed:
-> Used Malwarebytes to scan for infections and removed those which were found.
->Downloaded following file:
-> Base Filtering Engine - Attachment 229894
->Windows firewall - Attachment 229895
->Launched the file and clicked YES at UAC prompt.
->Win+r, type regedit ---- ok
-> go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
-> Right click on BFE ---> Permission
-> Click on ADD and type EVERYONE and click OK
-> Select EVERYONE ---> Below we have permission for users.
-> Select Full Control ----> Apply ----> Ok.
-> win+r and type services.msc and click ok.
-> Search for Base Filtering Engine and double click on it. Start the service and Startup type should be Automatic.
-> Search for Windows Firewall service and follow same steps.
This resolved the issue for my cousin, but not for me.
I still got this error when I tried to start the Windows Firewall service:
Windows could not start Windows Firewall on local computer. See Event Log, if non-windows service, contact vendor, Error code 5.
Then he asked me to download a registry key:
Shared access - Attachment 229896
-> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess
-> Right click on SharedAccess and select Permission
-> Click on Add and type Everyone and click ok.
-> Select Everyone and below give full rights for it as we did for BFE above.
-> Start --->Services.msc ---> Find Windows Firewall and Start the service. Startup type should be Automatic.
This finally did the trick for me. I restarted my system and ran Malwarebytes again. Just to be sure, and no threat was found. I updated the Microsoft Security Essentials and now the system is working fine as before.
Thanks for all the suggestions and support friends. I really appreciate your time and efforts... Cheers...!!!

P.S : I am not sure what all important services should be present on the system in order for windows to work fine. Is there a list of such services that I can refer to?

Thanks ! This done the trick for me!!!!!!
Working!!!!

Thank you so much Vinny1008. I had tried everything to no avail. The Shared Access reg done the trick for me.