Windows firewall could not turn on...!!!

vinny1008 · 03 Sep 2012

Hi all!
Since last couple of days I am facing trouble in enabling Windows Firewall on my machine which uses Windows 7 Ultimate x64 as the Operating System. It all started with an error that I received while using Internet Download Manager v6.11 regarding Base Filtering Engine. I googled the error and found a fix for the said problem and fixed it in no time. Just out of curiosity I read the post further and found that there could be some other services that might not be working properly, so I checked for the same and was shocked to realize that the windows firewall was not working. Its start up type was ‘automatic’ however the status showed ‘stopped’. When I tried to start the service I got following error:
Windows could not start the Windows Firewall on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service- specific error code 5.
Now I read a couple of posts and they said various things about being attacked by some malware or Trojan etc. I use Microsoft Security Essential as anti-virus and scanned the entire computer. It found more than a dozen of Trojans and some hack related viruses which it very smartly handled. I also used Malwarebyte and found at least 100 of infections. I don’t know if I did good or not, I removed them all. Then gain I tried to start the Windows Firewall service after I restarted my system, yet again it gave me the same error that it could not start. When I try to start the Firewall from Action Centre it gives me an error 0x6d9. I have tried a lot of things like fix-it by Microsoft and tried to clean up registry errors using ccleaner. But nothing seems to have worked. Please help as I am too afraid to use the internet on my affected system without firewall being enabled.

Regards,
Vinny

marsmimar · 04 Sep 2012

Hello Vinny and welcome to Seven Forums.

Couple of things you can try. If you have a restore point that goes back to before the initial problems, try restoring your computer to that date/time.

System Restore

You could also see if your machine has any damaged or corrupt system files by running a system file checker scan from an elevated command prompt (option two.) If problems are found run the scan 3 times rebooting in between each scan.

SFC /SCANNOW Command - System File Checker

MSE is good, but no anti-malware product is 100% effective 100% of the time. If there was such a product we'd all be using it. Here are a few more free scanning tools recommended on this Forum.

Malwarebytes

Hitman Pro

SuperAntispyware

Comodo Cleaning Essentials

Windows Defender Offline

vinny1008 · 04 Sep 2012

Hi Marsmimar. Thanx for the reply.
Have initiated sfc/scannow will let you know the results as soon as it finishes. 3 times...

Kaktussoft · 04 Sep 2012

Win7 Firewall won't turn on error code 0x6D9 and error code 0x80070424
https://blogs.technet.com/b/asiasupp...edirected=true

vinny1008 · 04 Sep 2012

Hi Kaktussoft. Already followed the steps mentioned in the links, but no success. Firewall didn't start. I am running sfc/scannow right now. will post the results as soon as its done.

vinny1008 · 04 Sep 2012

Hi Marsmimar! Ran the sfc scannow... attaching screen shot for the result..

created a cbs file in the end.... unable to open as get error 'Access Denied'... screen shot attachedAttachment 229855

Attachment 229856

What should i do now...??

Attaching sfc result file... got to know how to read the file...

sfcdetails.txt

Kaktussoft · 04 Sep 2012

This seams to be the solution Repair Windows Firewall
v1.7.3
Updated the Repair Windows Firewall. It now restores the reg keys for the BFE, MPSSVC and WSCSVC services. Before it only put back the shared access service. Which in XP is all the firewall needed. But in Vista and 7 it required more services. They are now part of the repair

karlsnooks · 04 Sep 2012

vinny,

First lets make sure that your system is truly clean.

The only method to accomplish such is with an OFFLINE malware remover.

Malware writers are very clever, but if your Win 7 doesn't run, then the malware doen't run.

With an OFFLINE scanner, Win 7 is never started. You boot up the offline scanner from either a USB stick or a DVD. The scanner is self-sufficient and needs nothing from the win 7 on your disk.

There is such a wonder product. Here is how to use this product:

HOW TO USE MICROSOFT'S OFFLINE MALWARE REMOVER
Windows Defender Offline
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
· is a free standalone, bootable malware and virus remover from Microsoft.

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.

INSTALLATION:
· Requires an Internet Connection.
· Insert 512 mB or larger USB stick into a usb port.
· Run the downloaded program--mssstool64.exe or mssstool32.exe
· NEXT button
· Choose the option On a USB flash drive that is not password protected
· NEXT button
· NEXT button
.
The install program will:
· format the usb stick using the NTFS format.
· download less than 230 mB.
· name the USB stick WDO_Media32 or WDO_Media64
· use less than 300 mB.

How to UPDATE the Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download less than 65 mB.

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.

shawn77 · 04 Sep 2012

sfc /scannow will not help you because here you are missing registry keys

Windows Firewall damaged by 'Windows 7 antivirus 2012'

vinny1008 · 04 Sep 2012

Hey guys...
Finally got my windows firewall up and running. I don’t know if the things I do were correct but it got the job done. I was asked by my cousin to follow these steps as he also once faced the same problem. Here are the detailed steps I followed:
-> Used Malwarebytes to scan for infections and removed those which were found.
->Downloaded following file:
-> Base Filtering Engine - BFE.reg
->Windows firewall - MpsSvc.reg
->Launched the file and clicked YES at UAC prompt.
->Win+r, type regedit ---- ok
-> go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
-> Right click on BFE ---> Permission
-> Click on ADD and type EVERYONE and click OK
-> Select EVERYONE ---> Below we have permission for users.
-> Select Full Control ----> Apply ----> Ok.
-> win+r and type services.msc and click ok.
-> Search for Base Filtering Engine and double click on it. Start the service and Startup type should be Automatic.
-> Search for Windows Firewall service and follow same steps.
This resolved the issue for my cousin, but not for me.
I still got this error when I tried to start the Windows Firewall service:
Windows could not start Windows Firewall on local computer. See Event Log, if non-windows service, contact vendor, Error code 5.
Then he asked me to download a registry key:
Shared access - SharedAccess.reg
-> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess
-> Right click on SharedAccess and select Permission
-> Click on Add and type Everyone and click ok.
-> Select Everyone and below give full rights for it as we did for BFE above.
-> Start --->Services.msc ---> Find Windows Firewall and Start the service. Startup type should be Automatic.
This finally did the trick for me. I restarted my system and ran Malwarebytes again. Just to be sure, and no threat was found. I updated the Microsoft Security Essentials and now the system is working fine as before.
Thanks for all the suggestions and support friends. I really appreciate your time and efforts... Cheers...!!!

P.S : I am not sure what all important services should be present on the system in order for windows to work fine. Is there a list of such services that I can refer to?