Windows 7: Windows firewall, Norton 360, 0x6D9

jamd315 · 09 Oct 2013

My firewall hasn't worked for a long time, and has never been a problem. Now, however, I need to fix it. When I open the window to change settings, I can't because I get an error about 0x6D9.

0x6D9
When I went to Microsoft, my PID had expired, and their page said to use a file called MicrosoftFixit.WindowsFirewall.RNP.27303904791259753.5.1.Run
Can't set windows firewall to default because of Norton 360. When I disable Norton firewall, and reboot, it still can't set firewall.
I used command prompt taskkill /IM Norton 360 /T /F to forcefully terminate Norton 360 service that didn't work.

Additional info:
Windows 7 Ultimate SP1 x64
Norton 360

AmericanPharaoh · 09 Oct 2013

First I would uninstall Norton 360. Norton 360 Removal tool

Next, run the Windows Firewall to repair tool. Windows Firewall Repair

Now reinstall Norton 360. If you get Norton free with Comcast subscription?

Here's the link. Norton Comcast Free

Norton should disable Windows Firewall during install.

When prompted, I would not install Constant Guard. It will really slow down your PC.

If you do not have Comcast and purchase Norton 360. Go to the Norton website, find your product and download. You may have to enter your license key to activate.

Hope this helps.

John

NortonSupport · 10 Oct 2013

Quote: Originally Posted by jamd315

My firewall hasn't worked for a long time, and has never been a problem. Now, however, I need to fix it. When I open the window to change settings, I can't because I get an error about 0x6D9.

0x6D9
When I went to Microsoft, my PID had expired, and their page said to use a file called MicrosoftFixit.WindowsFirewall.RNP.27303904791259753.5.1.Run
Can't set windows firewall to default because of Norton 360. When I disable Norton firewall, and reboot, it still can't set firewall.
I used command prompt taskkill /IM Norton 360 /T /F to forcefully terminate Norton 360 service that didn't work.

Additional info:
Windows 7 Ultimate SP1 x64
Norton 360

Hello jamd315,

I am Vineeth and I am from the Norton Support team. Sorry to hear that you are unable to turn on Windows Firewall.

Can you tell me the reason why you need to turn on Windows Firewall? Normally, when installing Norton 360, it disables the Windows Firewall as it has the Firewall feature in it. If you need to enable Windows Firewall, I suggest that you follow johnsmith45jock.

Please let me know if you need further help!

Thanks!

Vineeth

jamd315 · 10 Oct 2013

Quote: Originally Posted by NortonSupport

Quote: Originally Posted by jamd315

My firewall hasn't worked for a long time, and has never been a problem. Now, however, I need to fix it. When I open the window to change settings, I can't because I get an error about 0x6D9.

0x6D9
When I went to Microsoft, my PID had expired, and their page said to use a file called MicrosoftFixit.WindowsFirewall.RNP.27303904791259753.5.1.Run
Can't set windows firewall to default because of Norton 360. When I disable Norton firewall, and reboot, it still can't set firewall.
I used command prompt taskkill /IM Norton 360 /T /F to forcefully terminate Norton 360 service that didn't work.

Additional info:
Windows 7 Ultimate SP1 x64
Norton 360

Hello jamd315,

I am Vineeth and I am from the Norton Support team. Sorry to hear that you are unable to turn on Windows Firewall.

Can you tell me the reason why you need to turn on Windows Firewall? Normally, when installing Norton 360, it disables the Windows Firewall as it has the Firewall feature in it. If you need to enable Windows Firewall, I suggest that you follow johnsmith45jock.

Please let me know if you need further help!

Thanks!

Vineeth

I normally use Norton's Smart Firewall for firewall, but I can't connect to other computers on my LAN, and my wireless printer. My router seems fine, the other computers can connect, share files and use the printer, and the diagnostics on the router were clean. I tried downloading Microsoft registries, but that didn't work so I reverted back today.

EDIT: Would Norton Family be the problem?

NortonSupport · 10 Oct 2013

Hello Jamd315,

This is Harry from Norton Social Support. Did you try configuring the Network Security Map in Norton 360 for providing access to your LAN? If not, try that. You can refer the instructions from the following link:
https://support.norton.com/sp/en/us/...rProfile_en_us

If the problem persists, turn off the Smart Firewall from Norton 360 temporarily for a few minutes and check if you can connect over LAN.

Thanks!
Harry
Norton Social Support

cottonball · 10 Oct 2013

jamd315,

Quote:

Would Norton Family be the problem?

It could be.

Once you get your Internet connection going, please do the following:

Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two

Now, please download the ESET ServiceRepair tool:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
(Direct link only available)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.

Please provide the CC Support\Logs\SvcRepair.txt in your reply.

Next, download the Farbar Service Scanner

Save to the Desktop

Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
Press: Scan
FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply.

jamd315 · 11 Oct 2013

Cotonball, here are the FSS and SvcRepair logs
The SvcRepair

Code:

Log Opened: 2013-10-11 @ 15:57:03
15:57:03 - -----------------
15:57:03 - | Begin Logging |
15:57:03 - -----------------
15:57:03 - Fix started on a WIN_7 X64 computer
15:57:03 - Prep in progress.  Please Wait.
15:57:03 - Prep complete
15:57:03 - Repairing Services Now.  Please wait...
15:57:03 - Services Repair Complete.
15:57:06 - Reboot Skipped

The FSS

Code:

Farbar Service Scanner Version: 13-09-2013
Ran by Aidan (administrator) on 11-10-2013 at 16:08:36
Running from "C:\Users\Aidan\Downloads"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.


Firewall Disabled Policy: 
==================
"HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" registry key does not exist.


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============

wscsvc Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wscsvc registry key. The service key does not exist.


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============
Checking Start type of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to open iphlpsvc registry key. The service key does not exist.

Checking Start type of SharedAccess: ATTENTION!=====> Unable to retrieve start type of SharedAccess. The value does not exist.
Checking ImagePath of SharedAccess: ATTENTION!=====> Unable to retrieve ImagePath of SharedAccess. The value does not exist.
Checking ServiceDll of SharedAccess: ATTENTION!=====> Unable to retrieve ServiceDll of SharedAccess. The value does not exist.
Checking FirewallRules of SharedAccess: ATTENTION!=====> Unable to open "SharedAccess\Defaults\FirewallPolicy\FirewallRules" registry key. The key does not exist.


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys
[2013-10-10 06:00] - [2013-09-13 21:10] - 0497152 ____A (Microsoft Corporation) 314C17917AC8523EC77A710215012A65

C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-10-10 06:00] - [2013-09-07 22:30] - 1903552 ____A (Microsoft Corporation) 40AF23633D197905F03AB5628C558C51

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit

ATTENTION!=====> C:\Program Files\Windows Defender\MpSvc.dll Reparse point on file detected.

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

jamd315 · 11 Oct 2013

NortonSupport, I followed the instruction on the link, and it didn't work. I also disabled the firewall until system restart, and came back 30 minutes later, still didn't work.

cottonball · 11 Oct 2013

jamd315,

Would use johnsmith45jock suggestion to uninstall Norton 360 with the Norton 360 Removal Tool (Post #2).

Once that is done, would refrain from browsing until we get the issue resolved. However, wait until I provide you further instructions.

Also, are you going to remove Norton 360, and get something else, or do you plan on keeping it?

We need to take action on the results of the Farbar Service Scanner. There are a few entries need attention, as you can see.

Some of those entries would be best analyzed by using the Farbar Recovery Scan Tool
Download: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Select the version that applies to your system (64-bit).
Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to the disclaimer.

Press the Scan button.

The tool makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt

Also post the Addition.txt in your reply.

jamd315 · 12 Oct 2013

cottonball, I had to pastebin this since it was too long. FRST log - Pastebin.com, and I like your profile picture:)