Cannot Start Windows 7 Firewall (Challenging)

[Xiro]

Read carefully please.

Alright, so it's come to my attention a few weeks ago that Windows Firewall will not start on my computer. I have no idea what could have caused the incident but I need to fix it as soon as possible. I've run 3 malware scans from different programs and the results I've found are irrelevant or useless. I've also ran Advanced System Care 4 (Professional) and also (recently) RegEdit and there are no relevant errors other than maybe some of the registry problems, but those are usually low-risk and are fixed by the program. I have the logs saved if you request them.

Steps taken so far:

-I get reminded by the Action Center that my firewall needs to be turned on. When I try to fix it it says it's unable to, then a link to turn it on manually appears. That fails and I get Error 08x007042c (I have checked the other thread regarding this error, but either the steps aren't very clear or they're just not working)

-I've opened services.msc, and the Base Filtering Engine is and has been working fine. When I try to start the Windows Firewall manually, it says "Windows could not start the firewall service on Local Computer. Error 1068: The Dependency service or group failed to start."

Now, I looked at the dependencies, and there's two specifically it depends on:

+Base Filtering Engine
+Windows Firewall Authorization Diver

As stated, the Base Filtering Engine is working fine, but there's not an option in the service.msc for the Windows Firewall Authorization Drive. I have accessed it via Device Manager, although on the symbol a caution triangle appears, despite it seeming to be fine.

-I've tried changing the information in the Log On tab to Local Service and leaving the passwords blank, which it then said manual control was give to me (or something similar), but this doesn't actually do anything.

-The Background Intelligent Transfer Service is also working properly

-Ran SFC /SCANNOW as an Administrator in the command prompt.

-I also did this: Error code: 0x8007042c "Windows firewall cannot change some of your settings" when you try to turn on your Windows Firewall

-Restarted in safe mode with networking support. Not able to change anything.

-Repair Windows Firewall Tool and RegEdit say they have started the Windows Firewall, but this is not truly the case, and upon re-opening the program it says it has been stopped already.

I tried also doing a system restore to about a week ago, but after the computer restarted it said it was unsuccessful and to try again (repeatedly does this)

Any other suggestions or help would be very appreciated. I'm running Windows 7 Home Premium x64 and have not upgraded it from Windows Vista, the machine came installed with Windows 7 already, so telling me to re-install Windows 7 is a pointless suggestion(unless you know some other way to do it without buying a new one).

If I'm unable to fix this problem, would getting a firewall from another company such as McAfee or Norton be a good alternative? I'd prefer to keep the normal windows firewall if possible though.

I have no backup, as the means were not possible at the time, system restore isn't possible, and Factory Restore or clean install will only be a last option in the worst case scenario.

Yes, I have consulted the microsoft answers board.

I think that's all the steps I've taken.

Side note: As a result I've gotten some kind of malware or "TDSS" that redirects me to a random advertisement or related site when I use a search engine and click on the result. Any help with that too?

I know I'm asking a lot, but I'm willing to do most anything.

 

[DBone]

Read carefully, I'm not a fan of repeating myself.

I've run 3 malware scans from different programs and the results I've found are irrelevant or useless. I've also ran Advanced System Care 4 (Professional) and also (recently) RegEdit and there are no relevant errors other than maybe some of the registry problems, but those are usually low-risk and are fixed by the program.

1) What scanners did you use, and how do you define irrelevant or useless results?

2) You used ASC4 to "fix" your registry. Did you use that, or any other program, (CCleaner, Glary, ect..) to fix/clean your registry at any time before you started to have this problem?

3) I know just how frustrating that these problems can be, but starting your help thread with "Read carefully, I'm not a fan of repeating myself" probably isn't the best strategy for help.

 

[Xiro]

Recently I've gotten RegEdit and scanned, but I've used various malware scanners too. Do you need to know which as well?

I originally only had ASC, and for over a year now. I remark them as useless because ASC gives details before I start to clear registry information. It also says the "priority" and almost always it's low risk.

I only said that cuz I've looked for support and people seem to skim through things, and I must repeat what was already stated. Sorry if it appears I come off as a snob. :/

 

[DBone]

The problem that you are having, and the steps that you've already taken to fix it to no avail, tells me that it's either malware related, or possibly a registry clean gone wrong. Focusing on the malware possibility, it sure sounds like the work of a root kit, and even though you are using a 64bit OS, there are still several nasty root kits out in the wild. If it were my machine, I would run Malwarebytes in safe mode first, and then Hitman Pro next. If they both come up 100% clean, then I would triple check with the more aggressive Norton Power Eraser.

Since you are trying to avoid a re-install, and if all malware scans are negative, then you could try to install a free 3rd party firewall like Comodo to see if it will install correctly and work correctly.

 

[carwiz]

Recently I've gotten RegEdit and scanned, but I've used various malware scanners too. Do you need to know which as well?

Yes, we need to know. Some scanners just load more malware or viruses. There are but a few trusted ones.

Side note: As a result I've gotten some kind of malware or "TDSS" that redirects me to a random advertisement or related site when I use a search engine and click on the result. Any help with that too?

1. You still have one or more viruses. Unfortunately, you may not be able to download and install what's needed. Malwarebytes: Malwarebytes Special Offer!
Click on the FREE version at the lower left. Download and try to install, then run after clicking the update. Do a quick scan first. If it runs, boot into safe mode and run a complete scan. If it finds anything, run it again.

2. STOP running "Reg Fixes"--EVER, unless asked to run a specific tool with specific options set. More often than not, these cause more problems than they fix.

3. Don't allow networking in safe mode.

You may have exhausted your options

 

[Golden]

I've run 3 malware scans from different programs and the results I've found are irrelevant or useless.

Hi,

Be very careful about what you class as "irrelevant or useless" - there are a plethora of malware out there that can easily disable (turn off) your firewall.

I agree with others : this sounds like a malware problem, possibly compounded by all the "Reg Fixers".

One other thing : you mentioned that the computer came with Windows already installed on it. Do you mean that this is an OEM Installation? If its not an OEM installation, then what is the source of the Windows installation?

Regards,
Golden

 

[Xiro]

Okay, currently running the malwarebytes free full version trial program in safe mode to do a full scan(using a different computer atm). So far: 150 000+ objects scanned (this thing sure is thorough o_o) and 10 threats detected.

The other programs I used to scan my registry only scanned 80 000ish files and got minimal results, so I don't know what malwarebytes is doing that makes it so special. Quite a program though. I might buy it once I get money on my card.

Anyways, malware scanners: Microsoft Security Essentials (Of course), Iobit Malware Fighter v1.2, RegInOut System Utilities, and currently Malwarebytes. Usually registry scans get about 10 or so problems and get fixed but it seems to be reoccurring, although not often. Just common and deemed unimportant (by the scanners) registry problems. RegInOut did speed up my computer a bit though by finding some "blank" registry entries. Literally gibberish and nothing was there.

Note: I have also used the Microsoft Fixit tool. Says the problem is fixed but of course it isn't.

To the extent of my knowledge, this computer is in fact OEM installed. I got this computer secondhand from a pawn shop almost two years ago. Not overly important, since this is a recent error. I may in fact just get a new computer at the end of this.

 

[DBone]

After you run Malwarebytes, and remove what is finds, you should next run Hitman Pro ( Home - SurfRight ).

 

[Jacee]

TDSS is a Rootkit!

 

[carwiz]

TDSS is a Rootkit!

Indeed it is!

Use Kaspersky to remove it. Click on the (barely visible) Download link iat the bottom of the page.

Anti-rootkit utility TDSSKiller

 

[Xiro]

I know TDSS is a rootkit. I've used the Kapersky before but it's found nothing in the past. Malwarebytes blocks certain websites (in the form of IP addresses) and that prevents the rootkits from taking effect somehow. I will try that Hitman Pro next though. RegInOut caused some problems recently though (Or so I assume). My computer failed to restart and I has to do the startup repair, which made me go back before any recent programs were installed (Malwarebytes and RegInOut were one of a few (can't be sure which caused it though)) so I think some critical changes were made.

I'll try MalwareBytes again and then try this Hitman Pro though.

EDIT: Malwarebytes cleaned up a bit again, but what am I supposed to do with Hitman Pro? It's scanning, but I notice on the bottom that it says that it's not activated, so it can't remove anything. Does this mean I need to buy it? If so, I can't right now. It's also kind of stuckat 99%. Here's a picture:

Edit 2: After half an hour this screen changed. Disregard. Currently I have Comodo Firewall installed. It's really nice. I might keep it, but I'd still prefer to have solved the Windows Firewall issue.

 

[DBone]

Hitman Pro lets you activate it for free after it finds something. You will have 30 days to scan/delete/repair, and after that you will have to buy it.