Cant start BFE for Windows firewall: Error 5 Access is denied

[Thor1207]

I recently installed a new printer (Canon PIXMA MX922) and I cannot share the printer with other laptops because the Windows Firewall cannot be started. I went looking for help online and as a result I went into the dependency services and I encounter this roadblock. I don't know where the problem started, but several months ago I switched my antiviral from Avast free version to AVG subscription. I then thought I would install a free firewall so I tried both Comodo and Zone Alarm, but each one of those seemed to reek havoc on my system and I ended up doing a system restore to get things back to normal. I have also used Revo uninstaller (free version) to remove the residuals of these programs. I tried reinstalling the Windows Firewall but that did nothing. I have a Netgear N300 Router in front of the system. I would appreciate any help. I don't want to do a complete reformatting of the hard drive. Is there any way to fix this that isn't terribly complicated. I've looked at solutions that require going in and editing the registry but I am VERY hesitant to do this since I am a novice. Thank you all.

 

[cottonball]

Welcome to SevenForums, Thor1207!

please use the following diagnostic tool. It has a powerful detection mechanism, and may help us get to the cause of your issues:

:info: Please use the Farbar Recovery Scan Tool.
Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system: 64-bit
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.
At the program's console, press the Scan button.

When done, the tool makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).
>> Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
>> Also post the Addition.txt in your reply.


:info: Also, use the Farbar Service Scanner
Save to the Desktop

Double-click the downloaded file to run it.

• Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
• Press: Scan
• When done, FSS creates a log, FSS.txt, on the Desktop.

:ar: Please provide the FSS.txt in your reply.


Thank you.

 

[Thor1207]

RE: Error 5

Here are the requested files:

Hope I did it right.

 

[Thor1207]

Re: Error 5

Don't think I attached the files correctly.
View attachment FRST.txt

View attachment Addition.txt

View attachment FSS.txt

 

[cottonball]

Thor1207,

You attached the files correctly.

At a quick glance, the FRST report is showing traces of the ZeroAccess rootkit, and the FSS report is showing some missing Registry entries.

Therein lies the root of your problem..

I need to take a thorough look at the reports before providing you some instructions.
Today has been rather busy, and would appreciate your patience until tomorrow.

Thanks!!

 

[cottonball]

:info: Please open notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$4059d0ada73a1262f7f1dc06b494eb94\n. 
C:\$Recycle.Bin\S-1-5-18\$4059d0ada73a1262f7f1dc06b494eb94\n.
HKCU\...409d6c4515e9\InprocServer32: [Default-shell32] 
HKU\Kevin\...\Run: [Exent_SDM] - C:\Users\Kevin\AppData\Local\Temp\SDM143\Free Ride Games.exe "l 'Startup' u 'http://www.freeridegames.com/do/SDMC?action=config&type=FULLSTARTUP&contentId=586350&sId=w3i_us_ron_nolaunch' p '143' c '466550'" C:\$Recycle.Bin\S-1-5-18\$4059d0ada73a1262f7f1dc06b494eb94
C:\$Recycle.Bin\S-1-5-21-2307538645-4089487375-3762376199-1001\$4059d0ada73a1262f7f1dc06b494eb94
C:\ProgramData\PKP_DLdu.DAT
C:\ProgramData\PKP_DLdw.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
C:\Users\Bruce\gosetup.exe
C:\Users\Bruce\gotomypc_438.exe
C:\Users\Bruce\gotomypc_540.exe
C:\Users\Bruce\gotomypc_626.exe
C:\Users\Bruce\gotomypc_635.exe
C:\Users\Bruce\vista_sound_theme.exe
C:\Users\Kevin\audacity-win-1.2.6.exe
C:\Users\Bruce\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Bruce\AppData\Local\Temp\oi_{A2FA356A-C28D-4E76-831C-C7B57ABD84F0}.exe
C:\Users\Bruce\AppData\Local\Temp\q3atrnz3.dll
C:\Users\Bruce\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Bruce\AppData\Local\Temp\sfextra.dll
C:\Users\Bruce\AppData\Local\Temp\uninstall.exe
C:\Users\Kevin\AppData\Local\Temp\SearchWithGoogleUpdate.exe
C:\Users\Kevin\AppData\Local\Temp\uz0jn-h0.dll
C:\Users\Sharon\AppData\Local\Temp\Resource.exe
C:\Users\Sharon\AppData\Local\Temp\sp52594.exe.exe
C:\Users\Sharon\AppData\Local\Temp\UninstallHPTCA.exe
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST, and press the Fix button, just once, and wait.

When done, the tool creates a report on the Desktop called: Fixlog.txt
:ar: Please post the Fixlog.txt in your reply.



Let's see if the following tool can take care of the issues with the Services showing in the FSS report. If not, we will need to go at it manually.

:info: Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two

:info: Now, please download the ESET ServiceRepair tool:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
(Direct link only available)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.
:ar: Please provide the CC Support\Logs\SvcRepair.txt in your reply.

:ar: Next, please run the Farbar Service Scanner once again, and provide the FSS.txt in your reply.