can't update important files and services while the system is using

[drfhoule]

Also this: "There was an error opening the Windows Firewall with Advanced Security snap-in". Restart the Firewall service (how?) error code 0x6D9. Went to the service, which was stopped, clicked to start but got this service-specific error code 6801 (see firewallservice.jpg attached).

 

[NoelDP]

That sounds very much to me as if you've at some time had Norton software installed?

If that's the case, then you need to run the Norton Removal Tool (even if you don't remember having anything norton installed)


Download the Norton Removal Tool from here https://www-secure.symantec.com/norton-support/jsp/help-solutions.jsp?lg=english&ct=united+states&docid=20080710133834EN&product=home&version=1&pvid=f-home

Close all other programs, then run the tool. When it's complete, reboot the machine whether it asks for it or not.

After the reboot, open an Elevated Command Prompt, and run the following command

NETSH WINSOCK RESET

You'll be advised to reboot - do so.
then post another MGADiag report.

 

[drfhoule]

Where do I find the report?

Did what you asked. Where do I find this as it is not on the desktop. MGADiag

Btw, I could not stay without a firewall for hours on end, so I installed the Comodo Firewall in the meantime (just the firewall, not the whole antivirus etc.).

 

[drfhoule]

Is this what you wanted?

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-J722D-7VM4M-V3C34
Windows Product Key Hash: rkpjmDLkBc4tMutUz74hOTbjD+E=
Windows Product ID: 00359-892-0547775-85279
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {5B5AFB9C-33B8-4855-9EE5-7AB7D78202BF}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 100 Genuine
Microsoft Office Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5B5AFB9C-33B8-4855-9EE5-7AB7D78202BF}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-V3C34</PKey><PID>00359-892-0547775-85279</PID><PIDType>5</PIDType><SID>S-1-5-21-3382205787-2000127270-3553522957</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>4104</Version><SMBIOSVersion major="2" minor="6"/><Date>20120511000000.000000+000</Date></BIOS><HWID>68E73A07018400FE</HWID><UserLCID>1009</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-002F-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Home and Student 2007</Name><Ver>12</Ver><Val>8DD6413F499EF28</Val><Hash>G53qrIXLBR0+7PgytYWaNwhXZxE=</Hash><Pid>81602-916-4271527-68262</Pid><PidType>1</PidType></Product></Products><Applications><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="A1" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: 2e7d060d-4714-40f2-9896-1e4f15b612ad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00170-892-054777-00-4105-7601.0000-2282012
Installation ID: 011506984162763494451552568934179051525226011452027810
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: V3C34
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 16/11/2012 5:03:58 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:10:2012 12:09
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MgAAAAEABAABAAEAAQABAAAAAQABAAEAln2wC3rAYjRK3eDb6gLShCLTxJayguiSLnM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
SSDT IdeRef IdeTable
SSDT IdeRef IdeTable
SSDT IdeRef IdeTable
BGRT ALASKA A M I

 

[NoelDP]

Comodo isNOT a good option - and Windows has its own firewall which is perfectly good enough, and a lot less hassle than third-party ones - pleas uninstall Comodo and ensure that the Windows Firewall is switched on.


Sorry about that - not enough caffeine!
Let's address the firewall problems


Open an Elevated Command Prompt, and run the following commands....

NET START BFE
NET START MPSSVC
SC QUERYEX MPSSVC
SC QC MPSSVC
SC SDSHOW MPSSVC
SC QPRIVS MPSSVC
SC QSIDTYPE MPSSVC

 

[drfhoule]

So you think that the malfunctioning of the firewall is what is preventing the updates from being installed? Here is the result of the above commands you asked be to type:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START BFE
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>NETSTART MPSSSVC
'NETSTART' is not recognized as an internal or external command,
operable program or batch file.

C:\Windows\system32>NET START MPSSVC
The Windows Firewall service is starting.
The Windows Firewall service could not be started.

A service specific error occurred: 6801.

More help is available by typing NET HELPMSG 3547.


C:\Windows\system32>NET HELPMSG 3547

A service specific error occurred: ***.



C:\Windows\system32>SC QC MPSSVC
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: MPSSVC
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService

C:\Windows\system32>SC SDSHOW MPSSVC

DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCRP;;;S-1-5-80-2006800713-1441093265-249754
844-3404434343-1444102779)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

C:\Windows\system32>SC QPRIVS MPSSVC
[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: MPSSVC
PRIVILEGES : SeAssignPrimaryTokenPrivilege
: SeAuditPrivilege
: SeChangeNotifyPrivilege
: SeCreateGlobalPrivilege
: SeImpersonatePrivilege
: SeIncreaseQuotaPrivilege

C:\Windows\system32>SC QSIDTYPE MPSSVC
[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: MPSSVC
SERVICE_SID_TYPE: RESTRICTED

C:\Windows\system32>

 

[NoelDP]

You missed one - possibly the most important one - and I missed one as well...

Please run the following two commands in an Elevated Command Prompt, and post the results.

NET START MPSDRV
SC QUERYEX MPSSVC

 

[drfhoule]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START MSPDRV
The service name is invalid.

More help is available by typing NET HELPMSG 2185.


C:\Windows\system32>SC QUERYEX MSPSVC
[SC] EnumQueryServicesStatus:OpenService FAILED 1060:

The specified service does not exist as an installed service.


C:\Windows\system32>

 

[NoelDP]

(see my edited post - sorry about that!)

 

[drfhoule]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START MPSDRV
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>SC QUERYEX MPSSVC

SERVICE_NAME: MPSSVC
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 6801 (0x1a91)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Windows\system32>

 

[NoelDP]

Download the Fixit from here
Some services do not start in Windows Vista and Windows 7
then uninstall Comodo and reboot
run the fixit, and reboot again - then try starting the firewall

run the following commands in an Elevated Command Prompt -

NET START MPSSVC
SC QUERYEX MPSSVC

post the results

 

[drfhoule]

Thanks, but this will have to wait until Tuesday as I am about to leave town for a few days. Have a good weekend and thanks for everything so far!

 

[drfhoule]

Did all that. Still does not work. See attached result of the fixit, then error messages on reboot.

 

[NoelDP]

I need to see the actual CMD responses to be sure what's happening......

run the following commands in an Elevated Command Prompt -

NET START MPSSVC
SC QUERYEX MPSSVC

post the results


Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[drfhoule]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>NET START MPSSVC
The Windows Firewall service is starting.
The Windows Firewall service could not be started.

A service specific error occurred: 6801.

More help is available by typing NET HELPMSG 3547.


C:\Windows\system32>SC QUERYEX MPSSVC

SERVICE_NAME: MPSSVC
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 6801 (0x1a91)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\Windows\system32>

 

[drfhoule]

It seems that either (a) I give up any hope of ever being able to automatically download and install Windows updates or (b) find a way to do this manually. I have a laptop that works perfectly well, is there a way to copy files from there and place them where they should be on the desktop that is experiencing the problems?

 

[NoelDP]

Ooops! - sorry!
Your post seems to have dropped off my radar.

It seems that this can also be caused by a number of other services, and 'bad settings'.

Please run the following commands and post the results.

SC QUERY MPSDrv
SC QUERY BFE
SC QUERY TRUSTEDINSTALLER
REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Security

 

[drfhoule]

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>SC QUERY MPSDRV

SERVICE_NAME: MPSDRV
TYPE : 1 KERNEL_DRIVER
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Windows\system32>SC QUERY BFE

SERVICE_NAME: BFE
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Windows\system32>SC QUERY TRUSTEDINSTALLER

SERVICE_NAME: TRUSTEDINSTALLER
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Windows\system32>REG QUERY HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVIC
ES\MPSSVC\SECURITY

HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\MPSSVC\SECURITY
Security REG_BINARY 01001480B4000000C0000000140000003000000002001C0001
00000002801400FF010F00010100000000000100000000020084000500000000001400FD01020001
010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D
010200010100000000000504000000000014008D0102000101000000000005060000000000280015
00000001060000000000055000000049599D779156E555DCF4E20EA78BEBCA7B4213560101000000
00000512000000010100000000000512000000


C:\Windows\system32>

 

[NoelDP]

See method 3 here....
http://support.microsoft.com/kb/2530126

 

[drfhoule]

Firewall still does not work. Any way to manually install Windows updates?