Windows firewall & mpssvc process errors/failure to start

[Xipheas]

Hi,

I've read through a number of posts on this issue, but haven't got to the end of my problem.

When I open Windows firewall from Control Panel, I'm presented with the one button 'Use recommended settings' which doesn't do anything. It's in a box marked 'Update your firewall settings'.

Having followed other advice for other peoples' problems, I've managed to get the BFE service back up and running. The windows firewall service isn't even listed in Task Manager. I'm not sure if this is related, but there is also a problem with mpssvc, which I can neither start nor stop, and the description column simply reads '<Failed to read description. Error code 15100>' Trying to start the service mpssvc results in an error message telling me that it can't be started, with service specific error code 1168.

They're the only error messages I've received in all of this.

I've attached my FSS log file in case it's useful.

Farbar Service Scanner Version: 08-01-2014
Ran by Ed (administrator) on 23-01-2014 at 19:45:36
Running from "C:\Users\Ed\Downloads"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.


Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Disabled Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

[Xipheas]

I hope this is permitted... BUMP!

Anyone got any ideas on this? Cheers.

 

[cottonball]

Let's see if the following tool can take care of the issues. If not, we will need to go at it manually.

:info: Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two

:info: Now, please download the ESET ServiceRepair tool:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
(Direct link only available)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.
:ar: Please provide the CC Support\Logs\SvcRepair.txt in your reply.

 

[cottonball]

After doing the above, please click Start > All Programs > Accessories > Command Prompt
Right-click Command Prompt and select: Run As Administrator
At the Command Prompt, type the following lines, one at a time, and press Enter after each.

sc config MpsSvc start= auto
Net start MpsSvc
exit

Run Farbar Service Scanner once again, and provide its new report in your reply.