Windows Firewall won't start, error 0x8007042c

[cherruc]

Windows Firewall won't start, getting error code 0x8007042c. BFE won't start, error 5: access is denied. I've scanned for viruses using Malwarebytes and nothing showed up. I tried downloading and adding the registry files again as suggested in some other threads, but that didn't work. I tried following the instructions in this thread for fixing the BFE, and after running

REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S

I got "ERROR: The system was unable to find the specified registry key or value". The other commands returned normal results.

SFC /scannow returned corrupted files "utc.app.json" & "telemetry.ASM-WindowsDefault.json" but this was fixed with The Tech Cookbook fix - The Tech Cookbook – Windows 7 update (KB3022345) causing corrupt files.

A few weeks ago my Network Diagnostic Service sometimes would not be running either, but that just stopped happening so I'm not sure what caused it or what fixed it.

Thanks.

 

[cottonball]

cherruc,

Please use the following diagnostic tools to help us get to the cause of your issues:

:info: Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system: 64-bit
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.

At the program's console, press the Scan button.

When done, the tool produces a log, FRST.txt, in the same directory from which the tool is run (Desktop).
:ar: Please provide the FRST.txt in your reply.

The first time the tool is run, it also makes another log: Addition.txt
:ar: Also post the Addition.txt in your reply.


:info: Also, use the Farbar Service Scanner
Download: Downloading Farbar Service Scanner

Let's get a view of all services and dependencies scoped by the tool...
Make sure the following options are checked:

Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender

Press: Scan

When done, FSS creates a log, FSS.txt, on the Desktop.
:ar: Please provide the FSS.txt in your reply.

Thank you.

 

[cherruc]

Please find attached FRST.txt, Addition.txt and FSS.txt. Thanks!

 

[cottonball]

Have you tried going to a previous Restore Point at a time when this issue was not happening?
System Restore

If no joy, try uninstalling AVG 2015, and then try to start the Windows Firewall.

Also, please use the SecurityCheck Download
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

:ar: Please post the checkup.txt in your reply, but, do not take any corrective actions!

 

[cherruc]

There were no system restore points before this issue started happening. Even when I tried to restore to an earlier point, I got an error saying that it was unable to be completed because it couldn't access a certain file, if I remember correctly. Now there are no system restore points.

I tried uninstalling AVG 2015 and starting Windows Firewall, with no luck. I removed AVG with the AVG remover because when I tried to uninstall it through Control Panel it would fail partway through. I also cannot reinstall AVG or other antivirus programs atm.

Please find attached checkup.txt. Thanks for your help!

 

[cottonball]

Let's check to make sure the WMI (Windows Management Instrumentation) is working.

Please press the Windows key and the R Key at the same time.

In the Run box, type: notepad

Copy/paste the entire contents of the codebox below into notepad:

@echo off
>look.txt (
net start winmgmt
sc qc winmgmt
)
notepad look.txt
del &0

Now in Notepad, go to: File > Save as
In the Save as line type in: wmi.bat
Change the Save as type to: All Files (*.*)
Press Save, and do so to the Desktop!!

Double-click the wmi.bat file to run it.
A Notepad report appears on the Desktop.

:ar: Please post its contents in your reply.

 

[cherruc]

When I ran the file, the cmd window reported "System error 5 has occurred. Access is denied."
This is what appeared in the Notepad report:

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: winmgmt
        TYPE               : 20  WIN32_SHARE_PROCESS 
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 0   IGNORE
        BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k netsvcs
        LOAD_ORDER_GROUP   : 
        TAG                : 0
        DISPLAY_NAME       : Windows Management Instrumentation
        DEPENDENCIES       : RPCSS
        SERVICE_START_NAME : localSystem

 

[Jacee]

Let's take a look at what virus may be causing the problem (yes, you are infected!)

Scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[cottonball]

Let's see what the Eset Online Scanner reports before we proceed.

Thanks for your patience!

 

[cherruc]

I followed Jacee's instructions and have attached my ESETScan file. Thank you both!

 

[Jacee]

Looks good!

You had Comodo downloaded at one time. ( C:\Users\Ch\Downloads\cfw_installer_6106_53.exe)... did it ever get installed and work?

 

[cottonball]

cherruc,

After you check out Jacee's question on Comodo, and, if you are still having the same issues as before, let's see if the following helps...

Please use the latest version of the Windows Repair (All In One) Download
Save to the Desktop

Right-click the tweaking.com program icon on the Desktop, and select: Run as Administrator
Click Next at the Setup, and follow the prompts.

Make sure to temporarily disable your AntiVirus program before the repairs are done.

At the program's console...

Go to Step 5 Backup, and under Registry Backup, select: Backup
Under System Restore click on: Create

Next, go to Repairs tab and click: Open Repairs

In the next prompt, press: Unselect all

Next, select the following entries: 1, 2, 3, 4, 6, 10, 14, 21, 26, and, 27

On the right side, check: Restart/Shutdown system when finished

Press: Start Repairs

When the program finishes, please restart the computer.

Please post Windows the Repair log in your reply.
It is located in the following folder:
64-bit systems - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Logs

Also, please run the Farbar Service Scanner once again, and

post the new FSS.txt in your reply.

 

[cherruc]

Jacee, I don't think I ever got Comodo up and running.

cottonball, I did what you suggested and Windows Firewall is now up! Thank you so much. I've attached FSS.txt, is there anything else I need to do?

Thank you both for all your help.

 

[cottonball]

Glad something worked for you!!

Is your Internet connection working OK?