BleepingComputer.com: Win 7 Antispyware 2012 removed but firewall won't start

Hey guys,

We picked up Win 7 Antispyware 2012 and quickly removed it following the instructions at http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012. Everything seemed fine until we realized that the firewall (mcafee) won't start. Also we can't get into the windows security center. I ran both MalwareBytes and SuperAntiSypware in safe mode and they didn't discover anything (both clean) but obviously something still isn't right.

Any help you guys could give would be greatly appreciated. I work in IT and can follow directions quickly and accurately *and* this isn't my first time cleaning out viruses

Jay

Mcafee personal firewall depends on WINDOWS FIREWALL(You may be missing the service in this case)
So due to dependency failure you cant turn on mcafee firewall

Go to RUN and type

services.msc and click ok

Check if you have Windows firewall service.If you dont have that,try this


Create a restore point before trying this

Download both the registry files

http://www.mediafire.com/?317ea53a883288d

http://www.mediafire.com/?z6aw8j7997qa7j9

Launch and import them to registry

Restart your PC

Now,open RUN and type

regedit and click ok

go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

Right click on it-permissions

Click on ADD and type

Everyone and click ok

Now Click on Everyone

Below you have permission for users

Select full control and click ok

Now,open RUN and type

services.msc and click ok

start base filtering engine service and then windows firewall service


You mcafee firewall should be ON

Good luck

narenxp,

Well that was weird. I followed all your steps down to starting the base filtering engine (it wasn't in the services list) and as soon as I finished the win 7 antispyware 2012 virus came back. So I followed http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012 again and the virus was again removed but this time the firewall and windows security center worked fine.

I restarted in safe mode and scanned again using malwarebytes then superantispyware and nothing was found. So far so good, it looks like the second time around it was truly uncovered and removed.

Thanks,
Jay