Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unable to turn Windows firewall on


  • Please log in to reply
5 replies to this topic

#1 jasallee

jasallee

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:27 AM

Posted 13 July 2013 - 05:09 PM

A while back I had a virus and was able to remove it but it left problems that I just recently discovered.  Primarily I'm unable to restore the defaults for the firewall.  I'm also unable to turn on the following services:

 

Function Discovery Resource Publication  Error 0x80070005: Access is denied

 

HomeGroup Listener  The HomeGroup Listener service terminated with service-specific error %%-2147023143.

 

The Windows Firewall service terminated with service-specific error Access is denied..

 

I ran the Farbar Service Scanner that I saw from another post with the following log file:

 

Farbar Service Scanner Version: 13-07-2013
Ran by Jeff (administrator) on 13-07-2013 at 17:37:51
Running from "C:\Users\Jeff\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

Windows Autoupdate Disabled Policy:
============================

Other Services:
==============
Checking Start type of SharedAccess: ATTENTION!=====> Unable to retrieve start type of SharedAccess. The value does not exist.
Checking ImagePath of SharedAccess: ATTENTION!=====> Unable to retrieve ImagePath of SharedAccess. The value does not exist.
Checking ServiceDll of SharedAccess: ATTENTION!=====> Unable to retrieve ServiceDll of SharedAccess. The value does not exist.
Checking Start type of iphlpsvc: ATTENTION!=====> Unable to retrieve start type of iphlpsvc. The value does not exist.
Checking ImagePath of iphlpsvc: ATTENTION!=====> Unable to retrieve ImagePath of iphlpsvc. The value does not exist.
Checking ServiceDll of iphlpsvc: ATTENTION!=====> Unable to retrieve ServiceDll of iphlpsvc. The value does not exist.

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

Any help would be appreciated.  Thanks!!



BC AdBot (Login to Remove)

 


#2 sikntired

sikntired

  • Members
  • 1,085 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:27 AM

Posted 13 July 2013 - 05:34 PM

Hi jasallee,

 

It is not uncommon for remnants of malware to corrupt files. Can you tell us what the malware was and how you removed it. Also do you have a system repair disk or OEM cd/dvd?



#3 jasallee

jasallee
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:27 AM

Posted 13 July 2013 - 05:53 PM

Hi sikntired,

 

Thanks for the fast reply.  Unfortunately I don't remember the name of the malware.  I removed it using malware bytes and hijack this.  While I do have a the repair dvds I'd prefer to try to fix the issue before reloading the computer.



#4 sikntired

sikntired

  • Members
  • 1,085 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:27 AM

Posted 13 July 2013 - 06:17 PM

Hi again,

 

Look here:  http://www.sevenforums.com/tutorials/3413-repair-install.html

 

 

If this does not work and you are still having issues I strongly recommend posting in ' Am I Infected ' Forum where you can receive instructions from the

very best.

 

Good Luck

 

Regards.....................



#5 jasallee

jasallee
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:27 AM

Posted 13 July 2013 - 06:28 PM

sikntired,

 

Thank you for all your help.  I'll look through the url you provided and if a repair won't work then I'll post in the appropriate forum.

 

Once again thanks!


Edited by jasallee, 13 July 2013 - 06:28 PM.


#6 sikntired

sikntired

  • Members
  • 1,085 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:27 AM

Posted 13 July 2013 - 06:36 PM

On behalf of all of us here at BC, happy to help :thumbup2:






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users