Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot turn on Windows Firewall- Error Code (0x8007042c)


  • This topic is locked This topic is locked
13 replies to this topic

#1 Williamc141

Williamc141

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 05 April 2014 - 12:32 PM

I am having a problem with windows firewall. I cannot turn on my firewall, whenever I try to turn it on I get this error (Windows Firewall can't change some of your settings-Error code 0x8007042c)

My computer is running windows 7 x64, 4gb ram, q8200 2.3GHZ quad core processor) I have windows security essentials, malwarebytes anti-malware on my computer, neither of these will pick up any virus or malware.

 

 

Mod Edit

Moved to win7  as I believe this is a "services" issue. ~~ boopme


Edited by boopme, 05 April 2014 - 09:53 PM.


BC AdBot (Login to Remove)

 


m

#2 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 05 April 2014 - 11:10 PM

Try this :

 

http://go.microsoft.com/?linkid=9810866

 

 

...or....

You can start the Windows Firewall services manually and make sure that they start automatically in the future. To do this, follow these steps:

  1. Click Start , and then type Services in the Search box.
  2. Right-click Services. and then click Run as administrator. If you are prompted, enter your administrator user name and password, and then press Enter.
  3. Scroll until you see Windows Firewall, and then double-click Windows Firewall.

Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#3 NickAu

NickAu

    Bleepin' Fish Doctor


  • Moderator
  • 11,708 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:11:13 PM

Posted 05 April 2014 - 11:37 PM

This is how you do it using a command prompt:

  • To Turn Off: 
  • NetSh Advfirewall set allprofiles state off
  • To Turn On: 
  • NetSh Advfirewall set allrprofiles state on
  • To check the status of Windows Firewall: 
  • Netsh Advfirewall show allprofiles


#4 Williamc141

Williamc141
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 06 April 2014 - 05:21 PM

 

Try this :

 

http://go.microsoft.com/?linkid=9810866

 

 

...or....

You can start the Windows Firewall services manually and make sure that they start automatically in the future. To do this, follow these steps:

  1. Click Start , and then type Services in the Search box.
  2. Right-click Services. and then click Run as administrator. If you are prompted, enter your administrator user name and password, and then press Enter.
  3. Scroll until you see Windows Firewall, and then double-click Windows Firewall.

 

 

 This is the error that occurs when I try starting the firewall manually. KWHQ2EM.png

 

This is how you do it using a command prompt:

  • To Turn Off: 
  • NetSh Advfirewall set allprofiles state off
  • To Turn On: 
  • NetSh Advfirewall set allrprofiles state on
  • To check the status of Windows Firewall: 
  • Netsh Advfirewall show allprofiles

 

An error occured when trying this also. It says ( An error has occured while attempting to contact Windows Firewall service)



#5 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 06 April 2014 - 06:09 PM

Please run this :

 

http://www.bleepingcomputer.com/download/fixexec/


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#6 Williamc141

Williamc141
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 06 April 2014 - 06:21 PM

Alright I ran fixexec.



#7 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 06 April 2014 - 06:27 PM

Reboot

 

any change ?


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#8 Williamc141

Williamc141
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 06 April 2014 - 06:43 PM

No, Still says Firewall cant change some of your settings (error code ##########)



#9 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 06 April 2014 - 06:51 PM

Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool,  If you get a message that RKill is an infection, do not be concerned. This message is just a fake warning given by the infection when it terminates programs that may potentially remove it. If you run into these infections warnings that close RKill, a trick is to leave the warning on the screen and then run RKill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that RKill can terminate the Infection that we are attempting to get rid of. So, please try running RKill until the malware is no longer running. You will then be able to proceed with the rest of the guide. Do not reboot your computer after running RKill as the malware programs will start again.


rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

* Double-click on the Rkill desktop icon to run the tool.
* A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
* If not, delete the file, then download and use the one provided in Link 2.
* Do not reboot until instructed.
* If the tool does not run from any of the links provided, please let me know.

Please Copy, and Paste the resulting log in your reply.

 

If you already have MalwareBytes on your computer, be SURE it is updated.....

if you dont have it....

 

 

  • Download Malwarebytes Anti-Malware Free and save it to your desktop
  • Double click the desktop icon, click Run, then OK
  • Click Next
  • Select I accept the agreement then continue to click Next then finally click Install
  • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program
  • Click Finish
  • If you are notified the Database is out of date click Update Now
  • Threat scan + Rootkit scan
    • Click the Settings tab >> Detection and Protection >> Detection Options, tick the box 'Scan for rootkits'.
    • Click on the Scan tab,

     

  • Click on Scan Now
  • A Threat/Rootkit Scan will begin.
  • With some infections, you may see this message box.

'Could not load DDA driver'

  • Click 'Yes' to this message, to allow the driver to load after a restart.
  • Allow the computer to restart. Continue with the rest of these instructions.
  • When the scan is complete, click Apply Actions.
  • Wait for the prompt to restart the computer to appear, then click on Yes.

(Copy to clipboard for pasting into forum replies)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab >> Application Logs.

 

  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'

 

Paste the contents of the clipboard into your reply.


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#10 Williamc141

Williamc141
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 06 April 2014 - 07:40 PM

http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 04/06/2014 07:13:40 PM in x64 mode.
Windows Version: Windows 7 Professional Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (PID: 1724) [WD-HEUR]

1 proccess terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * ALERT: ZEROACCESS rootkit symptoms found!

     * C:\Users\Customer\AppData\Local\{a9104503-66db-31a8-e5ac-212252dd4449}\ [ZA Dir]
     * C:\Users\Customer\AppData\Local\{a9104503-66db-31a8-e5ac-212252dd4449}\L\ [ZA Dir]
     * C:\Users\Customer\AppData\Local\{a9104503-66db-31a8-e5ac-212252dd4449}\U\ [ZA Dir]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\ [ZA Dir]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\@ [ZA File]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L\ [ZA Dir]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L\00000004.@ [ZA File]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L\201d3dde [ZA File]
     * C:\Windows\installer\{a9104503-66db-31a8-e5ac-212252dd4449}\U\ [ZA Dir]
 

Malwarebytes : Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/6/2014
Scan Time: 7:38:33 PM
Logfile:
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.06.10
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Customer

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 342360
Time Elapsed: 21 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 2
Backdoor.0Access, C:\Windows\Installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L, Quarantined, [18e87b85a0609e629b17c13f808012ee],
Backdoor.0Access, C:\Windows\Installer\{a9104503-66db-31a8-e5ac-212252dd4449}\U, Quarantined, [d32dfe02926ee51b11a2b7492ed20bf5],

Files: 3
Backdoor.0Access, C:\Windows\Installer\{a9104503-66db-31a8-e5ac-212252dd4449}\@, Quarantined, [f40ca0601fe134ccb6bbb050e51b2ad6],
Backdoor.0Access, C:\Windows\Installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L\00000004.@, Quarantined, [52ae0000758b9e62acc3ce32b9477987],
Backdoor.0Access, C:\Windows\Installer\{a9104503-66db-31a8-e5ac-212252dd4449}\L\201d3dde, Quarantined, [18e87b85a0609e629b17c13f808012ee],

Physical Sectors: 0
(No malicious items detected)


(end)



#11 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 06 April 2014 - 07:53 PM

You are infected with ZERO ACCESS

 

Please follow the instructions in the Preparation Guide For Requesting Help  starting at Step #6.

 

When you have done that, start a new topic and post the required logs to  Virus, Trojan, Spyware, and Malware Removal Logs   forum, NOT  here, for assistance by the Malware Response Team Experts.

NOTE :If you are unable to complete any step, please just post the topic and leave a good description of your problems

Best of Luck !


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#12 Williamc141

Williamc141
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 07 April 2014 - 08:23 AM

Thank you.



#13 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:13 PM

Posted 07 April 2014 - 03:38 PM

My pleasure !

 

New topic can be found HERE


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#14 hamluis

hamluis

    Moderator


  • Moderator
  • 54,830 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:13 AM

Posted 12 April 2014 - 12:19 PM

MRL topic currently being worked...this topic is closed to avoid confusion.

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users