Author Topic: Windows Firewall won't Start - SOLVED!!! (Read 49201 times)

Wiloroc · « **on:** March 16, 2014, 06:07:12 pm »

I have windows 7 professional service pack 1, 32 bit. Running on a Toshiba Protégé 830 laptop.
I have Microsoft security Essentials and have been using Windows Firewall since the original purchase of the machine.

After an update sent by Microsoft in the fall of last year which I had some trouble getting to load without failures. The msiexec.exe file was constantly running which caused the fan on the cpu to run constantly. If the program was left "unsuspended" in resource monitor a blue screen crash would occur if I used malwarebytes to scan it. That is issue cleared it self about two weeks ago and I have not had that as a problem since. (I have no Idea what caused it to start being a problem or end being one, in any case it no longer happens.)

Malwarebytes did not find any viruses. MS Security Essentials did not find viruses.

However during the troubleshooting I noticed that the Windows firewall was not running and would not start. In services I get the following message "Windows could not start the Windows Firewall on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service contact the service vendor and refer to the service-specific error code -2144206818." The system Event Log has the firewall listed as 7024 and reports"The Windows Firewall service terminated with service-specific error %%-2144206818."

I used the tweaking.com program today in an attempt to fix this error. It did not work. The windows Firewall Authorization Driver - reports that it is started and working. The base Filtering Engine had been stopped but is not started and working as expected - restarting each time the computer is restarted.

I am at a loss on what to do next? Ideas?

Shane · « **Reply #1 on:** March 17, 2014, 12:07:22 pm »

Hidden rootkits will target the firewall as well, did you try malwarebytes anti rootkit tool yet?

Also when you ran my repair tool did you make sure to run all the repairs?

Shane

Wiloroc · « **Reply #2 on:** March 18, 2014, 07:15:51 pm »

Ok I just ran the ROOTKIT tool BETA version - no infections found!
And yes I ran all of the repairs listed.

Computer seems to be running a little slower now but that could be my imagination.

james

Shane · « **Reply #3 on:** March 19, 2014, 09:29:17 am »

Ok, normally the repairs get them working again as long as their isnt a virus or rootkit there taking them back out lol.

So if the system is clean and they still are not coming back up then there may be something else wrong that in turn wont let them startup, seen that happen on a machine where th com+ got corrupted.

Can you post a screen shot of the actual error for me please?

Shane

Wiloroc · « **Reply #4 on:** March 19, 2014, 11:11:50 pm »

Ok here is the screen shot:

Shane · « **Reply #5 on:** March 20, 2014, 11:05:39 am »

Ok go and try to start the bits service and see what error you get. If you get a access denied error you might have corrupted com+ as well. But lets see what that says first.

If it is a corrupt com+ then you will get a error if you go to the control panel, open administrative tools and then Component Services.

When that opens expand "Component Services" on the left, then under that expand computers and then my computer.

Then under the click on Com+ Applications. Do you get a error when you click on that?

Shane

Wiloroc · « **Reply #6 on:** March 22, 2014, 02:35:39 pm »

No error. See screen shot.

Also no error when I started COM+ service from service application. See screen shot.

And still no go on the firewall - see screen shot.

I did not see anything call "bit services" - I take it that is the COM+ service.

Shane · « **Reply #7 on:** March 24, 2014, 12:24:50 pm »

Bits is the "Background Intelligent Transfer Service" And it shows that it is running.

Also your com+ looks good so that isnt the problem.

The Windows firewall does depend on WMI. So if WMI isnt working then the firewall would fail as well.f But is it WMI or something else.

The one thing about the firewall is it depends on a lot of other things, which is a bad design lol

So far everything is checking out fine. Services are there, permissions are good, no infections.

We could test is WMI works by seeing if this tool is able to do anything
http://www.microsoft.com/en-us/download/details.aspx?id=8572

Also have you ran SFC /Scannow on the system yet? And does the event viewer show anything after you try to start the firewall?

Shane

Wiloroc · « **Reply #8 on:** March 24, 2014, 07:47:31 pm »

Ok, the wmi program opened - one of the screen shots below shows result - did not know how what to do to test it.

I did run sfc /scannow - after that and other "fixes" the firewall started then when I checked it again it was stooped and reporting the same error you have seen.

Your questions reminded me of the logs from the tweaking.com windows repair program. So I attached what I thought would be helpful let me know what you may need other than these.

Shane · « **Reply #9 on:** March 25, 2014, 12:37:20 pm »

Holy crap you have a lot of things running in the back ground lol

Quote

Process Count: 134

The more processes running the slower the system will be and the longer boot up will be as well. You should consider cleaning up what programs you have set to run at startup

And sorry, on the WMI creator I should have tool you what to do. I attached a screen shot, click the 2nd drop down list and choose Win32_Process, then in the list below click on caption and then click the button on search for properties values.

If WMI is working right then the box below should fill up with the process names on the system.

Shane

Wiloroc · « **Reply #10 on:** April 09, 2014, 09:21:03 pm »

Hello again, I have been out of town and out of touch.

I am back again to get this issue solved, especially with the new revelation of the SSL issue with websites.

Here is screen shot of WMI check. It looks like the screen shot you provided.

Most of what is in the background came that way with the computer. I have weeded it out using glary utilities. I'll keep working it. But I am sure that is not what is blocking the firewall.

Shane · « **Reply #11 on:** April 10, 2014, 02:17:26 pm »

So far everything is checking out. I wonder if it isnt a permissions or registry problem but maybe a system file it needs has been replaced or missing.

One option is to do a repair install, this way any missing files or settings get replaced while still keeping all your programs.

Firs you need a Windows 7 disk that has SP1 on it. You can grab it here
https://sites.google.com/site/linuxlablibrary/windows-iso

Then just follow this

http://www.sevenforums.com/tutorials/3413-repair-install.html

Shane

Wiloroc · « **Reply #12 on:** April 15, 2014, 10:40:08 pm »

So that was fun - it took all night to upgrade.

However, the firewall still does not start, the computer seams to run slower, and the links in emails now don't work, all of this is backed by screen shots

Shane · « **Reply #13 on:** April 16, 2014, 09:36:29 am »

I did a lookup on the outlook error and it seems to have something to do with IE itself.

Do you have chrome or firefox? If you do open one of them and make sure to set it as your default browser.

Also now that the repair install is done are you able to go and do all the Windows updates?

Shane

Wiloroc · « **Reply #14 on:** April 18, 2014, 08:34:43 am »

Yes, all of the essentials and the optionals I chose. took a bit but they downloaded and installed.

Today I got the pop up shown in the screen shot below. The code I used was the one on the bottom of the computer.

and the firewall still does not start. Same exact error code it was presenting before.

And also my chasis fan is running alot more than before, dumping a lot of heat.

Shane · « **Reply #15 on:** April 18, 2014, 09:49:47 am »

The automated phone system should let you activate your keycode on the sticker. So just do that and that should take care of that part.

As for the firewall, what antivirus is currently installed? And does that AV have a firewall service of its own?

Shane

Willy2 · « **Reply #16 on:** April 18, 2014, 10:49:58 am »

Your fan is running much more. Use Task Manager to see if there's a process that takes a lot of CPU time.

Wiloroc · « **Reply #17 on:** April 20, 2014, 07:38:17 am »

I use Microsoft Security Essentials

The Links between Outlook and IE are back working after the auto upgrade to IE 11.

Still no Firewall.

Wiloroc · « **Reply #18 on:** April 20, 2014, 07:41:17 am »

Forgot to mention the authorization by phone worked like a charm!

I think the fan was going because so many downloads- upgrades were coming through as I was working.

Shane · « **Reply #19 on:** April 20, 2014, 01:35:26 pm »

Yeah the fan will kick up more when the system gets hotter, and the more the CPU is working the more heat it makes

When the cpu isnt under heavy use, Windows slows the cpu down, uses less power and thus less heat. When the CPU is under a full load it is going full speed, pulling more power and makes a lot more heat.

So from what I can tell everything else is working fine just like it should, all except the firewall. Did you try the Windows Repair after the repair install of Windows yet? Newest version of my tool is v2.6.2

Shane

Wiloroc · « **Reply #20 on:** May 07, 2014, 10:31:46 pm »

Back again finally.

Nothing has worked yet. The latest version of tweaking did not cure the problem.

I tried the Microsoft troubleshooter. It seems to find something but then cannot communicate it with the Microsoft servers.

Any more ideas?

Shane · « **Reply #21 on:** May 08, 2014, 05:10:38 pm »

OK try this, I have seen some viruses change the permissions on the firewall service to where noting can change them back, not even the system. But there is a way to fix it.

So lets see if you are able to access anything under that service in the registry.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess

See if you are able to click on and read all the sub folders under it, let me know if you get any permission denied errors.

Shane

Wiloroc · « **Reply #22 on:** May 11, 2014, 06:37:40 pm »

Ok, Here are some screenshots of what I found. I could access everything under sharedaccess. Some had permissions that seemed funky - screen shots.

Let me know what you think

Shane · « **Reply #23 on:** May 12, 2014, 12:10:05 pm »

MpsSvr shouldnt be listed in there, try removing that and reboot and see what happens

Shane

Wiloroc · « **Reply #24 on:** May 13, 2014, 07:04:13 am »

No change.

Went through every sub folder in "shared access" to be sure it was removed.