[SOLVED] Windows Defender can't change some of your settings. Error code (0x8007045b)

Status
Not open for further replies.
Go to computer Settings > Privacy & Security > Windows Security > Open Windows Security

Take a screenshot of what you get in the Security at a glance window.
 
Select Dismiss for the OneDrive set up in the Virus and Threat Protection section.

After that:

Check services with FSS
  • Please download Farbar Service Scanner and save it on your Desktop. IMPORTANT.
  • Right click on the tool icon and run it as administrator.
  • Make sure all the options are checked.
  • Click on the Scan button.
  • It will create a log (FSS.txt) on your Desktop.
  • Copy and paste the log's content to your next reply.
 
Thank you. However, we will continue tomorrow.

Task: fix the Windows Defender Firewall Service.
 
Hi, Mikuro.

Let's continue.


1. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system
  • Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.
Code: 
Start::
CreateRestorePoint:
CloseProcesses:
DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\mpssvc

StartRegedit:
Windows Registry Editor Version 5.00

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc]
"DependOnService"=hex(7):6d,00,70,00,73,00,64,00,72,00,76,00,00,00,62,00,66,00,\
  65,00,00,00,6e,00,73,00,69,00,00,00,00,00
"Description"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23091"
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23090"
"ErrorControl"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,02,00,00,00,60,ea,00,00,02,00,00,00,60,ea,00,00,02,00,00,00,60,ea,00,00
"Group"="NetworkProvider"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,\
  00,65,00,4e,00,6f,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,46,00,69,00,\
  72,00,65,00,77,00,61,00,6c,00,6c,00,20,00,2d,00,70,00,00,00
"ObjectName"="NT Authority\\LocalService"
"RequiredPrivileges"=hex(7):53,00,65,00,41,00,73,00,73,00,69,00,67,00,6e,00,50,\
  00,72,00,69,00,6d,00,61,00,72,00,79,00,54,00,6f,00,6b,00,65,00,6e,00,50,00,\
  72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,41,00,75,\
  00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
  00,00,53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,00,6f,00,74,00,69,\
  00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\
  53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,47,00,6c,00,6f,00,62,00,61,\
  00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,\
  65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,\
  00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,\
  6e,00,63,00,72,00,65,00,61,00,73,00,65,00,51,00,75,00,6f,00,74,00,61,00,50,\
  00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,00,00
"ServiceSidType"=dword:00000003
"Start"=dword:00000002
"SvcHostSplitDisable"=dword:00000001
"SvcMemHardLimitInMB"=dword:0000001b
"SvcMemMidLimitInMB"=dword:00000014
"SvcMemSoftLimitInMB"=dword:0000000c
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  6d,00,70,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters\ACService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Parameters\PortKeywords]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,00,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,85,00,02,00,01,01,00,00,00,00,00,\
  05,0b,00,00,00,00,00,14,00,9f,00,0e,00,01,01,00,00,00,00,00,05,12,00,00,00,\
  00,00,18,00,9d,00,0e,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
  00,18,00,85,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

EndRegedit:

EmptyTemp:
End::
  • Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.[/*]
  • Press the Fix button once and wait.
  • FRST will process fixlist.txt
  • When finished, it will produce a log fixlog.txt on your Desktop.
  • Post the log in your next reply.

2. Check services with FSS
  • Run the tool as you did before.
  • Copy and paste the log's content to your next reply.


In your next reply please post:
  1. The fixlog.txt
  2. The FSS.txt
 
in the Search area type Services and select the item when it appears. Find Windows Defender Firewall Service, double click on it and make sure the Start-up is Automatic. Click on Start to start it. What happens?
 
DR M said:
in the Search area type Services and select the item when it appears. Find Windows Defender Firewall Service, double click on it and make sure the Start-up is Automatic. Click on Start to start it. What happens?
Click to expand...
The start-up is automatic and the status of the service is "starting". Buttons such as "start" "stop" "pause" and "resume" are all greyed out. I also notice that it shifts from starting to stopping then switches back to starting.
 
Go to computer Settings > Privacy & Security > Windows Security > Open Windows Security

Still no Firewall & Network Protection?
 
1000048210.jpg

Still no Firewall and Network Protection :(
 

Attachments

  • 1000048209.jpg
    1000048209.jpg
    67.6 KB · Views: 6
How did you go to the second screenshot above?

Go to Domain, Private, Public networks. What happens when you try to turn on the Microsoft Defender Firewall?
 
1. I went to the second screenshot above by manually typing Firewall and network Protection in the searchbar.
2. The switch for turning on Microsoft Defender Firewall on everything is greyed out. I cannot click it.
 
Sign in with Safe mode, as you did before.

After that:

Another FRST fix

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system
  • Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.
Code: 
Start::
CMD: netsh firewall set opmode mode=ENABLE exceptions=enable
End::
  • Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
  • Press the Fix button once and wait.
  • FRST will process fixlist.txt
  • When finished, it will produce a log fixlog.txt on your Desktop.
  • Post the log in your next reply.

Restart the computer and check the Firewall and network protection.
 
Here is the log for the FRST fix
The same thing happens upon checking the firewall and network protection; the option to turn on the firewall is still greyed out.
Checking services, its still the same thing, it is stuck on "starting" and "stopping".
 

Attachments

Yes... the command I used above no longer works.

Try this instead as a fix:

Code: 
Start::
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state ON
End::

Restart and check again.
 
Here is the new fix log
In the services, it is still the same thing, the service is stuck on "stopping" and "starting"
In settings, still the same thing; option to turn on firewall is greyed out. :(
 

Attachments

The commands didn't run, because the service is not running.

Well, I'm getting out of options. I'll need some time to think about the situation.

Until then, please do this:

In the Search area type CMD and select to run it as administrator.
Type gpresult/z >settings.txt and hit Enter. Then type notepad settings.txt and hit Enter to open the Notepad.
Copy and paste the content of the notepad in your next reply.
 
DR M said:
The commands didn't run, because the service is not running.

Well, I'm getting out of options. I'll need some time to think about the situation.

Until then, please do this:

In the Search area type CMD and select to run it as administrator.
Type gpresult/z >settings.txt and hit Enter. Then type notepad settings.txt and hit Enter to open the Notepad.
Copy and paste the content of the notepad in your next reply.
Click to expand...
The notepad would'nt open because it is somewhat related to MS Store. Which has been malfunctioning due to the firewall being off. That is why I also cannot use snip and sketch and other applications that are related to the MS store. I tried to do your latest command but the notepad did not open. I currently use Wordpad for opening the logs.
 
Status
Not open for further replies.
Back
Top