Hello all, I just clean installed Windows 7 x64 followed by my default slew of applications. The system is a Dell Precision M6500, although I don't think this is system specific. I noticed that some programs were not working as expected, and realized I never turned off Windows Firewall. To my surprise, it was already off but not in a good way. If I go to Services and try to start, I get the following message: "Windows could not start the Windows Firewall on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 13." Event Log has the following entry: Log Name: System Source: Service Control Manager Date: 1/31/2011 1:27:45 PM Event ID: 7024 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The Windows Firewall service terminated with service-specific error The data is invalid.. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7024</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-01-31T18:27:45.392022900Z" /> <EventRecordID>10225</EventRecordID> <Correlation /> <Execution ProcessID="884" ThreadID="5144" /> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Firewall</Data> <Data Name="param2">%%13</Data> </EventData> </Event> I have already verified the permission for MpsSvc user account on the registry keys as outlined in Microsoft Article ID: 943996. I'm 100% positive the system is free of malware and I also ran MalwareBytes just to be sure. Ideas?

Check if the below link helps http://social.answers.microsoft.com/Forums/en-US/vistasecurity/thread/d1377d1c-763f-4a2d-8cc0-160a181762d4

Doesn't look like it. My WMI Repository reports as consistent.

Check if the below link helps http://social.answers.microsoft.com/Forums/en-US/vistasecurity/thread/d1377d1c-763f-4a2d-8cc0-160a181762d4

Hi, Thanks for posting in Microsoft TechNet Forum. After checking this issue, I suggest you try system restore to get back to a good time to check the result. If this issue persists, try to use system file fix tool to troubleshoot: How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7 And you can check the status of dependence service: · Base Filtering Engine Also, it could be caused by software conflicts, I suggest you to perform a Clean Boot to check the result. Hope it helps. Alex Zhao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

System Restore didn't work. SFC didn't work. I get: Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection did not find any integrity violations. Clean Boot did not work.

The SFC check did not find any problems. The Clean Boot didn't do anything either.

Ok, I cleared all Event Logs, then did a reboot. Here's the errors that show up on every boot in the System Log: Log Name: System Source: Service Control Manager Date: 2/1/2011 10:44:39 PM Event ID: 7016 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The RunAppSvc service has reported an invalid current state 0. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7016</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T03:44:39.581791900Z" /> <EventRecordID>11828</EventRecordID> <Correlation /> <Execution ProcessID="884" ThreadID="4348" /> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data Name="param1">RunAppSvc</Data> <Data Name="param2">0</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 2/1/2011 10:45:24 PM Event ID: 7024 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The Windows Firewall service terminated with service-specific error The data is invalid.. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7024</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T03:45:24.039225500Z" /> <EventRecordID>11950</EventRecordID> <Correlation /> <Execution ProcessID="884" ThreadID="1004" /> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Firewall</Data> <Data Name="param2">%%13</Data> </EventData> </Event> Log Name: System Source: RemoteAccess Date: 2/1/2011 10:45:25 PM Event ID: 20152 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The currently configured authentication provider failed to load and initialize successfully. The requested name is valid, but no data of the requested type was found. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="RemoteAccess" /> <EventID Qualifiers="0">20152</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T03:45:25.000000000Z" /> <EventRecordID>11951</EventRecordID> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data>The requested name is valid, but no data of the requested type was found. </Data> <Binary>FC2A0000</Binary> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 2/1/2011 10:45:24 PM Event ID: 7016 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The RunAppSvc service has reported an invalid current state 0. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7016</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T03:45:24.772426800Z" /> <EventRecordID>11981</EventRecordID> <Correlation /> <Execution ProcessID="884" ThreadID="2708" /> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data Name="param1">RunAppSvc</Data> <Data Name="param2">0</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 2/1/2011 10:45:27 PM Event ID: 7024 Task Category: None Level: Error Keywords: Classic User: N/A Computer: NMARQUES-M6500 Description: The Routing and Remote Access service terminated with service-specific error The requested name is valid, but no data of the requested type was found.. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7024</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-02-02T03:45:27.617632000Z" /> <EventRecordID>11985</EventRecordID> <Correlation /> <Execution ProcessID="884" ThreadID="1008" /> <Channel>System</Channel> <Computer>NMARQUES-M6500</Computer> <Security /> </System> <EventData> <Data Name="param1">Routing and Remote Access</Data> <Data Name="param2">%%11004</Data> </EventData> </Event>