Windows Firewall damaged by 'Windows 7 antivirus 2012'

Question

I run Windows 7. I think 64bit, not sure.
I have been getting hit with a lot of rogue antiviruses and up till now have been fighting them off, but last night I was hit by a new rendition of "Windows 7 Antivirus 2012".
I got a window saying explorer.exe wanted to make changes to my computer, I would tell it no and each time it would return. In between the constantly returning window I managed to open the task manager, find the process, and end the process. I then found
the file and destroyed it with killbox.
Everything seems to be back in working order now, except for the firewall. Every page in the control panel for windows firewall gives me an Administrator button that says use reccomended settings', when I click it it says it can't do that and gives
me error 0x800705b4, which I understand to be an authentication error.
The last time I had this I tried to reset my firewall with an admistrator command prompt, it would tell me it could not load wshelper.dll, so I did some stuff I cannot remember to reset my winsock and was then able to reset my firewall and all was good again.
This time when I go into command.com and type 'netsh advfirewall reset' instead of the DLL message, I get 'An error occoured while attempting to contact the  Windows Firewall service. Make sure the service is running and try your request again'.
In my attempts to fix this myself I have been to the device manager. I had it 'show hidden devices' and located my Windows Firewall Authorization driver. I found it had been stopped, and so I started it again. It currently says it is started, but nothing
has changed functionally.
I have been into Services as an Administrator; Windows Firewall is not there. I was also told to look for Windows Event Controller and Base Filtering Engine and they are not there either.
I have done an administrator command promtp with sfc /scannow and the first time it said it had made changes and the second time it said everythign was alright but nothing functionally has changed.
I have been told to enter the following command prompts and gotten - the following results
netsh advfirewall reset - error stated above
net start mpsdrv - The requested service has already been started
net start bfe - The service name is invalid
net start mpssvc - the service name is invalid
regsvr32 firewallapi.dll - Popup window stating DllRegisterServer in firewallapi.dll succeeded
no functional change after that.
I have also been told to try:
sc config wuauserv start= auto - [SC] ChangeServiceConfig SUCCESS
sc config bits start= auto - [SC] ChangeServiceConfig SUCCESS
sc config DcomLaunch start= auto - Access is denied.
net stop wuauserv - The Windows Update service was stopped successfully.
net start wuauserv - The Windows Update service was started successfully.
net stop bits - The Backround Intelligent Transfer Service was stopped successfully.
net start bits - The Backround Intelligent Transfer Service was started successfully.
net start dcomlaunch - The requested service has already been started.
I have also tried a system restore, but whatever is screwing with my firewall is also screwing with that an it will not complete successfully.
A Windows XP thread steered me toward a file called, I believe, netfw.inf in my windir folder, related to the firewall. This does not seem to be on my Windows 7 machine and I have been unable to find the Windows 7 equivalent.
So, it appears my firewall is gone, or just pretending to be. I fixxed it last time by making some correction to my winsock but I cannot seem to find the process I used for that. Additionally, Microsoft Security Essentials has dissapeared from my system
tray, though otherwise seems to be working fine.
I am confident that this can be fixxed without a wipe and reinstall. Please help.

Answer 1

Hi
Make sure that PC is clean(free from zero access rootkit before trying this fixes)
This firewall issue is commonly found on vista and windows 7 (64 BIT OS)
It is recommended to contact malware removal forums to remove it first and try the fix
Run the services repair tool by ESET
http://kb.eset.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe
Restart the PC.Firewall and critical missing services should work.
Manual Fix
Download both the registry files
Windows firewall - 
Firewall
Base filtering engine - 
BFE
Launch them,You should get a UAC prompt now
Click YES  & Restart your PC
Now,Press Windows+ R key and type
regedit and click ok
go to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE
Right click on it-permissions
Click on ADD and type
Everyone and click ok
Now Click on Everyone
Below you have permission for users
Select full control and click ok
Now,open RUN and type
services.msc and click ok
start base filtering engine service and then windows firewall service
If you still have this error
Windows could not start Windows Firewall on local Computer. See event log, if non-windows services contact vendor. Error code 5.
Download and launch this key,click YES
Shared access
give full control permission to this key similar to previous one
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess
Right click on it -permissions
Click on Add and type
Everyone and select Full control
You should able to start firewall now
You may also be missing security center windows defender ,BITS and windows update services
Download
Security center  -wscsvc
Windows defender - windefend
BITS    -  BITS
Windows update  - 
wuauserv
Launch them and click YES when you get a UAC prompt
Good luck