Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Windows firewall does not stay on. I have set the firewall to be on many
many times, but for some reason every so often I will get a Security
Center alert saying that the firewall is off. Also, it does not stay on
after a restart - I have to turn it on every time I restart Windows. This
does not happen at the office where my computer has XP professional. Is
there a setting to change to stop this from happening?
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Joseph Flynn wrote:
> Windows firewall does not stay on. I have set the firewall to be on
> many many times, but for some reason every so often I will get a
> Security Center alert saying that the firewall is off. Also, it does
> not stay on after a restart - I have to turn it on every time I
> restart Windows. This does not happen at the office where my computer
> has XP professional. Is there a setting to change to stop this from
> happening?
Do you know if the computer is 100% spyware and virus-free? If you
aren't sure, here are general malware removal steps. If you feel your
computer is clean, then what did you use to determine this? Also, do
you have a third-party firewall installed?
1) Scan in Safe Mode with current version (not earlier than 2003)
antivirus using updated definitions.
2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
programs are free, so use them both since they complement each other.
There is a new version of CWShredder from Intermute. I would not
install the other Intermute programs, however. Alternately, there are
CoolWebSearch malware removal steps at SilentRunners.
Be sure to update these programs before running, and it is a good idea
to do virus/spyware scans in Safe Mode. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options).
HijackThis is an excellent tool to discover and disable hijackers, but
it requires expert skill. See below for HijackThis links. A combination
of HijackThis and About:Buster works well in removing the About:Blank
homepage hijacker. Again, this is an expert tool and novices should get
help with it.
3) If you are running Windows ME or XP, you should disable/enable System
Restore because malware will be in the Restore Points. With ME, you
must disable System Restore completely. With XP, you can delete all but
the most recent (presumably clean) System Restore point from the More
Options section of Disk Cleanup (Run>cleanmgr).
4) Make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update.
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Thanks! I have done most of those things - I use Norton AV and Spybot
Search & Destroy regularly, and I run a 3rd party firewall in addition to
the Windows firewall. Had some issues with IE being hijacked a few months
ago so we stopped using it (did try HijackThis also, but only once).
Any specific suggestions about keeping Windows fiewall turned on?
Thanks,
Joseph
In article <uvzK7346EHA.4040@TK2MSFTNGP14.phx.gbl>,
malke@nospoonnotreally.com says...
>
>
>Joseph Flynn wrote:
>
>> Windows firewall does not stay on. I have set the firewall to be on
>> many many times, but for some reason every so often I will get a
>> Security Center alert saying that the firewall is off. Also, it does
>> not stay on after a restart - I have to turn it on every time I
>> restart Windows. This does not happen at the office where my computer
>> has XP professional. Is there a setting to change to stop this from
>> happening?
>
>Do you know if the computer is 100% spyware and virus-free? If you
>aren't sure, here are general malware removal steps. If you feel your
>computer is clean, then what did you use to determine this? Also, do
>you have a third-party firewall installed?
>
> 1) Scan in Safe Mode with current version (not earlier than 2003)
>antivirus using updated definitions.
>
>2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
>programs are free, so use them both since they complement each other.
>There is a new version of CWShredder from Intermute. I would not
>install the other Intermute programs, however. Alternately, there are
>CoolWebSearch malware removal steps at SilentRunners.
>
>Be sure to update these programs before running, and it is a good idea
>to do virus/spyware scans in Safe Mode. Make sure you are able to see
>all hidden files and extensions (View tab in Folder Options).
>
>HijackThis is an excellent tool to discover and disable hijackers, but
>it requires expert skill. See below for HijackThis links. A combination
>of HijackThis and About:Buster works well in removing the About:Blank
>homepage hijacker. Again, this is an expert tool and novices should get
>help with it.
>
>3) If you are running Windows ME or XP, you should disable/enable System
>Restore because malware will be in the Restore Points. With ME, you
>must disable System Restore completely. With XP, you can delete all but
>the most recent (presumably clean) System Restore point from the More
>Options section of Disk Cleanup (Run>cleanmgr).
>
>4) Make sure you've visited Windows Update and applied all security
>patches. Do not install driver updates from Windows Update.
>
>5) Run a firewall.
>
>Links to help with malware:
>
>Software/Methods:
>http://www.safer-networking.org - Spybot Search & Destroy
>http://www.lavasoftusa.com - Ad-aware
>http://www.majorgeeks.com - good download site
>http://www.intermute.com/spysubtract/cwshredder_download.html
>http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
>
>HijackThis:
>http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
>Eshelman
>http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
>forum
>http://www.wilderssecurity.com/
>http://forums.tomcoyote.org/
>http://www.spywareinfo.com/forums/
>
>General:
>http://forum.aumha.org/ - look under "Security" for various forums
>http://rgharper.mvps.org/cleanit.htm
>http://mvps.org/winhelp2002/unwanted.htm
>http://www.aumha.org/a/parasite.htm - The Parasite Fight
>http://www.spywarewarrior.com/rogue_anti-spyware.htm
>
>Malke
>--
>MS MVP - Windows Shell/User
>Elephant Boy Computers
>www.elephantboycomputers.com
>"Don't Panic!"
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.