Windows Firewall

Howdy Everyone,

 

Thanks for he help.

 

I'll uninstall and reinstall, as suggested.  Then I'll let you know what happened.

 

Here's an interesting one, though.  When I tried to shut down last time to check the Firewall settings on re-start, my Internet Explorer started itself by itself sixteen times.  It has done that twice now.  I can use the X to get the process stopped.  Then I can X out of every open tab.  It's a bit weird.

 

But a Norton scan says I don't have any problems.

 

By the way, so far, none of the suggestions for Windows Firewall has worked.  That's why I'll do the reinstall.

 

Here's another one.  I'm starting to have problems with my ATI Mobility Radeon 7500.  When I type, the typing doesn't keep up with my fingers.  And I don't type all that fast.  I don't think this is a related problem.  But I figured I might as well tell you about it.

 

For those of you who are just starting to read these posts, I reinstalled and updated both XP and Norton last week.

 

Any ideas?  In the meantime, I'll start on the uninstall and follow the instructions you've given me and I'll run the registry cleaner along the way.

 

Thanks again

Hi BTU,

 

This is some strange behavior. Perhaps we should eliminate the possibility of malware on your system.

 

Download, install and update the FREE version of Malwarebytes.

 

Once those steps are completed, unplug from the internet, restart your computer in SAFE MODE and run a complete Malwarebytes scan. If items are found, follow the Malwarebytes suggested procedure.

 

This next step is optional but recommended. Delete your System Restore Points by turning off System Restore. Many infections will become embedded in your previous restore points - therein lies the possibility that they may return. Also you may find that the malware has already erased your restore points.

 

Restart your computer in Normal Mode and check how things are working.

 

Once you are completely sure your computer is clean, you can turn ON Sytem Restore.

 

Please let us know how you do with this.


Phil_D wrote:

Hi BTU,

 

This is some strange behavior. Perhaps we should eliminate the possibility of malware on your system.

 

Download, install and update the FREE version of Malwarebytes.

 

Once those steps are completed, unplug from the internet, restart your computer in SAFE MODE and run a complete Malwarebytes scan. If items are found, follow the Malwarebytes suggested procedure.

 

This next step is optional but recommended. Delete your System Restore Points by turning off System Restore. Many infections will become embedded in your previous restore points - therein lies the possibility that they may return. Also you may find that the malware has already erased your restore points.

 

Restart your computer in Normal Mode and check how things are working.

 

Once you are completely sure your computer is clean, you can turn ON Sytem Restore.

 

Please let us know how you do with this.


 

Instructions for Starting your Computer in Safe Mode: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam.

Hi Phil,

 

I've done all that you suggested.  I ran Norton, the registry cleaner, and Malwarebytes in Safe Mode with System Restore turned off.  There are no threats according to them.

 

Now that I've turned System Restore on and started in Normal Mode, I still have the Windows Firewall coming up hand in hand with Norton.

 

I also can't completely clean the registry with the registry cleaner.  Upon further scans, I still have some problems in the areas of File Path, Application Path, and Empty Registry Keys.  Once I clean as far as I can, I've re-started and have even more registry problems than I had when I started.

 

The computer, including the BIOS, is completely updated.  Is there any such thing as a BIOS virus?  Are they cleanable?  Could I have one?

 

Should I just go ahead and re-install XP from the ground up?  It's in its own partition, so it goes quickly.

 

Thanks

Have you used the N.R.T. and re-installed?  I would run the N.R.T. twice, that is, once you have re-started from using it once, use it again and then re-start.  Thanks!

Yep.

 

Used the removal tool twice.

 

I'm stumped.

 

Thanks

Hi

 

You can't can't completely clean the registry with the registry cleaner, Do you get an error message, Something like "You don't have permission" which means certian registry keys are locked, so the entry can not be altered or deleted.

 

I have come across this before myself, when a registry key needs deletion or altered, and sometimes the registry cleaner does say it is fix. but scan again and the registry key pops back up.

When manually searching for it, (via regedit) the key is found and when trying to delete it, Can't, You have to first change the permissions for the key in question.

 

Remember for a lot of these things like in the registry you need a full administration rights.

 

For the XP Firewall to be continually turned back on at restart, quite possibly there is a startup entry under these 2 areas

 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 

 

If you use Hijackthis to scan, look at the "O4" section (startup section), "O2" (Browser helper section) and "O23" (windows services) and F0 to F3 (Auto load programs).

Be aware that there are legit programs in amongst any bad entries.

 

See  http://www.bleepingcomputer.com/tutorials/tutorial42.html

 

 

Quads 

Jeez,

 

This is getting way over my head.

 

I think I'll just reinstall XP unless someone tells me that will cause even more problems.  From what I know, which obviously isn't much, I'm guessing that a reinstallation will solve all problems.  Am I correct in saying this?

 

Thanks

Everything you've described (a Security Center that doesn't behave as it should, a registry resisting cleaning, software not doing the expected, a slowdown in keystrokes) all suggests malware.  It could be something new that you don't have signatures for.  Reinstalling XP over an infected system won't always clear out a virus.  Do you have an image of your system that you can reinstall.  That would mean backing up all data files (docments, email, address books, pictures, music, video, financial, tax, favorite places, bookmarks, etc) that have been modified since that time; and also that you need to reinstall all programs that were added since then.  It is tedious and a pain, but it is also the safest strategy.

 

Perhaps someone here has another solution.  This is when I want to be wrong, believe me.

Hi There,

 

I'm not sure what you mean by Image.

 

IBM has the XP installation file stored in a separate partition.  All I have to do is push go and it goes.

 

I have Norton and SP3 on a removeable hard drive.  That's pretty easy.

 

All of my data is backed up on a removeable hard drive, too.  The only programs I need to install right now are in Office.

 

If I don't have the signatures, Norton should have them soon. Right?

 

Remember, also, that, according to Lenovo's tool set, my ATI Radeon 7500 appears to be failing.  It failed the Primary Surface Test.  Some speculate that's the reason for problems typing.

 

I'm up for ideas!

 

Thanks

Hi, BTU.

 

I also have a Lenovo.  If you have some of the same basic software, then you should have Rescue & Recovery.  R&R offers a number of recovery options, but essentially they come in three flavors:

1.  Merely recover specific files.  This is if you have lost something important and have taken the time to back it up.

2.  Reinstall XP - puts back the system XP files, but does not necessarily clean out infections.

3.  Restore your system to an earlier state.

     a.  Restore it to the state it was shipped to you in.

     b.  Restore it to some later state for which you backed it up using one of the backup options in R&R.

 

Both cases of 3 are considered to be "images."  They are snapshots of your harddrive at certain points in time.  Your current harddrive is basically reformated with one of these images replacing the current content.

Hi There,

 

Perfect.  I was talking about going for what you're calling 3 (a).

 

If I re-install to the state the machine was shipped to me in, which is 3(a), will I completely wipe out a virus, if there is one?

 

After that, I'd get everything else, including SP3 and the NIS 2009 installation file, off my external drive.

 

Thanks


BTU wrote:

Hi There,

 

Perfect.  I was talking about going for what you're calling 3 (a).

 

If I re-install to the state the machine was shipped to me in, which is 3(a), will I completely wipe out a virus, if there is one?

 

After that, I'd get everything else, including SP3 and the NIS 2009 installation file, off my external drive.

 

Thanks


 

This would usually wipe out any Internet Threats on your system.

Hi Mij,

 

This one is more or less for you.

 

When I scan my IBM T-42 with Norton, does the installation partition get scanned?  If it does, then I should be clean, shouldn't I?

 

If I re-install XP from an XP disc, does the IBM partition get wiped out with all potential viruses which could hide there?  If the partition is wiped out, that's OK with me.

 

Here's a link to the Lenovo forum.  Those guys think I have a hardware problem.

 

http://forums.lenovo.com/lnv/board/message?board.id=T_Series_Thinkpads&thread.id=22623&view=by_date_ascending&page=1

 

I'd love to know what you think.

 

Thanks for the help.

How does turning on Windows Firewall affect Norton 360?  I tried to turn the firewall on, then Norton advised me to turn it off.  I'm trying to block pop up's since the Norton 360 says it does not do that.  Thanks..

Hello Everyone, This morning I booted up and immediately I had problems. Disconnects and worse. Finally I tried a full scan and that locked up my PC. I ran the Norton problem detector and it found a conflict with the Windows Firewall. The Windows Firewall was running and I don’t have a clue how that happened but it’s fixed now.The only firewall running is Norton. Why would Windows Firewall come on out of the clear blue when yesterday things were normal? I’m running broadband Ethernet with no router. Thanks, Paul

Not to worry.  We've all bunged something up. :smileywink:

Yes, turn the Windows Firewall off.

 

You should never have two firewalls at the same time.

 

Yep. If you have Norton Internet Security, it has it's own firewall, and leaving the Windows firewall might cause conflicts and slowdowns.

 

However, Norton Internet Security should disable the Windows firewall by itself, when it is installed. But if it hasn't, go ahead and do it manually.

 

If you by any chance have Norton AntiVirus, however, it does not come with a firewall, and in that case, you should leave the Windows firewall on.

I have Norton Security 2011, so it should have disabled the windows firewall, but it is working again, explains the go slow