firewall not on

system · 2006-12-10T15:35:43.000Z

darn!
rebooted twice and nothing has changed

Do i need to go back to services and restart the things i stopped?

system · 2006-12-10T15:40:58.000Z

i see they restarted all by themselves

Lisandro · 2006-12-10T18:31:28.000Z

zeb post:44:

but when i did a search for symantec in files, 15 things came up should i delete all these or not worry about them for now?

Remove NAV through Add/Remove programs from Control Panel. Boot. (if you have any Symantec product yet: LiveRegistration, LiveUpdate, etc.).
Use Symantec removal tool following the three steps defined in the SymNRT tool info or here.
Boot.
Install avast! Boot.
See what you get.

Full SymNRT info:

Download and save these three files to the Windows desktop:
a) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/MSIFIX.bat
b) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SymNRT.exe
c) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SYMMSICLEANUP.reg
Run the three files that you just downloaded
a) On the Windows desktop, double-click the MSIFIX icon.
Click Run.
A black window may appear very briefly.
b) On the Windows desktop, double-click the SymNRT icon.
Click Run.
Click Next.
Click I accept the License Agreement, and click Next.
Type the letters and numbers that you see in the white box, and then click Next.
Click Yes or OK at each prompt.
You may need to click more than once. Your computer may be restarted for you more than once.
You may be asked to repeat some steps after the computer restarts.
c) On the Windows desktop, double-click the SYMMSICLEANUP icon.
Click Run, and then click Yes.
Click OK.
Boot.

system · 2006-12-10T22:21:40.000Z

Tech post:48:

Remove NAV through Add/Remove programs from Control Panel. Boot. (if you have any Symantec product yet: LiveRegistration, LiveUpdate, etc.).

Use Symantec removal tool following the three steps defined in the SymNRT tool info or here.

Boot.

Install avast! Boot.

See what you get.

where you wrote “install Avast” was i supposed to remove it first and then download it again?
if yes, is this before or after i run those 3 files?

Lisandro · 2006-12-11T00:29:44.000Z

zeb post:49:

where you wrote “install Avast” was i supposed to remove it first and then download it again?
if yes, is this before or after i run those 3 files?

Well, you don’t have to uninstall avast…
Remove Norton will work with or without avast. So you can run the three files now or whenever you want.
You can download a new avast setup file and install it, or just update your installation through the Internet (update program).

system · 2006-12-11T01:47:02.000Z

Well, i have done all the above and nothing has changed.

Lisandro · 2006-12-11T01:52:02.000Z

Let’s try the last resort…

Uninstall avast from Control Panel first
Boot
Use Avast Uninstall for complete uninstallation
Boot
Install again by this command on the folder you’ve donwload and save the install file: setupeng.exe /forceinstall
Where setupeng.exe is the name of the executable

system · 2006-12-11T21:11:44.000Z

Sorry if I missed this in previous posts…

Are you running XP home or professional?

Did you get this computer new or from a friend? I’m wondering if group policy was previously applied to the PC before you recieved it.

system · 2006-12-11T22:24:55.000Z

I tried the last resort and still nothing has changed.
I am running XP home.
I bought it new from Dell.
I seemed to notice the security balloon start popping up
when I first downloaded Avast,
I just assumed it was because of that and not worry about it.
but then i came here to check.

So now I am wondering if i should just download a firewall.
Is that complicated?
because I am not really computer smart.
THANK YOU all for your help!

system · 2006-12-12T19:34:41.000Z

Just bumping this up,
for any advice before i download a firewall. Thanks

DavidR · 2006-12-12T20:47:45.000Z

I seemed to notice the security balloon start popping up when I first downloaded Avast,

Sorry I haven't reread the whole thread but what security balloon, do you mean the avast Alert with accompanying ear splitting audio alarm ?

Installing a firewall is no different to installing a program, download the setup file and execute it.

Zone Alarm free http://www.zonelabs.com works fine with avast and has a reasonably friendly user interface. If you chose Zone Alarm free you will be asked a compatibility question, answer NO.

There are others, Sunbelt Kerio, Jetico, etc.
See some firewall tests for comparison, some are freeware but many are paid for versions http://www.firewallleaktester.com/tests.php. Also see http://www.thefreecountry.com/security/firewalls.shtml

system · 2006-12-12T22:08:36.000Z

Hi,
no, its the red windows security alert icon, that says I have no firewall on.
Thanks, I’ll take a look at the firewalls.

Lisandro · 2006-12-12T22:18:53.000Z

zeb post:57:

no, its the red windows security alert icon, that says I have no firewall on.

But, do you have a firewall?

Zeb, Windows Security Center does not give you ANY protection. It’s just a monitor that say what other products are protecting you.
Don’t worry that much. A lot of users include disable WSC.
You need a firewall and you need an antivirus. If you have them, cool

system · 2006-12-12T23:51:43.000Z

Yes but what about my screen shot back on page 2 or so.
it shows my firewall is off.

alanrf · 2006-12-13T08:07:12.000Z

Team -

is it not possible that zeb has been the victim of a trojan that has set up a group policy to prevent the turning on of the Windows built in firewall in an effort to keep the system vulnerable?

Any of our contributors familiar with the use of group policy in XP - it seems to be a less than well known area?

system · 2006-12-13T11:33:32.000Z

Oh my gosh! sure hope not.
if this is the case,
would downloading a new firewall still protect me?

DavidR · 2006-12-13T12:14:15.000Z

Because you have an issue with XP firewall not matter what the cause you shouldn’t delay in downloading and installing another firewall. Even if you had no problem with XP’s firewall it doesn’t provide outbound protection and we would recommend that got a third party firewall.

@ alanrf
The only trojan/malware relating to XP’s firewall that I have heard of is by changing registry entries to open a route into the system bypassing the XP firewall. I haven’t heard of anything using Group Policy to disable it and by disabling it that would draw attention to the problem, which wouldn’t be desirable.

system · 2006-12-13T23:24:31.000Z

well thank you all for your help!
I did download the zone alarm firewall.
so far it says-
278 intrusions have been blocked,
23 have been high rated.

does that sound like alot? and
what would the intrusions have been?

Lisandro · 2006-12-13T23:51:07.000Z

zeb post:63:

does that sound like alot?

In fact, not.

zeb post:63:

what would the intrusions have been?

From tentatives of knowing your IP to the ones who try to know who you are, etc.
To personal computers, very little of the hacking is tryed. Hackers want to get control of large networks, companies and famous sites, etc.
Of course, they could ‘test’ and ‘try’ on your computer… but very unprobable

DavidR · 2006-12-14T00:01:02.000Z

It sounds like you should switch off the warnings if they are on. Yes that isn’t unusual there are many infected systems out their trying to find other systems to infect (‘port scanning’ random IP addresses) or turn into zombies to send out spam or infection.

I never even look for attack detection stats in my firewall, they are history and the firewall is doing its job and blocking them. Basically it is the firewall trying to make you feel warm, fuzzy and protected. You could take the shields up check at grc.com. This checks the stealth of your system if it can’t be seen it is less vulnerable to attack. Your firewall should have logs and you should be able to check them, I don’t know how comprehensive these are in ZA free.

My system is very well stealthed and I don’t see that kind of activity, only 8 detections today, all ‘port scans’ all to port 445 http://www.grc.com/port_445.htm a common attack port, which should be looked after by your firewall.

Announcements