Main Forum > Tweaking.com Support & Help

Repair "Firewall" Advanced tab

<< < (2/6) > >>

Shane:
What tools have you run to check for any infections?

The 3 I normally use are

tdsskiller.exe
combofix.exe
Malware Bytes Anti Root Kit

Shane

tony24:
Hi Shane

I have used all three. At present, I don't beleive that I have a virus, but possibly the aftermath of one.

Tony

Shane:
OK try this then.

The firewall rules are stored here

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess

Go to that key and export it out for a backup. Then delete that key. Once deleted run my repair tool and it will put it back plus the defaults. See if that gets you going :-)

Right now my repair doesnt delete it, it just simply puts the default values back in, any extras stay. If you want to see what it puts back go to the repair windows program folder and files\regfiles\xp\sharedaccess.reg

I dont have it remove the regkey because it would remove peoples rules they have made, thus making them mad lol. The defaults do the trick when a virus removes the whole key.

Let me know how it goes :-)

Shane

tony24:
Hi Shanne

I have followed your instructions, but it is exactly the same as before. I even ran it all a second time, but to no avail.

Tony

Shane:
Then the problem is somewhere else.

The firewall relys on WMI heavily. While my WMI repair should have covered that lets make sure WMI is working like it should.

Go to C:\Windows\System32\wbem\Repository

Get a screen shot of the files showing their sizes for me :wink:

Shane

Navigation

[0] Message Index

[#] Next page

[*] Previous page