Main Forum > General Computer Support

Missing All Windows Firewall Predefined Rules

<< < (2/3) > >>

Zentard:

--- Quote from: Shane on July 23, 2012, 12:20:14 pm ---
When you turn the firewall off do things work fine?

Shane

--- End quote ---

No, they did not.  Vista has a nasty little quirk involving Windows Firewall.  If the predefined rules are not present, you cannot use the features that they defined.  Even if Windows Firewall is turned off.

Shane:
The redirect virus could have been causing a lot of the problems.

tdsskiller.exe is pretty good at removing those infections :wink:

Might be a good idea to run tdsskiller.exe just to make sure, it is a fast scan.

Shane

Zentard:
Yes, the redirect virus was causing me to encounter other viruses from...  well, redirection.  One of those other viruses was the one that wiped out my firewall.  After removal of the "other" viruses, the redirect virus was still going strong and proved to be ridiculously difficult to remove until it just up and disappeared.  It could still be hiding out even though I haven't experienced any of it's symptoms and haven't found any traces of known redirect rootkits anywhere, so thanks for the tip about TDSSKiller.exe, I'll be running that ASAP.

EDIT: After scan, TDSSKiller found the following: Rootkit.Boot.Sinowal.b, and Rootkit.Boot.Pihar.c.  Thanks again.

Shane:
tdsskiller.exe, combfix.exe and malwarebytes along with the free version of Avast are my normal tools when cleaning up a customers machine. I also know how to find an infection manually so that helps when the scanners dont find anything :wink:

Shane

Zentard:
Redirect rootkit re-installed itself and symptoms reappeared after running TDSSKiller.exe and eliminating a couple files.  Kinda like bashing a wasp's nest with a baseball bat I guess.  What pain in the A.  I'll try some of the other tools you mentioned, and try to look for it by hand again.

Navigation

[0] Message Index

[#] Next page

[*] Previous page