microsoft firewall/ics service no longer works after reboot

[jason blake]

I have seen on other posts that after installing the
software and running a scan and removing the found
entries after rebooting the microsoft firewall does not
work. The microsoft firewall/ics service does not start.

I have found the cause of the problem is after the
spyware software has removed Newdotnet spyware. I have
seen this on 2 Windows XP SP2 pcs.

One had restore turned off. I cant get the firewall
service to start again on this pc, Ive tried reinstalling
SP2 does anyone no how to reinstall the firewall service.

 

[Guest]

A few weeks ago i was infected with an unknown virus which
the best of AV's did not detect. Microsoft does have an
article about this is their knowledge base. Not related to
M$ AntiSpyware but they do mention how to start the
firewall. If that doesnt help, a quick google search will
surely get you what you want.

 

[Tom]

Have encountered the same one one out of three installs.
Additional error message if attempting to start service
is "Error 10047: An address incompatible with the
requested protocol was used." In addition the AntiSpyware
icon does not appear in system tray.

 

[jason blake]

yes tom that 10047 message does appear.
As i stated in the earlier post after doing some more
investigation buy taking one of the Pcs back using system
restore a few times it was the removal of the newdotnet
and its linked spyware entry something like iptrace. it
was this that caused the firewall service not to start
next time the pc is rebooted.
Perhaps someone else can also prove my findings

 

[jason blake]

it appears that this sort of problem can happen
after the removal of certain types of spyware which
modifys the registry

here are some possible fixes

im going to try B first.

A. Fix winsock by running following:
NETSH WINSOCK RESET

B. Fix dependencies of SharedAccess service by running

REG DELETE
HKLM\System\CurrentControlSet\Services\SharedAccess /v
DependOnService

REG ADD
HKLM\System\CurrentControlSet\Services\SharedAccess /v
DependOnService /t REG_MULTI_SZ /d "Netman"

C. http://www.spychecker.com/program/winsockxpfix.html

 

[saigalt]

so guys....since i had the same problem i did the simple
ting and uninstalled AS...but stillcant get the firewall
to run. Can someone tell me how to do this ?