Virus has disabled windows firewall?

[Guest]

One of our employee's computers was infected with a virus that rebooted his
machine every 5 minutes or so. I found the virus and got rid of it but now I
cant enable the windows firewall. When I open properties on the network
connection and click on settings for firewall it says "Due to an unidentified
problem, Windows cannot display Windows Firewall settings." so I was
thinking maybe it disabled the firewall service but I cant seem to find out
what the service name is.

 

[Guest]

If this is the service name for the winxp firewall "Windows Firewall/Internet
Connection Sharing (ICS)" then it is missing from my services. How can I
reinstall the firewall if it has been removed?

 

[Malke]

One of our employee's computers was infected with a virus that
rebooted his
machine every 5 minutes or so. I found the virus and got rid of it
but now I
cant enable the windows firewall. When I open properties on the
network connection and click on settings for firewall it says "Due to
an unidentified
problem, Windows cannot display Windows Firewall settings." so I was
thinking maybe it disabled the firewall service but I cant seem to
find out what the service name is.

"Due to an unidentified problem, Windows cannot display Windows Firewall
settings" error, try:

Start>Run regsvr32 hnetcfg.dll [enter]

Malke

 

[Guest]

Thanks for responding Malke I ran the command but still the same results.
The ICS service is completely missing so if anyone knows how to reinstall ICS
please let me know. Looks like I might have to reintall windows.

One of our employee's computers was infected with a virus that
rebooted his
machine every 5 minutes or so. I found the virus and got rid of it
but now I
cant enable the windows firewall. When I open properties on the
network connection and click on settings for firewall it says "Due to
an unidentified
problem, Windows cannot display Windows Firewall settings." so I was
thinking maybe it disabled the firewall service but I cant seem to
find out what the service name is.

"Due to an unidentified problem, Windows cannot display Windows Firewall
settings" error, try:

Start>Run regsvr32 hnetcfg.dll [enter]

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 

[Malke]

Thanks for responding Malke I ran the command but still the same
results. The ICS service is completely missing so if anyone knows how
to reinstall ICS
please let me know. Looks like I might have to reintall windows.

Without knowing what viruses the machine had and whether the machine is
really clean, I can't tell you for certain what to do. In a work
situation, I'd probably just do a clean install. Most definitely
viruses can damage system files.

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/page2.html#reinstall_Windows - What
you will need on-hand

Malke

 

[David H. Lipman]

From: "dath" <[email protected]>

| One of our employee's computers was infected with a virus that rebooted his
| machine every 5 minutes or so. I found the virus and got rid of it but now I
| cant enable the windows firewall. When I open properties on the network
| connection and click on settings for firewall it says "Due to an unidentified
| problem, Windows cannot display Windows Firewall settings." so I was
| thinking maybe it disabled the firewall service but I cant seem to find out
| what the service name is.

You are assuming it is a virus.
Continuous re-boots are indicative of hardware problems such as RAM, powers supplies, CPU,
over heating, etc.

 

[Guest]

My reply is at the bottom of your message :

Thanks for responding Malke I ran the command but still the same results.
The ICS service is completely missing so if anyone knows how to reinstall ICS
please let me know. Looks like I might have to reintall windows.

Hello !

You need to be 100% sure this computer is clean. Please , check (and remove)
viruses and other types of threats using the instructions here:
http://pandaman.my.contact.bg

After you make sure you are absolutely clean , run System File Checker to
fix possibly corrupted system files as explained here:
http://pandaman.my.contact.bg/repair_Win.htm

Repair WinsockStart –> Run
type
cmd
Click OK .Type
netsh winsock reset
(note there is a space between the commands) Press ENTER . Restart
immediately !

Windows XP and XP SP1
Download and run http://www.spychecker.com/program/winsockxpfix.htm
Restart !

Then if you have problems with starting Windows Firewall from
Control Panel -> Windows Firewall , try and read these.They helped me with a
problem like yours

http://support.microsoft.com/default.aspx?kbid=875357
http://support.microsoft.com/kb/920074/en-us


Good luck ! Tell us how it goes

 

[Guest]

I got rid of the virus and all the weird behavior went away including the
random reboots. I just decided to back everything up and do a clean install
I think it really messed up the system files so I wont waste any more time
trying to get the firewall running.

 

[David H. Lipman]

From: "dath" <[email protected]>

| I got rid of the virus and all the weird behavior went away including the
| random reboots. I just decided to back everything up and do a clean install
| I think it really messed up the system files so I wont waste any more time
| trying to get the firewall running.
|

Good idea !

Thanx for updating the thread.

 

[cquirke (MVP Windows shell/user)]

From: "dath" <[email protected]>

| I got rid of the virus and all the weird behavior went away including the
| random reboots. I just decided to back everything up and do a clean install
| I think it really messed up the system files so I wont waste any more time
| trying to get the firewall running.

Good idea !

Not really...
- he never did find out what was causing the reboots
- he is now running without a firewall
....so he's working now, but we're not sure if he'll stay working,
because whatever messaed him up before can happen again.

If it doesn't, then I share your congrats, but if it does, then the
troubleshooting he skipped for now will have to be started all over
again... searching for possible bad hardware that "messed up the
system files", or malware that may find it easier to attack now that
the firewall's down (hopefully he's using an add-on firewall instead?)

I'd rather be wrong than right on this one

------------ ----- --- -- - - - -

Drugs are usually safe. Inject? (Y/n)