WinXP Home - Firewall Weirdness

[Alex]

Another small problem that's been annoying me for a while - my Windows
Firewall got messed up at some point. When I click on Windows Firewall it
shows it as Off and everything is grayed out with the message at the top that
says: For your security, some settings are controlled by group policy. Going
through Help looking up this Group Policy thing was nothing but a headache.
It listed procedures that I've tried and can't run, specifically it said they
were for Win XP PRO only, and I've always had XP Home. (Would this have
anything to do with my using .NET framework?)

However, when I go into Security Center, it says my Firewall is On. When I
call up the settings on my connections, it also says the Firewall is on for
that connection. But there's another weird thing in there. It says that my
Norton Internet Worm Protection is currently on. I used Norton AV, much to my
regret, some months ago and got rid of it and have been using AVG since.
Though while uninstalling Norton it was a battle to get rid of it, and it
didn't go quietly. Apparently it left something behind and I can't find it,
unless there's something hidden good somehwere in the registry.

Anyone have any thoughts on how to fix this thing with my Firewall, and get
rid of this Norton Internet Worm Protection thing?

Alex

 

[Malke]

Another small problem that's been annoying me for a while - my Windows
Firewall got messed up at some point. When I click on Windows Firewall it
shows it as Off and everything is grayed out with the message at the top that
says: For your security, some settings are controlled by group policy. Going
through Help looking up this Group Policy thing was nothing but a headache.
It listed procedures that I've tried and can't run, specifically it said they
were for Win XP PRO only, and I've always had XP Home. (Would this have
anything to do with my using .NET framework?)

However, when I go into Security Center, it says my Firewall is On. When I
call up the settings on my connections, it also says the Firewall is on for
that connection. But there's another weird thing in there. It says that my
Norton Internet Worm Protection is currently on. I used Norton AV, much to my
regret, some months ago and got rid of it and have been using AVG since.
Though while uninstalling Norton it was a battle to get rid of it, and it
didn't go quietly. Apparently it left something behind and I can't find it,
unless there's something hidden good somehwere in the registry.

Anyone have any thoughts on how to fix this thing with my Firewall, and get
rid of this Norton Internet Worm Protection thing?

Start by getting Security Center to see the correct information:

Start>Run>cmd [enter]
net stop winmgmt [enter]
cd /d %windir%\system32\wbem [enter]
ren repository repository.old [enter]
net start winmgmt [enter]

It may take a minute or so to complete while WMI rebuilds the database.

Once that is done, Security Center should report your correct antivirus
and the correct status of the Firewall. You didn't tell us what
antivirus protection you are using and that makes a difference. If you
are using OneCare for instance, it will turn the Windows Firewall off. I
understand that you have tried many different procedures, but without
knowing what they were I can't comment on them. I will risk repeating
what you have already done because I prefer to be thorough. Check
solutions at these links:

http://windowsxp.mvps.org/resetfwpol.htm
http://windowsxp.mvps.org/sharedaccess.htm

Solutions are provided for XP Home, too.

Here is a TechNet article on which services are dependent on Windows
Firewall:
http://tinyurl.com/yqjky3

And of course, if your computer was infected damage may have been done
by malware.


Malke

 

[Kayman]

Another small problem that's been annoying me for a while - my Windows
Firewall got messed up at some point. When I click on Windows Firewall it
shows it as Off and everything is grayed out with the message at the top
that says: For your security, some settings are controlled by group
policy. Going through Help looking up this Group Policy thing was nothing
but a headache. It listed procedures that I've tried and can't run,
specifically it said they were for Win XP PRO only, and I've always had
XP Home. (Would this have anything to do with my using .NET framework?)

However, when I go into Security Center, it says my Firewall is On. When
I call up the settings on my connections, it also says the Firewall is on
for that connection. But there's another weird thing in there. It says
that my Norton Internet Worm Protection is currently on. I used Norton
AV, much to my regret, some months ago and got rid of it and have been
using AVG since. Though while uninstalling Norton it was a battle to get
rid of it, and it didn't go quietly. Apparently it left something behind
and I can't find it, unless there's something hidden good somehwere in
the registry.

Anyone have any thoughts on how to fix this thing with my Firewall, and
get rid of this Norton Internet Worm Protection thing?

Start by getting Security Center to see the correct information:

Start>Run>cmd [enter]
net stop winmgmt [enter]
cd /d %windir%\system32\wbem [enter]
ren repository repository.old [enter]
net start winmgmt [enter]

It may take a minute or so to complete while WMI rebuilds the database.

Once that is done, Security Center should report your correct antivirus
and the correct status of the Firewall. You didn't tell us what antivirus
protection you are using and that makes a difference. If you are using
OneCare for instance, it will turn the Windows Firewall off. I understand
that you have tried many different procedures, but without knowing what
they were I can't comment on them. I will risk repeating what you have
already done because I prefer to be thorough. Check solutions at these
links:

http://windowsxp.mvps.org/resetfwpol.htm
http://windowsxp.mvps.org/sharedaccess.htm

Solutions are provided for XP Home, too.

Here is a TechNet article on which services are dependent on Windows
Firewall:
http://tinyurl.com/yqjky3

And of course, if your computer was infected damage may have been done by
malware.

In addition, it maybe beneficial to apply Nortons uninstall tool to remove
leftovers.
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

 

[Alex]

Start by getting Security Center to see the correct information:

Start>Run>cmd [enter]
net stop winmgmt [enter]
cd /d %windir%\system32\wbem [enter]
ren repository repository.old [enter]
net start winmgmt [enter]

It may take a minute or so to complete while WMI rebuilds the database.

Once that is done, Security Center should report your correct antivirus
and the correct status of the Firewall. You didn't tell us what
antivirus protection you are using and that makes a difference. If you
are using OneCare for instance, it will turn the Windows Firewall off. I
understand that you have tried many different procedures, but without
knowing what they were I can't comment on them. I will risk repeating
what you have already done because I prefer to be thorough. Check
solutions at these links:

http://windowsxp.mvps.org/resetfwpol.htm
http://windowsxp.mvps.org/sharedaccess.htm

Solutions are provided for XP Home, too.

Here is a TechNet article on which services are dependent on Windows
Firewall:
http://tinyurl.com/yqjky3

And of course, if your computer was infected damage may have been done
by malware.


Malke

Malke,

Well, the link to http://windowsxp.mvps.org/resetfwpol.htm provided the
information I needed. Easy procedure, deleting the windowsfirewall key
(always backup before deleting) under software/policies and a restart worked.
It restored my firewall settings so they're not greyed out anymore and the
group policy message is gone. As for the last vestiges of Norton being gone,
I still feel part of it is still lurking around somewhere. Damn stubborn
program, just as bad as any malware.

Alex

 

[Malke]

Malke,

Well, the link to http://windowsxp.mvps.org/resetfwpol.htm provided the
information I needed. Easy procedure, deleting the windowsfirewall key
(always backup before deleting) under software/policies and a restart worked.
It restored my firewall settings so they're not greyed out anymore and the
group policy message is gone. As for the last vestiges of Norton being gone,
I still feel part of it is still lurking around somewhere. Damn stubborn
program, just as bad as any malware.

Alex

Glad that sorted it for you. Thanks for taking the time to post back.


Malke

 

[Vista]

Another small problem that's been annoying me for a while - my Windows
Firewall got messed up at some point. When I click on Windows Firewall it
shows it as Off and everything is grayed out with the message at the top that
says: For your security, some settings are controlled by group policy. Going
through Help looking up this Group Policy thing was nothing but a headache.
It listed procedures that I've tried and can't run, specifically it said they
were for Win XP PRO only, and I've always had XP Home. (Would this have
anything to do with my using .NET framework?)

However, when I go into Security Center, it says my Firewall is On. When I
call up the settings on my connections, it also says the Firewall is on for
that connection. But there's another weird thing in there. It says that my
Norton Internet Worm Protection is currently on. I used Norton AV, much to my
regret, some months ago and got rid of it and have been using AVG since.
Though while uninstalling Norton it was a battle to get rid of it, and it
didn't go quietly. Apparently it left something behind and I can't find it,
unless there's something hidden good somehwere in the registry.

Anyone have any thoughts on how to fix this thing with my Firewall, and get
rid of this Norton Internet Worm Protection thing?

Alex

You're mad to trust anything from microshit. Get an alternative firewall
now (Zonealarm do a good free one).

Vi