gavin_d
asked on
Windows Firewall Disabled at Start up
Laptop XP-Pro Sp3 fully patched. Everytime I reboot the windows firewall is disabled and has to be enabled manually. Checked services and it is set as on. Is there a quick way to ensure that it stays on by default.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This can be in indication of a backdoor trojan (eg ZBot). Run an updated version of something like MalwareBytes AntiMalware just to be safe.
ASKER
Laptop is not domain member, though was in a previous incarnation, now part of a basic "home" workgroup. The issue with the Firewall is something that has only occurred in the last month. Done "deep Scan" scan with various anti-virus and root "detection / malware" tools and nothing has shown up. Firewall is set to start automatically on start up, and have set it to start on first fail.
Ivanoviola...still looking at the advise form this site. Event Viewer info.....I am not working on that laptop at the moment to double check, but don't recall anything in the logs standing out. Still checking...
Ivanoviola...still looking at the advise form this site. Event Viewer info.....I am not working on that laptop at the moment to double check, but don't recall anything in the logs standing out. Still checking...
would it be acceptible to make a batch file like this?
example: c:\startthefirewall.bat
---------------cut between the lines----------
@echo off
sc config sharedaccess start= auto
sc start sharedaccess
---------------cut between the lines----------
then right click the new batch file, copy
go to c:\docume~1\alluse~1\start m~1\progra ms\startup
right-click, paste-shortcut
then right click the shortcut, properties, run minimized
what that does is sets the windows firewall service back to automatic, and starts it
example: c:\startthefirewall.bat
---------------cut between the lines----------
@echo off
sc config sharedaccess start= auto
sc start sharedaccess
---------------cut between the lines----------
then right click the new batch file, copy
go to c:\docume~1\alluse~1\start
right-click, paste-shortcut
then right click the shortcut, properties, run minimized
what that does is sets the windows firewall service back to automatic, and starts it
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Have downloaded and run Microsoft Security Essentials, came across this by accident. Found x3 trojans....... This after having McAfee fully patched and running,regular scans, running online scans from Symatec and downloading and using a couple of recomended "free" versions. Thanks to all contributers, I have made notes of solutions provided, very useful. Cheers.
ASKER
All contribututions added to complete the solution
Also, you can modify the local security policy on the laptop itself which will override the group policy by typing gpedit.msc at the run command and enabling the windows firewall setting.