Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: zeb on December 08, 2006, 04:47:43 PM
-
HI, new here. I have a question.
I have the 4.7 home edition.
I am getting a windows security alert saying my firewall is turned off.
when i go to where I need to be to turn it on,
it wont let me click the on button.
Is this the way its supposed to be?
and if not, what do i do? TIA!
-
Well avast isn't a firewall and doesn't have any interaction with your firewall or windows security center to be able to trun your firewall off.
What is your firewall ?
-
please forgive me, i'm not really computer smart!
I believe its a windows firewall,
or where do i go to find out
what my firewall is?
-
when i click on enable now to turn on windows firewall it says-
"were sorry, security center could not turn on windows firewall,
to try to turn it on yourself go to control panel,click general tab
select on and click ok"
but when i try and do that the "on" button is unclickable.
-
I also saw this-
"windows firewall is turned off,your network
administrator is using group policy to control these setting"
okay, what is group policy and who is my network administrator???
-
also found under the advance tab, it says to restore all firewall settings to a default state, click restore defaults.
Should i try that?
sorry about all these posts but this worries me.
-
Open the Control Panel and look for the Windows Firewall and double click the icon and check the On (Recommended) radio button and click OK.
To open Control Panel, click Windows Start and then click Control Panel.
If your computer is set up in Classic view using the more familiar Start menu, click Start, point to Settings, and then click Control Panel.
-
I have been trying that,
but all the buttons (on, off, or allow exceptions)
are all not clickable, wont let me click them.
At the top it says "for your security, some settings are controlled by group policy"
apparently this is one of them!
what or who is group policy?
thank you
-
what is group policy and who is my network administrator???
Group policy is a way that Windows controls the type of computer users. For instance, there are System, Administrator, Common Users.
Are you the ONLY one user of this computer or, when you logon, there are other users?
Are you the Administrator of the computer or a common user (technically speaking)?
-
I believe i am the only user,
there are no other user that come up.
in fact, that whole screen doesnt even come up anymore where i would have to click on my name to log on.
i just turn my puter on, connect to the internet and thats it.
I'm thinking i am the administrator, not sure.
like i said that whole user name thing to log on, doesnt even come up anymore.
is there a way to find out?
-
just checked user accounts-YES i am the administrator.
-
is there a way to find out?
Windows Start Buttom > click Control Panel > User accounts.
Then you can see your name and if you're the Administrator or not.
I suggest you download, install and use WinSnap. A screenshot application that allows you to post pictures...
http://www.ntwind.com/
I picture will talk better than 1000 words.
-
Yes, I am the administrator!
-
Yes, I am the administrator!
Start Menu > Control Panel > Administrative Tools > Services
Check the state of the Firewall service. Or export the services list ( and post here): Action > Export list.
-
Name Description Status Startup Type Log On As
Alerter Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local Service
Application Layer Gateway Service Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. Manual Local Service
Application Management Provides software installation services such as Assign, Publish, and Remove. Manual Local System
Automatic Updates Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. Started Automatic Local System
avast! Antivirus Manages and implements avast! antivirus services for this computer. This includes the resident protection, the virus chest and the scheduler. Started Automatic Local System
avast! iAVS4 Control Service Provides automatic updating for the avast! antivirus. Started Automatic Local System
avast! Mail Scanner Implements mail scanning for avast! antivirus. Started Manual Local System
avast! Web Scanner Implements web (HTTP) scanning for avast! antivirus. Started Manual Local System
Background Intelligent Transfer Service Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. Started Automatic Local System
ClipBook Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System
COM+ Event System Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. Started Manual Local System
COM+ System Application Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Computer Browser Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
Cryptographic Services Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
DCOM Server Process Launcher Provides launch functionality for DCOM services. Started Automatic Local System
DHCP Client Manages network configuration by registering and updating IP addresses and DNS names. Started Automatic Local System
Distributed Link Tracking Client Maintains links between NTFS files within a computer or across computers in a network domain. Started Automatic Local System
Distributed Transaction Coordinator Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service
DNS Client Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service
Error Reporting Service Allows error reporting for services and applictions running in non-standard environments. Started Automatic Local System
Event Log Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. Started Automatic Local System
Fast User Switching Compatibility Provides management for applications that require assistance in a multiple user environment. Started Manual Local System
Help and Support Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
HTTP SSL This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Human Interface Device Access Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local
-
System
IMAPI CD-Burning COM Service Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Indexing Service Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. Manual Local System
IPSEC Services Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. Started Automatic Local System
LexBce Server Started Automatic Local System
Logical Disk Manager Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Logical Disk Manager Administrative Service Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. Manual Local System
Messenger Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System
MS Software Shadow Copy Provider Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Net Logon Supports pass-through authentication of account logon events for computers in a domain. Manual Local System
NetMeeting Remote Desktop Sharing Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Netropa NHK Server Started Automatic Local System
Network Connections Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. Started Manual Local System
Network DDE Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System
Network DDE DSDM Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System
Network Location Awareness (NLA) Collects and stores network configuration and location information, and notifies applications when this information changes. Started Manual Local System
Network Provisioning Service Manages XML configuration files on a domain basis for automatic network provisioning. Manual Local System
NT LM Security Support Provider Provides security to remote procedure call (RPC) programs that use transports other than named pipes. Manual Local System
Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service
Plug and Play Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Started Automatic Local System
Portable Media Serial Number Service Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. Manual Local System
Print Spooler Loads files to memory for later printing. Started Automatic Local System
Protected Storage Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. Started Automatic Local System
QoS RSVP Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. Manual Local System
Remote Access Auto Connection Manager Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. Manual Local System
Remote Access Connection Manager Creates a network connection. Started Manual Local System
Remote Desktop Help Session Manager Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. Manual Local System
Remote Procedure Call (RPC) Provides the endpoint mapper and other miscellaneous RPC services. Started Automatic Network Service
Remote Procedure Call (RPC) Locator Manages the RPC name service database. Manual Network Service
Removable Storage Manual Local System
Routing and Remote Access Offers routing services to businesses in local area and wide area network environments. Disabled Local System
Secondary Logon Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
Security Accounts Manager Stores security information for local user accounts. Started Automatic Local System
Security Center Monitors system security settings and configurations. Started Automatic Local System
Server Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
Shell Hardware Detection Provides notifications for AutoPlay hardware events. Started Automatic Local System
Smart Card Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service
SSDP Discovery Service Enables discovery of UPnP devices on your home network. Started Manual Local Service
System Event Notification Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. Started Automatic Local System
System Restore Service Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties Started Automatic Local System
-
sorry, i had to do that in 2 posts.
-
Are you using Windows XP SP2? If you are still on SP1 I would suggest upgrading to SP2.
-
sorry, i had to do that in 2 posts.
Sorry, I can't read the posts... all the columns are messed... I'll try to look...
-
Is sp2 the one that came out about 2 1/2 yrs ago or so?
if yes, than i do have sp2
-
Are you using Windows XP SP2? If you are still on SP1 I would suggest upgrading to SP2.
Oopss... Without SP2 you're without a firewall... :o
Update your Windows www.windowsupdate.com :)
-
When i went to that link, it tells me-
Your computer has already been upgraded to Windows XP Service Pack 2 (SP2).
I am wondering if i should just click on that restore default button, i mentioned earlier.
sorry to be a pain in the butt!
and I do appreciate all your help!
-
I suggest you download, install and use WinSnap. A screenshot application that allows you to post pictures...
http://www.ntwind.com/
I picture will talk better than 1000 words.
Try this please...
-
Hi, just downloaded that.
I have to leave for a few hours.
I will check back later, Thank you!
-
How do you show a screen shot here?
do you have to upload it to a pic hosting site?
I see there are some free firewalls out there,
think i should go ahead and download one and just
forget about trying to get my windows firewall to work?
can anybody recommend one? Thanks
-
Look in your services. You are looking for Windows Firewall/Internet Connection Sharing (ICS). Make sure this is set for automatic. If not, set it to automatic and then Start the service or reboot the PC. Then try your firewall.
-
How do you show a screen shot here?
do you have to upload it to a pic hosting site?
I see there are some free firewalls out there,
think i should go ahead and download one and just
forget about trying to get my windows firewall to work?
can anybody recommend one? Thanks
When you post at the bottom of the input text box you will see Additional Options. Click the browse button and find the saved screenshot and attach it. Not there are only limited image types and please crop any images to the relevant part and dont post a complete screenshot which could be massive in both size, area and file size (KB).
- Zone Alarm free http://www.zonelabs.com works fine with avast and has a reasonably friendly user interface. There are others, Comodo, Sunbelt Kerio, Jetico, etc.
See some firewall tests for comparison, some are freeware but many are paid for versions http://www.firewallleaktester.com/tests.php. Also see http://www.thefreecountry.com/security/firewalls.shtml
-
Where do i go to find my services?
thanks
-
How do you show a screen shot here?
do you have to upload it to a pic hosting site?
http://forum.avast.com/index.php?topic=8982.0
-
Where do i go to find my services?
Start Menu > Control Panel > Administrative Tools > Services
-
says it was started and automatic.
i clicked on restart but nothing changed.
-
says it was started and automatic.
i clicked on restart but nothing changed.
Please, go Start Menu > Control Panel > Firewall
and post a screenshot here. Thanks.
-
hope this works right!
-
and when i go to click on the on button or any buttons there...they are not clickable (if you know what i mean)
-
and when i go to click on the on button or any buttons there...they are not clickable (if you know what i mean)
Well, here we go:
1. For the greyed out buttoms, are you sure you're logged as an administrator? Please, go Start Menu > Control Panel > User accounts and post a screenshot here. Thanks.
2. Can you post a screenshot of your Windows Security Center with all Firewall settings opened options (click on the down arrow to show the firewall info)? Start Menu > Control Panel > Security Center.
-
security shot
-
user account-
-
Zeb, if you log as Tracy you're the administrator.
So, there is a problem because WSC is not detecting 'all' the firewalls on your computer.
Did you install any in the past? Like Norton Internet Suite or McAfee Suites... or any other firewall, like ZoneAlarm?
-
the computer came with Norton antivirus, it expired once and i renewed,
dont remember if it was "internet suite" that i had.
but after that one expired,
I just went with the Avast
-
i just checked my installed programs,
there is no norton or any other firewalls or anti virus programs, except Avast
-
Zeb, please, follow this again:
http://forum.avast.com/index.php?topic=23457.msg193534#msg193534
-
I cant or dont know where to find c:\windows\system32\wbem\repository
when i searched in the start menu it said -
not an valid file
-
Use windows explorer and navigate to that folder.
C:\ drive
Windows folder
System32 sub folder
Wbem sub folder
Repository.
-
okay thanks, i am the point where i need to reboot,
but before i do...i wanted to tell you I just remembered at one time i had symantec-it is not showing up in mt installed programs, but when i did a search for symantec in files, 15 things came up should i delete all these or not worry about them for now?
thanks so much for your help!!!
-
never mind that, when i click on them all,
my only option is to undo delete,
guess they sre already deleted.
i will reboot now.
-
darn!
rebooted twice and nothing has changed :(
Do i need to go back to services and restart the things i stopped?
-
i see they restarted all by themselves
-
but when i did a search for symantec in files, 15 things came up should i delete all these or not worry about them for now?
1) Remove NAV through Add/Remove programs from Control Panel. Boot. (if you have any Symantec product yet: LiveRegistration, LiveUpdate, etc.).
2) Use Symantec removal tool following the three steps defined in the SymNRT (http://download.betanews.com/download/1125124391/Norton_Removal_tool.exe) tool info or here (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=&docid=2001092114452606&nsf=nav.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=).
3) Boot.
4) Install avast! Boot.
5) See what you get.
Full SymNRT info:
1. Download and save these three files to the Windows desktop:
a) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/MSIFIX.bat
b) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SymNRT.exe
c) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SYMMSICLEANUP.reg
2. Run the three files that you just downloaded
a) On the Windows desktop, double-click the MSIFIX icon.
Click Run.
A black window may appear very briefly.
b) On the Windows desktop, double-click the SymNRT icon.
Click Run.
Click Next.
Click I accept the License Agreement, and click Next.
Type the letters and numbers that you see in the white box, and then click Next.
Click Yes or OK at each prompt.
You may need to click more than once. Your computer may be restarted for you more than once.
You may be asked to repeat some steps after the computer restarts.
c) On the Windows desktop, double-click the SYMMSICLEANUP icon.
Click Run, and then click Yes.
Click OK.
3. Boot.
-
1) Remove NAV through Add/Remove programs from Control Panel. Boot. (if you have any Symantec product yet: LiveRegistration, LiveUpdate, etc.).
2) Use Symantec removal tool following the three steps defined in the SymNRT (http://download.betanews.com/download/1125124391/Norton_Removal_tool.exe) tool info or here (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=&docid=2001092114452606&nsf=nav.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=).
3) Boot.
4) Install avast! Boot.
5) See what you get.
where you wrote "install Avast" was i supposed to remove it first and then download it again?
if yes, is this before or after i run those 3 files?
-
where you wrote "install Avast" was i supposed to remove it first and then download it again?
if yes, is this before or after i run those 3 files?
Well, you don't have to uninstall avast...
Remove Norton will work with or without avast. So you can run the three files now or whenever you want.
You can download a new avast setup file and install it, or just update your installation through the Internet (update program).
-
Well, i have done all the above and nothing has changed.
-
Let's try the last resort...
1. Uninstall avast from Control Panel first
2. Boot
3. Use Avast Uninstall (http://www.avast.com/eng/avast-uninstall-utility.html) for complete uninstallation
4. Boot
5. Install again by this command on the folder you've donwload and save the install file: setupeng.exe /forceinstall
Where setupeng.exe is the name of the executable
-
Sorry if I missed this in previous posts...
Are you running XP home or professional?
Did you get this computer new or from a friend? I'm wondering if group policy was previously applied to the PC before you recieved it.
-
I tried the last resort and still nothing has changed.
I am running XP home.
I bought it new from Dell.
I seemed to notice the security balloon start popping up
when I first downloaded Avast,
I just assumed it was because of that and not worry about it.
but then i came here to check.
So now I am wondering if i should just download a firewall.
Is that complicated?
because I am not really computer smart.
THANK YOU all for your help!
-
Just bumping this up,
for any advice before i download a firewall. Thanks
-
I seemed to notice the security balloon start popping up
when I first downloaded Avast,
Sorry I haven't reread the whole thread but what security balloon, do you mean the avast Alert with accompanying ear splitting audio alarm ?
Installing a firewall is no different to installing a program, download the setup file and execute it.
- Zone Alarm free http://www.zonelabs.com works fine with avast and has a reasonably friendly user interface. If you chose Zone Alarm free you will be asked a compatibility question, answer NO.
There are others, Sunbelt Kerio, Jetico, etc.
See some firewall tests for comparison, some are freeware but many are paid for versions http://www.firewallleaktester.com/tests.php. Also see http://www.thefreecountry.com/security/firewalls.shtml
-
Hi,
no, its the red windows security alert icon, that says I have no firewall on.
Thanks, I'll take a look at the firewalls.
-
no, its the red windows security alert icon, that says I have no firewall on.
But, do you have a firewall?
Zeb, Windows Security Center does not give you ANY protection. It's just a monitor that say what other products are protecting you.
Don't worry that much. A lot of users include disable WSC.
You need a firewall and you need an antivirus. If you have them, cool :)
-
Yes but what about my screen shot back on page 2 or so.
it shows my firewall is off.
-
Team -
is it not possible that zeb has been the victim of a trojan that has set up a group policy to prevent the turning on of the Windows built in firewall in an effort to keep the system vulnerable?
Any of our contributors familiar with the use of group policy in XP - it seems to be a less than well known area?
-
Oh my gosh! sure hope not.
if this is the case,
would downloading a new firewall still protect me?
-
Because you have an issue with XP firewall not matter what the cause you shouldn't delay in downloading and installing another firewall. Even if you had no problem with XP's firewall it doesn't provide outbound protection and we would recommend that got a third party firewall.
@ alanrf
The only trojan/malware relating to XP's firewall that I have heard of is by changing registry entries to open a route into the system bypassing the XP firewall. I haven't heard of anything using Group Policy to disable it and by disabling it that would draw attention to the problem, which wouldn't be desirable.
-
well thank you all for your help!
I did download the zone alarm firewall.
so far it says-
278 intrusions have been blocked,
23 have been high rated.
does that sound like alot? and
what would the intrusions have been?
-
does that sound like alot?
In fact, not.
what would the intrusions have been?
From tentatives of knowing your IP to the ones who try to know who you are, etc.
To personal computers, very little of the hacking is tryed. Hackers want to get control of large networks, companies and famous sites, etc.
Of course, they could 'test' and 'try' on your computer... but very unprobable :)
-
It sounds like you should switch off the warnings if they are on. Yes that isn't unusual there are many infected systems out their trying to find other systems to infect ('port scanning' random IP addresses) or turn into zombies to send out spam or infection.
I never even look for attack detection stats in my firewall, they are history and the firewall is doing its job and blocking them. Basically it is the firewall trying to make you feel warm, fuzzy and protected. You could take the shields up check at grc.com. This checks the stealth of your system if it can't be seen it is less vulnerable to attack. Your firewall should have logs and you should be able to check them, I don't know how comprehensive these are in ZA free.
My system is very well stealthed and I don't see that kind of activity, only 8 detections today, all 'port scans' all to port 445 http://www.grc.com/port_445.htm a common attack port, which should be looked after by your firewall.