Member Avatar for Member #793703

I've recently noticed that my windows XP firewall turns off after every restart. And sometimes, if I connect to the internet multiple times in one sitting, the firewall turns off every time I reconnect to the internet. I don't have any other firewalls installed.

I recently cleaned my computer of a bad virus, so I wanted to find out if it was something else before I start scanning it with every software out there again. Does anyone have any ideas?

Dani AI

Generated

Given ’s recent virus cleanup and the report that the Windows Firewall registry keys appear empty, the most likely causes are leftover malware or corruption of the firewall/service configuration, or a third-party security product that’s taking control of firewall state (as and suggested). The fact the firewall also drops on each reconnect points to something that runs when the network goes up.

Recommended diagnostic sequence (least invasive first):

  • Boot to Safe Mode with Networking and verify whether the firewall can be enabled and stays enabled.
  • Perform a clean boot (msconfig) disabling non-Microsoft services and startup items to isolate a startup/service conflict.
  • Inspect Services (services.msc) to confirm the firewall-related and Security Center services exist and are set to start automatically, and check the System event log for errors mentioning the firewall or service failures.

Malware/repair steps:

  • Run up-to-date, full scans with an on-demand antimalware engine (for example Malwarebytes) plus a rootkit scanner (for example TDSSKiller or GMER), preferably from Safe Mode or a rescue disc.
  • If registry entries remain missing after cleanup, attempt System Restore to a pre-infection point, then run sfc /scannow from Recovery Console or installation media to restore corrupted system files.
  • If repair attempts do not recreate the firewall service and keys, an in-place (repair) install of Windows XP will restore the service without removing user data.

Cautions and final notes:

  • Back up the registry and important data before editing or importing keys; never import registry files from unknown sources.
  • When a third-party AV/firewall is present, removal is best done with the vendor’s removal/cleanup tool rather than a simple uninstall.
  • ’s reinstall idea can work for severe corruption, but try Safe Mode scans, clean-boot isolation and repair methods first; a full reinstall of the OS is the last-resort option.

Recommended Answers

All 4 Replies

Member Avatar for Member #793703

Also, not sure if this means anything or not, but when I run regedit, the windows firewall registry has no values.

Try to use internet security software from Kaspersky, Avira or AVG. They have firewall features to protect your computer. If you have one of those installed chances are they disable your Window firewall and use their own firewall.

hi,ashampoo have a decent firewall and is free,if you install a 3rd party firewall make sure windows firewall is disabled,running two firewalls or antivirus programs is asking for trouble,they simply conflict.

And if you go CP > Windows firewall > Advanced tab, and click Default settings button, what do you get?
If that fails then firstly uninstall the Firewall service, Windows Firewall/Internet Connection Sharing (ICS): in its properties first Stop it, then disable its Startup type, then type into a cmd window:
sc delete SharedAccess
Secondly, reinstall by going CP > Windows firewall.... a reinstall box will pop. If that doesn't work go to a cmd window again with:
rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf
After restarting your sys, next cmd is...
netsh firewall reset
[those two cmds are from M$]
Say how it goes.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.