CFW8 on Windows 10 installable OR NOT?

[Bucky_Kid]

I’ve clean installed Windows 10, then download CFW8, install ok, but Windows ■■■■■■■ up quickly and I had to make another OS clean install. Second time I use same installer but get notification This product cannot be installed. Only difference is 2nd OS instance is installed as non-english. Is that preventing CFW to install? I can’t figure out how to bypass it since on 1st OS instance I was able to install and run CFW (even with non-english langpack). So what’s up. Must have CFW installed.

[SanyaIV]

@Sanya IV Litvyak post:2

Open the installer (cis_installer.exe / cfw_installer.exe / cav_installer.exe) with an archive program like 7-zip then navigate to [b]cfw_installer.exe\cis\download\installs\xml_binaries\cis[/b] and then extra either cis_setup_x64.msi (if you have a 64bit system) or cis_setup_x86.msi (if you have a 32bit system)

Please note that this seems to extract the cis installer regardless of which product you downloaded, so for example if you downloaded Comodo Firewall then using the method above it will extract the installer for Comodo Internet Security.

After that is done then just run the extracted installer.

If you want Comodo Firewall (i.e without Comodo AV) then you can do the above then use control panel to change the installation and remove Comodo Antivirus.

[lahma]

@lahma

For anyone that is interested, I have come up with a quick and easy method for installing Comodo Firewall on Windows 10 (RTM) while still allowing Windows Defender to be enabled and function correctly. I have tested these steps several times on fresh installs of Windows 10 to be sure everything is working correctly.

If you are running a fresh copy of Windows 10 on which you have not yet attempted to install Comodo Firewall (or you uninstalled Comodo Firewall prior to upgrading an older version of Windows to Windows 10), follow these instructions:

1. If you are running the “Pro”, “Enterprise”, or “Education” edition of Windows 10, or any other edition which DOES support Group Policy management, perform "A."If you are running the “Home” edition of Windows 10, or any other edition which DOES NOT support Group Policy management, perform “B.”

   A. Click the Windows Start button or hit the Windows button on your keyboard and type “gpedit.msc” and hit the Enter key. Navigate to “Computer Configuration->Administrative Templates->Windows Components->Windows Defender” and double click on the entry titled “Turn off Windows Defender”. Change it from “Not Configured” to “Disabled”. Exit the Local Group Policy Editor.

   B. Click the Windows Start button or hit the Windows button on your keyboard and type “regedit” and hit the Enter key. Navigate to “HKEY_LOCAL_MACHINE->SOFTWARE->Policies->Microsoft->Windows Defender” and be sure that the “Windows Defender” is selected. In the right pane, if a DWORD value already exists named “DisableAntiSpyware”, change its value to “0”. If you do not see a DWORD key named “DisableAntiSpyware”, right click inside the right pane, click “New->DWORD (32-bit) Value”, name the entry “DisableAntiSpyware” and set its value to “0”. Exit the Registry Editor.

2. Install Comodo Firewall as you normally would using the installer file “cfw_installer_6105_53.exe” (I would recommend not installing all the extras such as GeekBuddy and Chrome stuff but that is up to you… you can change this by clicking “Customize Installation” in the installer). After the installation is complete, restart Windows and you should be good to go. Windows Defender will continue operating normally and won’t be permanently disabled by the Comodo Firewall installation.

If you are running a copy of Windows 10 on which you have already installed Comodo Firewall, you have probably noticed that Windows Defender became disabled, despite the fact that you were not installing Comodo Anti-Virus. If you have tried re-enabling Windows Defender by restarting its services, clicking the Windows notification about no anti-virus being installed, or clicking the “start now” button in your security center, but Windows Defender still refuses to start working again, follow these instructions:

1. First, be sure that you do not have Comodo Anti-Virus installed by clicking your Window Start button or clicking your Windows key on your keyboard and typing “Programs and Features” and clicking on the entry that comes up. Locate either the “Comodo Firewall” entry or the “Comodo Internet Security” entry, highlight it, and click the “Change” button. In the window that pops up, click “Next” and then click the “Change” button. Be sure that the “Comodo Antivirus” entry is NOT checked. If it is, uncheck it, click “Next”, allow it to be uninstalled, and restart your computer. If it is not checked, exit the “Comodo Firewall Setup” and “Programs and Features” windows.

2. Follow the first set of instructions I posted above for fresh installations of Windows 10.

3. If after following those instructions and rebooting, Windows Defender still isn’t enabled, continue following the instructions below.

4. Download “RegOwnerShipEx” from the following link and extract it somewhere easy to find such as “C:\RegOwnerShipEx”: RegOwnershipEx : Handy Freeware For Taking Ownership Of Registry Keys

5. Run either the x64 or x86 Windows 8 version of RegOwnerShipEx, depending on which version of Windows 10 you are running, and after the application opens, click the “Browse” button. Navigate to “HKEY_LOCAL_MACHINE->SOFTWARE->Microsoft->Windows Defender” and be sure that “Windows Defender” is highlighted. Click “Select”. Now click “Take Ownership” and then click “Open in Registry Editor”. In the right pane, locate “DisableAntiSpyware” and “DisableAntiVirus”, and change both of these entries’ values to “0”.

6. With the registry editor still open, navigate to “HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Services->WinDefend” and be sure that “WinDefend” is highlighted. In the right pane, locate then entry named “Start”, and if its value is set to anything other than “2”, change its value to “2”.

7. Reboot Windows and Windows Defender should now be starting and working properly.

A short explanation of the root problem (as I understand it):

When Comodo Firewall is installed, for some reason, it sets the 2 registry values “DisableAntiSpyware” and “DisableAntiVirus” to a value of “1”. These entries are located in “HKEY_LOCAL_MACHINE->SOFTWARE->Microsoft->Windows Defender”. This prevents Windows Defender from starting or being re-enabled. By setting the group policy I discussed in the first set of instructions, before installing Comodo Firewall, this prevents Comodo Firewall from setting these registry entries. If however you do not set this group policy prior to installing, you must go through some extra steps I discussed in the second set of instructions in order to repair the damage done (as well as set the group policy because Comodo Firewall will attempt to set those registry entries upon every boot).

[spratinse]

That worked perfectly, thanks lahma !

[Bucky_Kid]

Progress from lahma still not working for me. I get notification tho Defender is permanently disabled.
Btw. setting Turn off Windows Defender from “Not Configured” to “Disabled” just Enables defender (doubled negation).
To turn off Deffender actually you nust enable the rule.

[Bucky_Kid]

I’ve found a more elegant working solution: rename cfw_installer_XXXX_XX.exe to anything else, eg. cfw.exe and launch it ;))

[lahma]

Bucky Kid: My instructions have nothing to do with the windows notification that “Comodo 8.0 is not compatible with this version of Windows”. My instructions address the problem of Windows Defender becoming permanently disabled after installing Comodo Firewall. However, your tip is useful as well, because the way I was getting around that message was by extracting the MSI installer from the cfw_installer_*.exe using Winrar.

I am extremely confident if you follow my instructions precisely, it will fix your Windows Defender problem. If you can’t get it to work, I would be happy to help you out if you message me and tell me your exact situation and the problem you are having. The easiest way, and the way that I can absolutely guarantee you works, is to install Windows 10 fresh (or at least use Windows restore to go back to a point before you tried installing Comodo the first time), and follow my first set of instructions regarding set the group policy. I tested it multiple times in a virtual machine, and 2 different physical machines. Although, to be fair, I did perform it on Windows 10 Pro, but I am nearly positive it should work on Windows 10 versions that don’t have the group policy manager by using the registry changes I discussed instead.

To address your comments about the Windows Defender group policy setting, I really don’t know what you are trying to say… The entire point of my post was to show how to turn ON (enable) defender, not turn it off. By setting that group policy setting to “Disabled”, it prevents Comodo from setting the 2 registry values “DisableAntiSpyware” and “DisableAntiVirus” to a value of “1” (and if Comodo is allowed to set those registry values, Windows Defender is disabled).