Malware disabling firewalls

[stefano]

Hi everyone,

It seems that i’ve got one of those annoying little problems.

Some time ago my Windows firewall got disabled by what I assume was some virus or malware. The firewall kept coming up with an error messege and i never managed to re-enable it so after various scans with various malware and virus detectors i’ve removed suspicious files but still it wouldn’t work.
I then installed Comodo firewall, which is a great piece of software and i was really happy with it, but then after few days it got disabled as the previous firewall.
I’ve done some scans but it seems that i’m always back at square one.
Can anyone help?

[mike6688]

Firstly, it would help if you could give us an indication of what your operating system is, what other security tools you have or have had etc.

If possible could you also give us any names of the suspicious files you removed and their path.

Mike

[egemen]

@stefano post:1

Hi everyone,

It seems that i’ve got one of those annoying little problems.

Some time ago my Windows firewall got disabled by what I assume was some virus or malware. The firewall kept coming up with an error messege and i never managed to re-enable it so after various scans with various malware and virus detectors i’ve removed suspicious files but still it wouldn’t work.
I then installed Comodo firewall, which is a great piece of software and i was really happy with it, but then after few days it got disabled as the previous firewall.
I’ve done some scans but it seems that i’m always back at square one.
Can anyone help?

What does CPF’s main screen say? Does CPF itself report it is disabled?What protection strength does it report?

[stefano]

Hi Mike, Hi Egemen,

thank you for your reply.

The system I am running is Windows XP. I’ve scanned the system with various virus scan and malware scans. To name some: Norton antivirus, Spy subtract, Spybot 1.4, Microsoft utility for spyware and Trend Micro Housecall.

Comodo wouldn’t allow me to change anything, as if everything was frozen.

Some of the files found were, which were physically removed by me:
Spyware:Cookie/YieldManager
Spyware:Cookie/Falkag
Spyware:Cookie/2o7
Spyware:Cookie/Overture
Spyware:Cookie/Statcounter
Spyware:Cookie/Tradedoubler
Dialer:dialer.enz
Dialer:Dialer.GFG
Dialer:Dialer.GUJ
Adware:Adware/WinAD
Adware:adware/ist.istbar
Dialer:Dialer.GFG
Adware:Adware/PurityScan
Adware:adware/spywareno

Many thanks for your help guys!
Cheers
Stefano

[egemen]

@stefano post:4

Hi Mike, Hi Egemen,

thank you for your reply.

The system I am running is Windows XP. I’ve scanned the system with various virus scan and malware scans. To name some: Norton antivirus, Spy subtract, Spybot 1.4, Microsoft utility for spyware and Trend Micro Housecall.

Comodo wouldn’t allow me to change anything, as if everything was frozen.

Some of the files found were, which were physically removed by me:
Spyware:Cookie/YieldManager
Spyware:Cookie/Falkag
Spyware:Cookie/2o7
Spyware:Cookie/Overture
Spyware:Cookie/Statcounter
Spyware:Cookie/Tradedoubler
Dialer:dialer.enz
Dialer:Dialer.GFG
Dialer:Dialer.GUJ
Adware:Adware/WinAD
Adware:adware/ist.istbar
Dialer:Dialer.GFG
Adware:Adware/PurityScan
Adware:adware/spywareno

Many thanks for your help guys!
Cheers
Stefano

It seemed to me that something is making your system unstable so some programs can not work correctly. A spyware/Virus etc. should not easily disable CPF.

IF CPF reports a bad protection strength, try closing and restarting the CPF to see if it restores.

[panic]

Locked

Out of date topic.

Ewen