Hello Lewis,
At the risk of suffering the wrath of jumping into the middle of a
conversation, I think I can shed some light on the situation.
The installation process of the ZoneAlarm firewall will turn off the Windows
Firewall. The Windows Firewall is not part of the Security Center. The
Security Center will continue to indicate the firewall is "ON" because
ZoneAlarm is now active. When you expand the Firewall section, it will show
the ZoneAlarm firewall is currently on, not the Windows Firewall. You can
turn the Windows Firewall back on (or install another third party firewall)
but the Security Center will warn you it's not recommended because of
possible conflicts.
SpyBots' scan results are indications to it of a suspicious Registry change
possibly caused by a virus, malware, or something else. In this instance,
and others that you know aren't a threat, you can have SpyBot ignore them in
future scans. To do this, expand the problem to show the item as you
indicated, left click the item to 'select' it, then right click it and
select "Exclude this detection from further searches".
SpyBot will also detect other abnormal behavior in the same way. For
example, if you change the way Security Center alerts you by disabling the
pop up alerts for any of the three categories. You can exclude those and
others that you know are safe in the same manner.
Sven Swanson, Sr.
The NoSpin Group, Inc.
----- Original Message -----
From: "Lewis M Russakov" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Tuesday, November 28, 2006 5:00 PM
Subject: Re: [PCSOFT] Spybot Question
David,
Thanks for you reply, however I am still confused because I check the fix
box for "Microsoft
WindowsSecurityCenter.Firewall Disable" each time it is found and it
always returns on the next scan.
How do I get rid of it for all time?
Should I assume that my firewall is enabled? I check Microsofts firewall
and it still has the enable checked.
Finally is it OK to run two firewalls or like with Anti Viruses only one
should be running?
Thanks again.
Lewis
************************
Date: Mon, 27 Nov 2006 08:58:06 -0800
From: David Gillett <[log in to unmask]>
Subject: Re: Spybot Question
On 24 Nov 2006 at 21:15, Lewis M Russakov wrote:
> I am using Spybot-Search & Destroy v 1.4 and every time I run a scan
it
> keeps detecting a problem called "Microsoft
> WindowsSecurityCenter.Firewall Disable".
> Expanding that entry there are two Registry setting sublistings as
> follows:
>
>
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\standardpr
> ofile\enablefirewall!=dword:1
>
>
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\domainpro
> file\enablefirewall!=dword:1
>
> I don't know what this all means and I do not want to fool with the
> Registry. I always click on "Fix the problem", but it comes back on the
> next scan.
>
> It doesn't appear that my MS firewall has been disabled., but I am
> confused by the statement near the end "enabledfirewall". Does that
mean
> that the firewall was disabled and somehow Microsoft enabled it?
>
> Should I be concerned since I also run Zone Alarm?
If the Windows Firewall was "normally" enabled, those two registry
entries
should each be 1. (In the programming languages most commonly used by
Windows programmers, "!=" means "does not equal" and "dword:" means
typical
32-bit integer value.
My guess is that some part of running Zone Alarm means that this value
gets set to something else, either zero (disable Windows firewall) or
perhaps some special value which the Windows Security Center knows means
"ZoneAlarm is taking care of firewll duties" -- probably the latter.
David Gillett
Curious about the people moderating your
messages? Visit our staff web site:
http://freepctech.com/staff.shtml
Do you want to signoff PCSOFT or just change to
Digest mode - visit our web site:
http://freepctech.com/pcsoft.shtml
|
