AumHa Forums

What I'd like for you to do in the sequence of steps requires your system to be disconnected from the internet (i.e. physically unplugged or wireless turned off) if at any point you have no active firewall whether it be Windows or ZoneAlarm. If you follow the sequence as written you will have a firewall enabled.

1. Enable the Windows Firewall;
2. Disable ZoneAlarm using msconfig, then reboot;
3. Disable AntiVir using msconfig, then reboot;
4. Disable SpySweeper using msconfig, then reboot.

A. Test Internet Explorer now.

5. Re-enable AntiVir using msconfig, then reboot.

B. Test Internet Explorer now.

6. Re-enable SpySweeper using msconfig, then reboot.

C. Test Internet Explorer now.

Stop here and report the results from A, B and C above.

Good Luck

Hi
Having a problem--- can't disable ZoneAlarm in the system config. It keeps re-enabling. I keep unchecking "zlclient", click on Apply, then rebootting, and its still there. Even if I shut it down from the task bar, and then uncheck it in the system config it still keeps coming back.

Jay

Then uninstall it via Add or Remove Programs. You can always re-install it later.

...and the short answer is, with everything disabled and only Windows Firewall on, I can surf with ease.
I'll report back in a few minutes on what happens with re-enabling AntiVir and then SpySweeper.

Jay

The final answer is IE8 runs perfectly

A) with Windows Firewall enabled and AntiVir and SpySweeper Disabled
B) With AntiVir enabled
C) with SpySweeper enabled

So it looks like Zone Alarrm was the problem. Should I download a fresh copy of it, or get another firewall?

Jay

Good, we got to the bottom of your problems.

The first thing we need to do is clean up after the applications I've had you use. We can talk firewalls following this but for now stick with the Windows Firewall.

Uninstall Malwarebytes' Antimalware
Go to Add or Remove Programs and uninstall this one too, please.

Delete files/logs
You can delete the OTL application and any logs it created.

You can delete FixPolicies from your system.

ComboFix Cleanup Step #1
Click START then RUN and enter the below into the run box and then click OK.

Note the quotes are required:

"%userprofile%\Desktop\combo-fix" /uninstall

Notes: The space between the combo-fix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

ComboFix Cleanup Step #2
Please use Windows Explorer to manually delete the following folders marked in Red below, if they are found:

C:\Qoobox <= This may be left from ComboFix, go ahead and delete the folder should it exist.
C:\ComboFix <= This may be left from ComboFix, go ahead and delete the folder should it exist.

Delete Others
You can also safely delete any logs found on your desktop.

Post Back
Please post back that you've finished the above and let me know how the system is running.

Good Luck

Hi
Seems to run OK. All I have left from the software is ATFCleaner, SecurityCheck and HiJack this.

Jay

You can delete ATF Cleaner, Security Check and all reports they created.

HijackThis can be removed via Add or Remove Programs. Any reports/shortcuts that persist can be deleted.

Let me know when you've done this and verify that IE continues to work well.

Thanks and Good Luck

Hi
All done and working fine.

Jay

Just to set the stage for what I note below, I prefer to not recommend any AntiVirus, AntiSpyware or Firewall applications as what I would say would be opinion and anyone can get opinions from many sites.

I'll start by stating the facts:

1. You have the paid version of SpySweeper;
2. You're running the free version of AntiVir;
3. You're running Windows Defender.

That's what I know.

As for third party firewalls you could attempt again to use ZoneAlarm but it has given you problems. You could also attempt to use Online Armor free => http://www.tallemu.com/products-online-armor-free.php but I would avoid any versions that include an AntiVirus or AntiSpyware component.

I would recommend keeping your version of Windows up to date and adding a layer of protection.

Windows Update
Using Internet Explorer (only), check in at Windows Update , use the Express button and install all updates offered; reboot if prompted to do so.

Tip: Critical updates are offered on the second Tuesday of every month. Security updates can be released at any time though most "out of band" updates tend to be released on the 4th Tuesday of the month.

Windows Updates should be configured such that Automatic Update is enabled, at least to just notify.

How to configure and use Automatic Updates in Windows XP: http://support.microsoft.com/kb/306525/

Consider hardening your defenses
Consider adding the additional layer of AntiSpyWare (don't confuse with AntiVirus, you can run in tandem unlike AntiVirus where you should only have one) protection noted below:

• Download, install, and keep updated Spyware Blaster (free):
  http://www.javacoolsoftware.com/spywareblaster.html

Learn to stay safe
Spend some time reading about how to keep your computer safe on the Internet (courtesy of AumHa member and MS-MVP miekiemoes): http://users.telenet.be/bluepatchy/miek ... ntion.html

Final Note
If you have questions or experience further problems feel free to post back in this thread. If not, let me know otherwise I'll mark it as [Done].

Take care and happy safe surfing.

First, thanks so much for taking so much time with me and your help. As soon as I'm sure I have a safe firewall I'll make a contribution to the site.

I'll make a decision about a firewall tonight. Wish i could figure out why ZoneAlarm failed. I'm a conservative surfer at home -- most of what I do is either read the New York Times, update Windows and update AntiVir. Never used P2P apps, never go to Facebook, rarely to YouTube. My e-mail is via Yahoo and Netscape.

Live and learn.

Jay

One question about SpywareBlaster: should it be enabled? WOuldn't that make it conflict with SpySweeper?

Jay

You're very welcome.

SpywareBlaster is passive protection that sets the kill bit for known bad ActiveX controls. As such, there is no running process - and no CPU and memory usage either. All you have to do is remember to update SpywareBlaster once a week, and enable the latest protection. There will be no conflict with SpySweeper.

As for firewalls, many feel that the Windows firewall when used in conjunction with a router is sufficient protection. Many people live happily with the Windows firewall alone.

With safe surfing habits I have lived infection free with the Windows firewall for many years. You may be able to do so too.

Good Luck