Virus removed, irewall (ics) won't start

**Irish Shark** · August 20th, 2010, 06:55 PM

Hi All,

WinXP Pro SP3 had a virus which has been removed, but now the firewall won't start, and windows update won't load. Have tried resolving the firewall using all the listed MS fixes, but a majority of those fixes are listed for SP2. Anyone been here that can point to a repair?

Thanks in advance

**Niclo Iste** · August 20th, 2010, 08:11 PM

Name of the infection helps us know what it did. If you don't have that info. What tools did you use to resolve this infection? Was it really a virus or malware. People tend to confuse the two and both do very similar attacks but generally VERY different things to systems.

**CCT** · August 21st, 2010, 07:09 AM

If you have a SP3 slipstreamed disk, then sfc /scannow might fix any damaged files.

edit: it probably worthwhile also looking in Admin Services and ensuring that 'Windows Firewall/Internet Connection Sharing (ICS)' is set to automatic and started.

**Zonie** · August 22nd, 2010, 09:53 AM

Chances are you still have an infection. I would run combofix in safe mode after you turn off system restore, then run Malwarebytes to do the final cleanup.

**Irish Shark** · August 23rd, 2010, 05:51 PM

Originally Posted by Niclo Iste

Name of the infection helps us know what it did. If you don't have that info. What tools did you use to resolve this infection? Was it really a virus or malware. People tend to confuse the two and both do very similar attacks but generally VERY different things to systems.

I will post the malwarebytes log here later, once I get the computer back. If I remember correctly, it was a something fake.

**Irish Shark** · August 23rd, 2010, 05:54 PM

Originally Posted by Zonie

Chances are you still have an infection. I would run combofix in safe mode after you turn off system restore, then run Malwarebytes to do the final cleanup.

I will run the combo fix tonight, malwarebytes has already been run three times. Once for quick, which piked up the initial problems, then the complete which picked up the system restore files with the infection. And last that came back clean. All had restarts between.