Windows Security Center Firewall Bypass Question

[mr.ack]

I hope this is the right place to post!

I have been getting Microsoft.WindowsSecurityCenter.FirewallBypass detected in my scans for the last few days. Spybot fixes the problem but on rebooting it is always still there.

As I thought I had malware I posted this thread in the Malware forum:

http://forums.spybot.info/showthread.php?t=45536

The expert there kindly pointed me to this FAQ which I hadn't previously seen:

http://www.safer-networking.org/en/faq/46.html

So I have managed to learn a little more about this detection but I am still confused as to what to do about it. It seems that rather than being malware it is just a potential threat that is present. I don't recall changing any of the security settings manually so how can I find out which setting it is that is triggering the detection in Spybot?

The other problem which I am assuming is related is that every time I reboot and go to Control Panel I get a Windows Security pop up saying that for my security some features of Windows Explorer have been disabled or blocked and it asks whether I wish to 'keep blocking' or 'unblock'. So far I have always chosen 'keep blocking'. I can then use Control Panel freely, but then the next time I reboot and try to access it again I get the same window.

Can anyone shed any light on what is going on? Have I inadvertently changed a setting somewhere that I am not aware of?

[Prince Serendip]

I assume you are using Windows Vista? Whenever you have system problems it's good to mention what system you're using.

There's an article here which may help you with alerts from your UAC: http://www.informationweek.com/blog/main/archives/2007/06/dont_shut_off_v.html

And, here's the user's guide via Microsoft: http://technet.microsoft.com/en-us/library/cc709691.aspx

You might also check this topic at MajorGeeks: http://forums.majorgeeks.com/showthread.php?t=121531

The 2nd post in that topic would appear to explain your problem IMO, although that does not mean you do not have one caused by malware. You might consider getting checked out here: http://forums.spybot.info/forumdisplay.php?f=22 but do read the stickies at the top of the forum first.

[tashi]

Hello Prince Serendip, :)


You might consider getting checked out here: http://forums.spybot.info/forumdisplay.php?f=22 but do read the stickies at the top of the forum first.

mr.ack's topic: http://forums.spybot.info/showthread.php?t=45536

Cheers.

[Prince Serendip]

Thanks Tashi. It's appreciated. Nice to see you again. :red:

[mr.ack]

Thank you for the quick reply. I forgot to mention that I am not on Vista. I am running XP SP3.

I have read all of those links but as some of them seem to mainly concern Vista I am still in the dark.

I did find that Major Geeks forum post a day or two ago as I was trying to research this but I didn't want to follow the instructions given there until I heard back from an advisor in the malware forum in case those instructions were specific to that particular major geeks users computer. Do you think I should try what is recommended there or ask pskelley in the spybot malware removal forum for further help with this, he seemed to think I was best to ask here for help.

Sorry about this, while I'm not a complete newbie with computers it is the first time I have found a problem so a lot of this is unfamiliar territory to me!