Hi !
Since there is no taskbar-icon when you use windows firewall you donīt know if a nasty malware manages to turn it off.
But if you have WinPatrol (PLUS-version) you can get a warning thanks to itīs registrymonitoring.
Run the following reg-script and WinPatrol will give you warning if windows firewall is tuned off.
Code:
REGEDIT4
[HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol\RegOptions]
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\SharedAccess\\Parameters\\FirewallPolicy\\PublicProfile\\EnableFirewall" =dword:00000001
save this file as fx. "Winpatrol.reg"
run the script, click on them just like any other program, then say "Yes" when you are asked if you really want to run them.
There is also the corresponding settings for “Domain profile” & “Private profile”:
"HKLM\SYSTEM\CurrentControlSet\services\SharedAcce ss\Parameters\FirewallPolicy”
however the “Private profile” seems to be named “StandardProfile” in registry.
There is some information on Winpatrol.com:
"Security Center Settings
- These values are those reminder balloons that let you know if you have Firewall and AntiVirus software installed. Some of you might want these disabled but in most cases you'll want to be notified if these values change from 0 to 1. If the value is 1 you won't be notified if your AntiVirus or Firewall software is disabled. When some programs infiltrate your system they'll change these values to 1 so you don't know. You can add these values so WinPatrol can auto protect you or let you know if someone is changing them.
HKEY_LOCAL_MACHINE
SOFTWARE\Microsoft\Security Center
Change Value Type to "REG_DWORD"
Add each of the following and click the Add button
Name: AntiVirusDisableNotify Value: 0
Name: FirewallDisableNotify Value: 0
"
But unfortunately that does not work.
Not on WS2008-R2, and not on W7.
You will not get any warning.
My script above works....
If you have WinPatrol-PLUS and W8 you can first try the settings from WinPatrol.com
If it doesnīt work, try my reg-script.
Then report back to this thread.
It would be interesting to hear what happens on W8....