Windows firewall not working properly

[DaniWeb4Jim]

I had trouble with ZoneAlarm so I uninstalled it. Not uninstalled and can not remove it to turn Windows Firewall on. So, Oh it gets better. Thinking I would get help by installing a new firewall (NOT), I installed COMODO Firewall. No they are both active by SSoftware and the registry doesn't know it is still there. I tried to turn off the Windows Firewall and it does not tell me I am at risk which was what prompted me to try other things.
Anyone have a clue? or FORMAT C:\?

[OlyComputers]

Windows firewall is designed to work in unison with third party security. You can turn it on while another is active and it wont tell you you're at risk when you disable it because it recognizes the other program.

As for getting rid of zonealarm:

1. Download the Windows installation cleanup utility.
2. Disconect your computer from the internet.
3. Uninstall both firewalls (preferably in safemode)
4. Once the uninstall packages have finished run the Windows installation cleanup utility, selecting the firewalls. This will clear all registry references.
5. Delete any files left over in your "program files" folder.
6. Reinstall the firewall of your choice (probably comodo)
7.Reconect to the internet.
8. If this didn't work, come back here and we'll see what we can come up with.

[DaniWeb4Jim]

Windows firewall is designed to work in unison with third party security. You can turn it on while another is active and it wont tell you you're at risk when you disable it because it recognizes the other program.

As for getting rid of zonealarm:

1. Download the Windows installation cleanup utility.
2. Disconect your computer from the internet.
3. Uninstall both firewalls (preferably in safemode)
4. Once the uninstall packages have finished run the Windows installation cleanup utility, selecting the firewalls. This will clear all registry references.
5. Delete any files left over in your "program files" folder.
6. Reinstall the firewall of your choice (probably comodo)
7.Reconect to the internet.
8. If this didn't work, come back here and we'll see what we can come up with.

THIS DID NOT WORK. In my thread I said that I uninstalled the Firewalls. I tried to remove everything like they discribed in the ZoneAlarm site and deleted the files suggested in Windows\sytem32. Still shows that I have a firewall. Comodo maybe still installed but in (TUT) I see both Firewall. I have hidden files unchecked and can see everything. No files related to the program are there. All folders and registry links are deleted. But TUT (The Ultimate Troubleshooter have it showing as active. HELP!!!!

[DaniWeb4Jim]

Nothing has worked and they are still registering in TUT as on but the registry has no reference to ZoneAlarm of COMODO Firewall at all.?????

[OlyComputers]

I'm not really familiar with TUT so I'm not really able to offer suggestions on it's use. The windows installer cleanup tool should have kept either firewall from ever coming on again, so I'm really not sure how it would survive that. Have you attempted reinstalling Comodo to see if it works properly?

[nsindian]

"I tried to turn off the Windows Firewall and it does not tell me I am at risk which was what prompted me to try other things." --- huh?

after you get to Security Centre click the option under Firewall that you have another application monitoring your firewall.

to remove your previous installations of other firewalls, download and run ccleaner and use the registry fixer

[DaniWeb4Jim]

"I tried to turn off the Windows Firewall and it does not tell me I am at risk which was what prompted me to try other things." --- huh?

after you get to Security Centre click the option under Firewall that you have another application monitoring your firewall.

to remove your previous installations of other firewalls, download and run ccleaner and use the registry fixer

I have Ccleaner, Registry Mechanic, RegCure, Registry Fix, Registry Repair V4.0, Clean My Registry, etc. About 16 cleaners. Nothing works. Is there a line of code to turn on the Windows Firewall alone?

[OlyComputers]

If you know your way around MSCONFIG you can go to the services and start-up tabs, removing anything that seems to be a reference to your security software.

[OlyComputers]

After your PM I noticed an inconsistancy, in your posts you just said that it wasn't giving you a security warning when you turn your firewall off, in your message to me you said that you couldn't turn it off.

The troubleshooting steps are very different depending on the case. If it's turning on and off but not giving you a security threat warning it's probably that the firewall is working properly but still detecting one of the third party firewalls. If it's just not turning on or off there's an issue with windows firewall.

[DaniWeb4Jim]

After your PM I noticed an inconsistancy, in your posts you just said that it wasn't giving you a security warning when you turn your firewall off, in your message to me you said that you couldn't turn it off.

The troubleshooting steps are very different depending on the case. If it's turning on and off but not giving you a security threat warning it's probably that the firewall is working properly but still detecting one of the third party firewalls. If it's just not turning on or off there's an issue with windows firewall.

You were reading and not interpreting what you were reading. No offense I would be confused also. I fixed it by going to the COMODO Site and in a forum I was given a solution a CFP3_File_Registry_Cleaner.Zip File.
Now IF I turn off Windows FIREWALL I get a prompt that I maybe at risk without the firewall. Befoire it said that 2 firewall were still running. The CFP**.zip file cleaned it and The Zonealarm solution they gave me turned of that one so NOW I GET A PROMPT THAT ONLY WINDOWS FIREWALL IS ON OR OFF.
GET IT?

[DaniWeb4Jim]

I marked it as solved and it shows no solved threads in my SOLVED THREADS LIST. THIS IS THE SECOND ONE I solved and it did not register. What am I doing wrong?

[DaniWeb4Jim]

Full Removal of Comodo Firewall Pro 3 with SafeSurf Toolbar (If Regular Uninstall Method Fails)
« on: December 15, 2007, 11:33:37 PM »

Novice users: see the bottom of this post for information on how to do this in an easy and fast way!

I encountered significant difficulty in removing a previous version of CFP so that I could upgrade to the most recent edition, v3.0.14.276. In reviewing some recent posts about incomplete or aborted installation routines, I thought I would post a set of comprehensive instructions for completely removing CFP.

In particular, these instructions should help upgrading users who receive the message, “COMODO Firewall Pro is already installed. Do you want to un-install it now?" and after checking either the “Yes” or “No” button, nothing happens.

These instructions are specific to Windows XP Pro SP2 x32. However, they may be adapted to your particular Windows installation, including Vista. I make no guarantees that these instructions will work in your specific situation. On my partitioned system, F:\ is used for Program Files. Most users will have C:\ as the default location for Program Files.

Caution: These instructions involve modifying the Windows Registry, either manually or by using a specialized registry management tool. If you are unsure of your ability to do this, there's an attached batch file that'll automatically delete everything mentioned below.[/i][/u].

If you have experienced problems removing CFP in the past, uninstalling in Safe Mode may work. However, these instructions are not intended for use in a Safe Mode environment, though they may work. I have not tested them in Safe Mode.

Before starting, make sure that you understand how to use Windows Regedit and its search function. A good tutorial for this is located at: http://www.theeldergeek.com/windows_xp_registry.htm

Alternatively, you may want to install a well-known registry tool that includes a configurable search function and other utilities to remove references to installed software as well as any associated registry keys. I use RegSupreme Pro and jv16 PowerTools. Use whichever registry tool(s) you feel comfortable with. While Windows Regedit offers basic functionality, it may not locate all relevant keys and values, which could preclude a successful upgrade to the latest version of CFP. A good registry management tool is a worthwhile investment.

Optionally, I also recommend having a dedicated uninstaller utility, such as Your Uninstaller! 2006. Again, use whichever third-party uninstallation program you prefer. Otherwise, use the Control Panel’s “Add/Remove Programs” applet.

If anyone has additional steps they feel should be added to this list of instructions, please let me know and I will amend this post accordingly. If there is enough interest by other members, perhaps this could be made “sticky” until some of the kinks have been worked out of future versions of CFP.

1. Mandatory: create a System Restore point and label it appropriately. Optionally, perform a full backup of your system (you should be doing this, anyway).

2. Temporarily disable your Internet connection and shut down ALL unnecessary processes using Task Manager (a utility called EndItAll can make this task easier).

3. Open your third-party uninstallation tool (or Control Panel > Add/Remove Programs) and run it as you would normally uninstall any application.

4. If given the option, do not reboot when the uninstallation routine completes. Instead, first clean out all temporary files, using the Windows Disk Cleanup utility. Optionally, you may manually inspect other folders in which temporary files are typically found and delete them.

5. Run your registry cleaner. Be sure to make up a backup of the keys that are removed, just in case.

6. Reboot.

7. After rebooting, once again shut down ALL unnecessary processes using Task Manager and EndItAll.

8. Remove the following folders and files, if they still exist. *Caution: if you are using other Comodo products, some of the folder and files listed below should not be removed. Check the forum for guidance, as I am using only CFP):

a. *C:\Documents and Settings\All Users\Application Data\comodo
DO NOT delete the folder above if you are running other Comodo products, such as CMF.
b. C:\Documents and Settings\All Users\Desktop\COMODO Firewall Pro
c. C:\Documents and Settings\%user name%\Application Data\Comodo
d. C:\Program Files\[Comodo Firewall Pro folder]
(If you have partitioned your drive, the Comodo program folder be may in another location.)
e. C:\boot.ini.comodofirewall (this file may not exist).
WARNING: Do not mistakenly remove the original “boot.ini”.
f. *C:\WINDOWS\system32\drivers\cmdGuard.sys
g. *C:\WINDOWS\system32\drivers\cmdhlp.sys
h. *C:\WINDOWS\system32\drivers\inspect.sys
i. *C:\WINDOWS\system32\guard32.dll

* [denotes a folder or files that may be necessary for other Comodo programs running on your system.]

9. Open Device Manager (Start > My Computer > Properties > System Properties > Hardware [tab] > Device Manager > View > Show Hidden Devices > Non-Plug and Play Drivers > [Remove all Comodo entries]. Entries may include some or all of the following:

a. Comodo Application Engine
b. Comodo Firewall Pro Driver Helper
c. Comodo Network Engine.

Note: if you have already removed the drivers listed in Step 8 above, some or all of the Comodo entries listed above may or may not be present. If so, clicking “Properties” on Comodo Application Engine may show that “This hardware device is no longer connected to the computer.” The other two will likely report that they are “working properly.” To remove these entries, you may be prompted to reboot; however, do not waste time with multiple reboots trying to remove these entries as it is likely that a set of remnant registry keys is allowing the entries to remain. Proceed to Steps 10 and 11 to resolve this.

10. Open Regedit or your third-party registry tool and remove the following keys.
USE CAUTION if you have other Comodo products installed. This is NOT an all-inclusive list; there may be other entries on your system not shown here (this list was modified on 12/21/07):

a. HKEY_CURRENT_USER\Software\ComodoGroup\CFP
b. HKEY_LOCAL_MACHINE\SOFTWARE\ComodoGroup\CDI\1 *
*(If you have other Comodo products installed, delete only the values
for CFP)
c. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
\cmdAgent
d. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
\cmdGuard
e. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdHlp
f. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Inspect
g. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services
\cmdAgent
h. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services
\cmdGuard
i. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdHlp
j. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Inspect
k. KEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services
\cmdAgent
l. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services
\cmdGuard
m. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdHlp
n. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Inspect
o. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdAgent
p. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdGuard
q. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdHlp
r. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\Inspect
s. HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo\Firewall Pro
t. HKEY_USERS\S-1-5-21-1202660629-746137067-2145843811-1003\Software\ComodoGroup\CFP
u. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDAGENT *
v. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDGUARD *
w. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDHLP *
x. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_INSPECT *
y. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDAGENT *
z. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDGUARD *
aa. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDHLP *
bb. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_INSPECT *
cc. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_CMDAGENT *
dd. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_CMDGUARD *
ee. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_CMDHLP *
ff. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_INSPECT *
gg. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDAGENT *
hh. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDGUARD *
ii. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDHLP *
jj. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_INSPECT *
kk. HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\CFP_Setup_3.0.14.276_XP_Vista_x32
ll. HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\CFP_Setup_3.0.14.276_XP_Vista_x64
mm. HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\CFPLog
nn. HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\CPFFileSubmission
oo. HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo\Firewall Pro

*Note: It may not be possible to remove these "LEGACY" keys. If you cannot delete them, leave them in the registry. However, I have subsequently found that you MAY be able to remove these keys in Safe Mode by using a third-party registry tool. To permanently remove them may also require modifying the Permissions for each key. See: http://forums.comodo.com/help_for_v3/comprehensive_instructions_for_completely_removing_comodo_firewall_pro_info-t17220.0.html;msg119226#msg119226

If you are using a third-party registry tool, it may offer a feature that manages references to installed software. Search for these entries that contain “comodo” and remove them, again exercising particular caution if you have other Comodo products installed.

11. Open Regedit and highlight “My Computer”. Then click Edit > Find and run searches for the terms “comodo”, “cmd*” and “inspect” (without the quotes). For the “cmd*” wild card search string, be careful not to delete any registry entries that reference “cmd” that is associated with command. Ensure the entry is associated only with Comodo. If you are using a third-party registry tool, use its search function according to the instructions. Again, make a backup of any keys that are removed, just in case.

12. Reboot.

13. Temporarily disable your Internet connection again, and open Windows Security Center. Check to see that there is no reference to Comodo Firewall Pro. If so, proceed to Step 14. Otherwise. if the Windows Firewall has been re-enabled, disable it. Proceed to Step 15.

14. If there is still a reference to Comodo Firewall in Windows Security Center, run the “Wbem.exe” tool to reset the Security Center notification list. This tool is available from the Comodo forum (search). If you cannot find this tool for some reason, follow these steps (courtesy of forum member “pandlouk”):

a. At the command line of Windows XP [Start > Run] enter the command "CMD" (without the quotes) and press Enter.
b. At the new Command Prompt window, type
"NET STOP WINMGMT /Y" (without the quotes; there must be a space between WINMGMT and /Y) and press Enter. Then type "exit" end press Enter again.
c. Go to the folder C:\WINDOWS\system32\wbem and delete the folder "Repository".
d. Reboot. The Repository folder will be recreated automatically by the Security Center and will now display the correct information.

15. Shut down ALL unnecessary processes using EndItAll and Task Manager.

16. Install the latest version of CFP and configure as desired. Reboot if prompted.

17. Upon reboot, export your new default CFP configuration before making any changes to the firewall settings.

My contention is that no software should be this difficult to remove and/or install.
In the meantime, I hope these instructions will help reduce the time and difficulty in migrating between different versions of CFP. I am confident that, eventually, the Comodo programmers and developers will offer a more streamlined method of upgrading to future versions of this otherwise excellent firewall system.

------------------------------------------------------------------------------------------------------------
For novice users or people that want to save time

This batch file should work on Windows XP and Windows Vista (all languages) using the final version of CFP 3 (until the current release, 3.0.25.378) with SafeSurf Toolbar installed.
Vista users will have to run the batch file as an administrator. For Windows XP-users, make sure you're logged in on an administrator account.
The legacy keys have to be removed manually, since they're protected by the system by default. Read step 10 in USSS' guide if you need help doing that.

The zip-file is attached to the post, so just click it and download will begin.
If you for some reason wouldn't see this link, you can download it thru RapidShare:
http://rapidshare.com/files/126630164/CFP_3_File_Registry_Cleaner.zip.html

Now unzip it using Windows built-in unzipper or a software like WinRAR or 7-zip, and then run it.

THIS IS NOT MEANT AS A STAND-ALONE UNINSTALLER, IT'S MADE TO DELETE LEFT-OVER FILES AND REGISTRY ENTRIES!