Reg-script for WinPatrol warns if windows firewall is off

Forums General General Discussion Windows Security Reg-script for WinPatrol warns if windows firewall is off

Viewing 0 reply threads
  • Author
    Posts
    • #44674
      hackerman1
      Moderator

        Hi !

        Since there is no taskbar-icon when you use windows firewall you don´t know if a nasty malware manages to turn it off.
        But if you have WinPatrol-PLUS you can get a warning thanks to it´s registrymonitoring.

        Run the following reg-script and WinPatrol will give you a warning if windows firewall is tuned off.

        REGEDIT4

        [HKEY_CURRENT_USERSoftwareBillP StudiosWinPatrolRegOptions]
        "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\EnableFirewall" =dword:00000001

        Save this file as fx. “Winpatrol.reg”
        Run the script, click on them just like any other program, then say “Yes” when you are asked if you really want to run them.

        There is also the corresponding settings for “Domain profile” & “Private profile”:
        “HKLMSYSTEMCurrentControlSetservicesSharedAccessParametersFirewallPolicy”
        however the “Private profile” seems to be named “StandardProfile” in registry.

        There is some information on Winpatrol.com:
        Security Center Settings

        These values are those reminder balloons that let you know if you have Firewall and AntiVirus software installed.
        Some of you might want these disabled but in most cases you’ll want to be notified if these values change from 0 to 1.
        If the value is 1 you won’t be notified if your AntiVirus or Firewall software is disabled.
        When some programs infiltrate your system they’ll change these values to 1 so you don’t know.
        You can add these values so WinPatrol can auto protect you or let you know if someone is changing them.

        HKEY_LOCAL_MACHINE
        SOFTWAREMicrosoftSecurity Center
        Change Value Type to “REG_DWORD”
        Add each of the following and click the Add button
        Name: AntiVirusDisableNotify Value: 0
        Name: FirewallDisableNotify Value: 0

        But unfortunately that does not work.
        Not on WS2008-R2, and not on W7.
        You will notget any warning.

        My script above works….

        Note: Not tested (yet) on WS2012.

    Viewing 0 reply threads
    • You must be logged in to reply to this topic.