[Jimbobthepirate]

I have barely any connection bewtween me and any games online. I know some is down to ISP but i couldn't be pinged etc. Windows firewall may have been badly installed since when i try to turn on or off i cannot select either setting tehy are greyed out.

Ive made 2 different accounts and tried admin on both including this one and still cannot select.

followed teh instructions first

http://support.microsoft.com/kb/914230

Lost me my account and had to ring up Microsoft online telephone activation.

Any ideas

[Rollin' Rog]

The gaming issue is probably not related to the firewall; if the firewall is not on, it should not affect games.

However something is clearly wrong if you cannot turn on the firewall.

First of all, if you run services.msc, is the "Windows Firewall/Internet Connection" service there?

If you try to start it manually, is there an error message?

If you run eventvwr.msc and look at the System log, are there any firewall related error messages there?

Have you also tried these directions?

http://windowsxp.mvps.org/sharedaccess.htm

[Jimbobthepirate]

The firewall is permenantly on and is in the list of services.msc and i can disable.

Had a few errors in Source and called NetBT and a the very odd ones in Tcpip
but mainly NetBT and had 5 of them events for these say 4311 and user n/a.

Teh firewall is permenantly on and no turning off

When to follow those instructions but i'm on service pack 2 so no idea if that would be compatible.

Thanks again

[Rollin' Rog]

The instructions are for when you cannot turn the firewall on, not off.

I'm a bit confused -- you say the firewall is in the list of services; if it is there, is there an error message when you try to STOP it?

If you double click it's properties and set the startup mode to "disabled" and reboot -- what happens?

Also, run regedit and navigate to the locations below -- do you have the highlighted keys; if you do, try right clicking on and deleting them, then reboot:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfil e
(and)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProf ile

note this is "windowsfirewall" NOT "windows".

These are non-standard policy setting keys.

Again I do not see this as a gaming issue -- you either connect or you don't -- it can't possibly affect your speed -- at least not the Windows firewall. Do you have something else installed?

Post a Hijackthis scanlog:

Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

[Jimbobthepirate]

Logfile of HijackThis v1.99.1
Scan saved at 16:29:16, on 26/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\J\Desktop\New Folder\showme.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1167235843888
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{76520A8A-9D68-44F2-8C17-30FA4F5FE8FF}: NameServer = 212.139.132.20 212.139.132.21
O17 - HKLM\System\CS1\Services\Tcpip\..\{76520A8A-9D68-44F2-8C17-30FA4F5FE8FF}: NameServer = 212.139.132.20 212.139.132.21
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


No the firewall cannot be turned off but is automatically set to on and greyed out for no options. There is no error message except for in that log file of eventvwr.msc then it shows tjose errors i listed.

i can turn fire wall of by services.msc but it re-enables itself on reboot.

in both files of regedit it has Name- ab(default) Enable fire wall ( things in that column not sure how to describe)
Type- Reg_Sz and Reg_Dword
Data ( value not set) 0x00000001 (1) Under those columns not together

In both files u asked me to enter

Should i delete?
The reason i was asked to look at this in the first place was because noone could ping me on a game and they thought it may have been a windows firewall problem not allowing acess or something similiar.

[Rollin' Rog]

If you delete those "WindowsFirewall" keys you should have complete control over the firewall once you reboot. They are NOT standard keys.

However, I see you have the Nvidia Network Access Manager installed. This is a chipset based firewall that has caused much grief and is more likely to be a cause of your problems than the Windows firewall.

I would recommend removing it through Add/Remove programs; leave the Windows firewall enabled.

When fully removed these entries should no longer be present in the scanlog:

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)

O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.ex

O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

If you have any connectivity issues after removing it, go to start > run: enter cmd and at the command prompt enter:

netsh winsock reset catalog

and reboot.

[Jimbobthepirate]

Yay thank you the first tip worked.

Ty Ty Ty Ty

[Rollin' Rog]

And has it actually resolved the gaming issue for you?

If all is well, you can mark the thread "Solved" using the Thread Tools menu here.

Of course, you are most welcome.

[Jimbobthepirate]

No I think i may be my isp w which is pipex homecall.

Enough said?

[Rollin' Rog]

Well as I mentioned before, I think you should uninstall the Foreceware (Network Access) firewall.