Unable to turn on the XP SP2 Firewall

[coax31]

I am working on a machine that is running Windows XP Home Edition SP2 and it will not let me turn the firewall on. The controls are greyed out and it says they are controled by group policy? I didn't thing XP home could be controlled by group policy? Any suggestions this machine was seriously infected with viruses and spyware I cleaned most of it up. I also can not turn on Norton 's 2004 Auto Protect.

 

[WPFossil]

1. It's possible there are traces of the virus or virsues causing this
2. Make sure you have administrative rights

 

[coax31]

Thanks for the response, this machine was hooked to a DSL connection for 2-3 years with no firewall or virus software. It didn't even have SP1, I wanted to format and reinstall but the owner does not have the recovery disks. I think it has some VX2 spyware that keeps writting to the HOST file that Spybot or ADaware cannot remove MS Anti spyware didn't get it either. I tried to remove it with Highjackthis but it keeps comming back.

 

[montag451]

If you think it has some nasties, then scan with your adaware, and spybot, and MS and trojanhunter and spyhunter, all updated, and run them all in SAFE mode.

 

[Slikkster]

Path: Parasites > Adware > VX2.cc · Articles· Terms· Parasites · Entries· Files· Software· Contacts· Link to us· RSS Feeds
Remove VX2.cc,
description and removal instructions:
Back to adware Full name: VX2.cc

Type: Adware

Severity scale: (30 / 100)

VX2.cc description: From the publisher:
'Vx2, Inc. is a software development company. We have developed a series of ad targeting applications such as vx2.dll that help advertisers deliver targeted ads.'

Information URL: http://www.vx2.cc/

VX2.cc properties:
? Changes browser settings
? Shows commercial adverts
? Connects itself to the internet
? Hides from the user
? Stays resident in background


VX2.cc automatic removal:
download removal software

VX2.cc manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ BrowserHelperObjects. You should find and delete the \'{00000000-5eb9-11d5-9d45-009027c14662}\' key

Delete the key:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects{00000000-5eb9-11d5-9d45-009027c14662}


Delete files:
IEHelper.dll, domlst.cch