Guest Jepoi Posted January 10, 2009 Posted January 10, 2009 I have problem in my Windows firewall Home Premium and it seems my Windows Firewall Authorization Driver (mdsdrv.sys) is missing under Device Manager (View>Show hidden devices>Devices by connection), I think this is the one causing the WF in not being started under services. Where and how to reinstall this driver? Already did the sfc /scannow and no error reported. Any help would greatly be appreciated. Thanks! Quote
Guest Engel Posted January 10, 2009 Posted January 10, 2009 Hello Jepoi, Doesn't hurt to try the links in safe mode (F-8). The symptoms you describe indicate that a malware known as Vundo\Virtumonde is resident. Using Internet Explorer, have the system scanned here: <http://onecare.live.com/site/en-au/center/howsafe.htm> Several posters in this newsgroup have reported that the malware was successfully removed using the above scanner. You can use Google to find it if the OneCare scan doesn't remove it. Others have used Superantispyware and/or Malwarebytes Antimalware to remove the malware. There is a free version (on demand scanning only), the paid for version includes active monitoring, similar to Windows defender: <http://www.superantispyware.com/> -=- Also free, Malwarebytes Antimalware <http://www.malwarebytes.org/mbam.php> Good luck -=- "Jepoi" wrote: <span style="color:blue"> > I have problem in my Windows firewall Home Premium and it seems my Windows > Firewall Authorization Driver (mdsdrv.sys) is missing under Device Manager > (View>Show hidden devices>Devices by connection), I think this is the one > causing the WF in not being started under services. Where and how to > reinstall this driver? Already did the sfc /scannow and no error reported. > Any help would greatly be appreciated. Thanks!</span> Quote
Guest Jepoi Posted January 11, 2009 Posted January 11, 2009 Hi Engel thanks for the reply I scanned it with Onecare Safety scanner, Malwarebytes Antimalware, AVG antivirus, and Spyware Doctor and all reported no infections found. Also I don't found any abnormal behavior in my system. "Engel" wrote: <span style="color:blue"> > Hello Jepoi, > > Doesn't hurt to try the links in safe mode (F-8). > > The symptoms you describe indicate that a malware known as > VundoVirtumonde is resident. Using Internet Explorer, have the system > scanned here: <http://onecare.live.com/site/en-au/center/howsafe.htm> > > Several posters in this newsgroup have reported that the malware was > successfully removed using the above scanner. > > You can use Google to find it if the OneCare scan doesn't remove it. > > Others have used Superantispyware and/or Malwarebytes Antimalware to remove > the malware. > > There is a free version (on demand scanning only), the paid for version > includes active monitoring, similar to Windows defender: > <http://www.superantispyware.com/> > -=- > > Also free, Malwarebytes Antimalware <http://www.malwarebytes.org/mbam.php> > > > > Good luck > -=- > > > > "Jepoi" wrote: > <span style="color:green"> > > I have problem in my Windows firewall Home Premium and it seems my Windows > > Firewall Authorization Driver (mdsdrv.sys) is missing under Device Manager > > (View>Show hidden devices>Devices by connection), I think this is the one > > causing the WF in not being started under services. Where and how to > > reinstall this driver? Already did the sfc /scannow and no error reported. > > Any help would greatly be appreciated. Thanks!</span></span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.