Firewall corrupted... please reinstall (but doesn't work)

Discussion in 'ESET Smart Security' started by KOKOtm, Mar 23, 2010.

Thread Status:
Not open for further replies.
  1. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Hello together,

    the problem starts, after i found some "unknown devices" in the hardware manager. they all have the "eset_epfwndismp" in details. So i unstalled ESET, but the unkown devices remain after reinstall, but the firewall worked. So i found the ESET uninstaller tool. I followed the instructions:
    - Uninstalled ESET, rebooted.
    - Then rebooted to saved mode, used the uninstaller tool, deleted the ESET folders under roaming and local.
    - rebooted. The devices were deleted, i was happy...
    ... until i reinstalled ESET Smart Security 4.0... i got the error every time, that i should reinstall the firewall, which i did a lot of times, also i tried the new 4.2 versions with and without uninstaller tool, but nothing works any more. Every time i got the error with firewall malfunctioning. It said, that i choosed no filtering mode, which isn't true. I also tried some suggestions in the forum to use learing mode, but doesn't help either.

    So i give up now, don't know what more i can do. Any other suggestions?

    System is Windows 7 x64, ESET 4.0 german or 4.2 english, doesn't matter what i use.
     
  2. ls1

    ls1 Registered Member

    Joined:
    Jul 3, 2008
    Posts:
    4
    I've had the same problem since upgrading to 4.2 a couple of days ago and have not been able to resolve the problem either.
    Again Windows 7 but only 32 bit.
     
    Last edited: Mar 23, 2010
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    No problems installing ESS 4.2.35 on Windows 7 x64 with the latest updates installed.

    Just out of curiousity, does disabling self-defence and restarting the computer make a difference?
     
  4. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Disable Self-defense doesn't help. The firewall still doesn't work.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    This might be a compatibility problem with your NIC NDIS6 driver, installing the latest version or a compatible MS driver might help. Please create a log from SysInspector, look up "NDIS 6" and copy / paste the information about your NIC adapters, such as:
    "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0"
    "Intel(R) PRO/1000 NDIS 6 Adapter Driver"
     
  6. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Don't know how to use Sysinspector. I have created an XML file, that isn't really readable, if i post this.

    I also don't think, that this is the problem, because i didn't switched drivers and it worked before i unstalled ESET with the ESET Uninstaller. After that the problem occur with 4.0 and 4.2.

    I have tried the MS drivers, but they also didn't work. I only use my wireless LAN which is an Intel AGN 5100 NIC, 13.1.1.1 drivers are the latest from 13.01.2010.
     
  7. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could you please clarify whether you had v 4.0 installed before, then used ESET uninstaller to remove it and eventually installed v. 4.2? Do you know which build of v4.0 did you have installed previously?
     
  8. KOKOtm

    KOKOtm Registered Member

    Joined:
    Oct 15, 2007
    Posts:
    25
    Steps:
    4.0.474 german
    normal uninstall (system manager)
    4.0.474 reinstalled, still "unknown device"
    normal uninstall
    ESET uninstaller
    4.0.474 reinstalled, devices deleted, but firewall corrupted
    ...
    after that some combinations of normal uninstall with and without ESET unstaller and 4.0.474 and 4.2, that all failed.

    I used my System Recovery now ... problems are gone. I hope, i wont get the errors, when 4.2 german is available... ;-)
     
  9. GamaFu

    GamaFu Registered Member

    Joined:
    Mar 10, 2008
    Posts:
    11
    I have exactly the same problem with ESET SS 4.2 on Windows 7 64 bit after I updated it from 4.0. I left a message in BETA forum before the 4.2 officially released, but no one seems to care. I've contacted the customer service, tried few days to get this resolved. Nothing works. They ended up offering me refund which I did not take since it seems too much trouble. Therefore, don't get your hopes up, it's something they have no idea why. I now use other antivirus even though I paid for two years subscription.

    Now, what annoys me the most is that ESET SS somehow mess up the installation of network adapters. I am not able to install iPhone driver which allow me to tether through USB. However, bluetooth works fine. This happened before when I used the ESET Uninstaller like suggested in KB to completely remove the software. For some reason, if I don't manually uninstall each device under network adapters in the device manager, they will malfunction when I boot to Windows 7 from safe mode. I won't be able to connect to internet, the attempt to uninstall and reinstall them will give me the error: "Insufficient system resources exist to complete the requested service." Now, every time I try to tether through USB, the driver installation will fail and give me the same error even though ESET SS has long gone from my system. I've tried everything, nothing works.
     
  10. madun

    madun Registered Member

    Joined:
    Mar 30, 2010
    Posts:
    1
    I am having the same issues.

    I was on version 4.0/4.2 and uninstalled due to firewall issues. I then decided to migrate to Vipre, to give another vendor a go.

    The firewall functionality was disabled also on the new product.

    So I uninstalled this and tried, Trend Micro, and Even Mcafee.

    Each time, the firewall funcitonality was broken. Looks like version 4.2 Eset has screwed something along the way.

    I also restored TCP/IP settings in Windows 7, and its the same.

    I'm now back on Eset v4.2 and I have no Firewall still. In the device manager
    I have multiple Unknown devices.

    Windows 7 x32 Ultimate....

    Eset Please help !
     
  11. Infiniti

    Infiniti Registered Member

    Joined:
    May 28, 2009
    Posts:
    18
    I have the exact same problem...
    but my 3 Unknown Devices is still there and I have tried various methods to remove them. I tried first the Device Manager which said it uninstalled but they simple remain there unchanged. Then I tried deleting the registry branch but is gave me "access denied" error.

    Running Windows 7 pro x32
    Please find a fix quickly D:
    I feel so unprotected with the tray icon red D:!!!

    EDIT: Well, the I sent the dam unknown devices back to Tartarus...
    But... Firewall issue remains unfixed. ESET's turn now ._.
     
    Last edited: Mar 31, 2010
  12. Infiniti

    Infiniti Registered Member

    Joined:
    May 28, 2009
    Posts:
    18
    Here's mine, seeing that no one else bothered:

    Code:
    "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0" = "c:\windows\system32\drivers\b57nd60x.sys" Manual ; ( 1: Fine ) ; 
    "SHA1" = "AD958154711CA355C16FA5C35A2EAA39122CCAA2" ( 1: Fine ) ; 
    "Last Write Time" = "2009/07/13  18:02" ( 1: Fine ) ; 
    "Creation Time" = "2009/07/13  18:02" ( 1: Fine ) ; 
    "File Size" = "229888" ( 1: Fine ) ; 
    "File Description" = "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." ( 1: Fine ) ; 
    "Company Name" = "Broadcom Corporation" ( 1: Fine ) ; 
    "File Version" = "10.100.4.0 (cbuild.04262009-413,b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Product Name" = "Broadcom NetXtreme Gigabit Ethernet Driver" ( 1: Fine ) ; 
    "Internal Name" = "b57nd60x.sys (b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Signer" = "Microsoft Corporation" ( 1: Fine ) ; 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\b57nd60x.sys" 
     
  13. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Disabling self-defence and restarting the computer didn't work for you either?
     
  14. Boarchild

    Boarchild Registered Member

    Joined:
    Apr 1, 2010
    Posts:
    5
    I can confirm this happening on swedish Win 7 x64 aswell.

    This morning I found all my network devices redmarked and no network connectivity. Eset smart security marked firewall as corrupted..

    I tried most thing to rectify the issue, but to no avail, uninstalling smart security was the only way of getting back online.

    Reinstalling smart security once again broke all network connections.
     
  15. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    The Broadcom NDIS 6 driver is most likely another problematic driver which is causing problems in conjunction with the EPFW NDIS driver. Try updating its driver or replace it with a compatible Microsoft driver which should resolve the problem.
     
  16. Boarchild

    Boarchild Registered Member

    Joined:
    Apr 1, 2010
    Posts:
    5
    This also happened to nforce network adapters and intel network adapters in my machines. So replacing the broadcom driver does not seem as a solution to the problem.
     
  17. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could you please paste here the information about NDIS 6 drivers (as instructed above) so that we can see which brand is actually installed?
     
  18. Infiniti

    Infiniti Registered Member

    Joined:
    May 28, 2009
    Posts:
    18
    Nope, I also tried updating my drivers with Windows Update, which they updated, but it didn't change the "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0" in the sysinspector.
     
  19. Piklets

    Piklets Registered Member

    Joined:
    Apr 19, 2008
    Posts:
    5
    I've had exactly the same problem it seems... here is the stuff from SysInspector:

    Code:
    "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0" = "c:\windows\system32\drivers\b57nd60x.sys" Manual ; ( 1: Fine ) ; 
    "Internal Name" = "b57nd60x.sys (b57nd6x-rel_11.4-lhdepot1106.CL-70171)" 
    "Product Name" = "Broadcom NetXtreme Gigabit Ethernet Driver" 
    "File Version" = "10.100.4.0 (cbuild.04262009-413,b57nd6x-rel_11.4-lhdepot1106.CL-70171)" 
    "Company Name" = "Broadcom Corporation" 
    "File Description" = "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." 
    "File Size" = "229888" 
    "SHA1" = "AD958154711CA355C16FA5C35A2EAA39122CCAA2" 
    "Creation Time" = "2009/07/14  10:02" 
    "Last Write Time" = "2009/07/14  10:02" 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\b57nd60x.sys" 
    
    Code:
    "File" = "c:\windows\system32\drivers\ndis.sys" ( 1: Fine ) ; 
    "Internal Name" = "NDIS.SYS" 
    "Product Name" = "Microsoft® Windows® Operating System" 
    "File Version" = "6.1.7600.16385 (win7_rtm.090713-1255)" 
    "Company Name" = "Microsoft Corporation" 
    "File Description" = "NDIS 6.20 driver" 
    "File Size" = "710720" 
    "SHA1" = "989E18356BFA213314FBB13A1EBC65C801EE8143" 
    "Creation Time" = "2009/07/14  11:12" 
    "Last Write Time" = "2009/07/14  13:20" 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\ndis.sys" 
    
    Code:
    "File" = "c:\windows\system32\drivers\rspndr.sys" ( 1: Fine ) ; 
    "Internal Name" = "RSPNDR.SYS" 
    "Product Name" = "Microsoft® Windows® Operating System" 
    "File Version" = "6.1.7600.16385 (win7_rtm.090713-1255)" 
    "Company Name" = "Microsoft Corporation" 
    "File Description" = "Link-Layer Topology Responder Driver for NDIS 6" 
    "File Size" = "60928" 
    "SHA1" = "8BB34F68E9688AE474F4FF595B13B480C19FA8FD" 
    "Creation Time" = "2009/07/14  11:53" 
    "Last Write Time" = "2009/07/14  11:53" 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\rspndr.sys" 
    
    Code:
    "File" = "c:\windows\system32\drivers\wfplwf.sys" ( 1: Fine ) ; 
    "Internal Name" = "WFPLWF.SYS" 
    "Product Name" = "Microsoft® Windows® Operating System" 
    "File Version" = "6.1.7600.16385 (win7_rtm.090713-1255)" 
    "Company Name" = "Microsoft Corporation" 
    "File Description" = "WFP NDIS 6.20 Lightweight Filter Driver" 
    "File Size" = "9728" 
    "SHA1" = "7EA7698AC36084A70D5A319B7E184F1AF5B46848" 
    "Creation Time" = "2009/07/14  11:53" 
    "Last Write Time" = "2009/07/14  11:53" 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\wfplwf.sys" 
    
     
  20. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    You have exactly same Broadcom NDIS 6 driver installed. Unfortunately, we assume that the only workaround for the issue with problematic NDIS drivers will be switching the firewall to "Scan only application protocols" mode. We are collecting a list of the problematic drivers and planning to analyze them and make a workaround for this issue to future major builds.
     
  21. Infiniti

    Infiniti Registered Member

    Joined:
    May 28, 2009
    Posts:
    18
    Can you please walk us through on how to switch to "Scan only application protocols" mode?
     
  22. STRYDER

    STRYDER Registered Member

    Joined:
    Aug 21, 2008
    Posts:
    99
    In ESS open the program, hit F5, click on "Personal Firewall" then click on "System Integration" on the right click on the drop down and choose "Only Scan Application protocols".

    don't know if it works but thats how you do it.
     
  23. Infiniti

    Infiniti Registered Member

    Joined:
    May 28, 2009
    Posts:
    18
    WOW Instant success :)

    Feels so much more comfortable with that icon no longer red ^.^
    Good temporary fix until ESET straighten things out.
     
  24. PiTRiS

    PiTRiS Registered Member

    Joined:
    Apr 6, 2010
    Posts:
    6
    Same problem here... my NDIS driver is slightly different and also I experienced the same issue some time back with latest 4.0
    my NDIS from sysinspector:
    Code:
    "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0" = "c:\windows\system32\drivers\b57nd60a.sys" Manual ; ( 1: Fine ) ; 
    "SHA1" = "6165271F5F1EC6D643A3B4F5E301D18CB2242B92" ( 1: Fine ) ; 
    "Last Write Time" = "2009/06/10  22:34" ( 1: Fine ) ; 
    "Creation Time" = "2009/06/10  22:34" ( 1: Fine ) ; 
    "File Size" = "270848" ( 1: Fine ) ; 
    "File Description" = "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." ( 1: Fine ) ; 
    "Company Name" = "Broadcom Corporation" ( 1: Fine ) ; 
    "File Version" = "10.100.4.0 (cbuild.04262009-413,b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Product Name" = "Broadcom NetXtreme Gigabit Ethernet Driver" ( 1: Fine ) ; 
    "Internal Name" = "b57nd60a.sys (b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Signer" = "Microsoft Corporation" ( 1: Fine ) ; 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\b57nd60a.sys" 
    
    also, i see you mentioned updating the NDIS driver, but i'm not sure how to do this? googling aroung, i did not find any sufficient answer about this :/
    i'm not sure, if this has any connection to NIC drivers as my network cards are intel wifi link 5100 and atheros 8121, which has no connection to broadcom i think. Only broadcom thingy i have is bluetooth.

    thx for help, this is a real pain in the ass...
     
  25. klownz

    klownz Registered Member

    Joined:
    Apr 11, 2010
    Posts:
    2
    i'm having this same problem. i uninstalled the broadcom driver and reinstaled the new one. still didn't work.the driver came from Dell. this happened when i went from v4 to v4.2. not sure why its doing this. here is my sys info.

    Code:
    "Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0" = "c:\windows\system32\drivers\b57nd60a.sys" Manual ; ( 1: Fine ) ; 
    "SHA1" = "6165271F5F1EC6D643A3B4F5E301D18CB2242B92" ( 1: Fine ) ; 
    "Last Write Time" = "2009/06/10  15:34" ( 1: Fine ) ; 
    "Creation Time" = "2009/06/10  15:34" ( 1: Fine ) ; 
    "File Size" = "270848" ( 1: Fine ) ; 
    "File Description" = "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." ( 1: Fine ) ; 
    "Company Name" = "Broadcom Corporation" ( 1: Fine ) ; 
    "File Version" = "10.100.4.0 (cbuild.04262009-413,b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Product Name" = "Broadcom NetXtreme Gigabit Ethernet Driver" ( 1: Fine ) ; 
    "Internal Name" = "b57nd60a.sys (b57nd6x-rel_11.4-lhdepot1106.CL-70171)" ( 1: Fine ) ; 
    "Signer" = "Microsoft Corporation" ( 1: Fine ) ; 
    "Linked to" = "Drivers -> c:\windows\system32\drivers\b57nd60a.sys" 
    
     
Thread Status:
Not open for further replies.