Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

Should I install another firewall if I can’t turn on the Windows firewall?

Question:

Hi, Leo. I was wondering if I should download a firewall. My Windows
firewall is disabled, turned off, and it won’t let me turn it back on or use
the recommended settings. I was thinking about downloading a firewall since
this is important. Do you think it will harm my computer to download one? I
know you’re not supposed to have more than one firewall running – as they can
conflict with each other and cause the computer harm and to crash. But since
it’s disabled and won’t turn back on, I didn’t figure it would hurt since it
wouldn’t be the same as using one anyway, because the other is permanently
disabled. What do you think?

In this excerpt from
Answercast #51
, I look at a system that has disabled the Windows firewall.
This is a symptom of malware.

Become a Patron of Ask Leo! and go ad-free!

Disabled firewall

I think you’ve got a bigger problem.

I think the solution here is definitely not to install another firewall.
Sure, you can, it may not harm anything. My typical recommendation, instead, is
just to rely on the firewall that your router provides – but that’s neither
here nor there.

My real concern here is the fact that you can’t turn the Windows firewall
on. That’s bad. That is something that needs to get fixed.

Symptom of malware

The reason I say that is because this is one of the symptoms of malware.
Malware will often go through extra steps to disable things, like your
firewall, and make it impossible to turn on. They will often also disable your
anti-malware software and make it impossible to get updates for that.

So, my very strong recommendation is that, for the the moment, you forget
this additional firewall issue and instead – focus on clearing what is likely
to be some kind of malware infection on your machine.

Check for viruses

  • Run up to date anti-virus and anti-spyware scans.

  • Consider running the free tool from Malwarebytes.org and see if you can’t
    clear up whatever is preventing the firewall from being able to be turned
    on.

Once you fix that, well, then the whole issue becomes kind of moot. You turn
on the firewall, the Windows firewall and you’re good to go.

And like I said, even then if you’re behind a router, in my opinion, you’re
actually safe enough leaving the firewall turned off. But the fact that you
can’t turn it on, well, that is a problem and that’s a problem I think that
needs to be addressed.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

5 comments on “Should I install another firewall if I can’t turn on the Windows firewall?”

  1. I agree with Leo 100% that there is a bigger problem and that it is almost certainly a virus issue. If you want a really good firewall, I highly recommend Comodo Pro Firewall. It’s much better than Windows firewall (which only blocks ‘incoming’ threats). Comodo blocks incoming AND outgoing threats (If some virus does get your info, it can’t send it out of the computer without your permission). I also highly recommend Emsisoft Ant-malware and as Leo said, Malwarebytes. Just be sure to choose ‘freeware mode’ when setting up Emsisoft (keeps it free, which is a good enough version for most) or you will only get a 30-day trial. Good Luck!

    Reply
  2. Not necessarily. If you install Microsoft Security Essentials, it will disable Windows Defender to avoid conflicts.
    If you’re not running MSE, then I agree!

    Reply
  3. If there is no malware found, then there is a possibility that you have a problem with your Windows implementation. How you handle that will depend on what version of Windows you are running.

    Reply
  4. I have spent much time trying to remove Windows Operating System corruption issues caused by criminal-ware.
    I have found it is usually quicker to ‘bite the bullet’ & install Windows
    Jp

    Reply

Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.