-1

I installed some app that hacked my computer and I cleared this app but this app block google ip on my windows firewall but I cannot find the rule that blocked google on my machine I don't want to do a format I just want to find where is the ip is blocked or even allow the ip again

netsh advfirewall reset

I notice that the virus requests netsh.exe while executed

That's not duplicated question I have no virus issue now , there is only a certain ip cannot be unblocked unless I do a format that's emans my firewall block it some where

2 Answers2

1

After long analysis Problem is located The Bad file is applying netsh rules with special policy using netsh advfirewall reset will not help it will leave the policy as it is with the same values filters so by deleting the policy issue solved , the other answer is considered as wrong answer that's why I posted my correct answer to help others , its not malware nor spyware or any thing else ..

simply I opened CMD as administrator and delete netsh rules eg.

netsh ipsec static delete rule ...
0

No method of removing any virus is ever 100% guaranteed.
You computer can not be trusted anymore, unless you do a full format and re-install from scratch.

Having said that, try these steps:

  1. Disable the Windows firewall. If it is still blocked it isn't caused by the firewall.
  2. Remove the file called "hosts" in c:\windows\system32\drivers\etc
  3. If that also doesn't bring a solution there is still malware left on your computer. Go back to my initial statement at the top.
Tonny
  • 33,276