Is my Firewall ON or OFF? Why this Notification?

I'm running Win10 Pro,2004, Build 19041.572,with default Windows Defender and no 3rd party AV or Firewall
I've had the same policy unchanged for ages, except that...
I recently trialled MalwareBytes. I didn't get on with it that well and soon uninstalled it.

I was also persuaded to try another MB product; can't remember details, but I think it was a browser extension.
I turned that off when it barred the late Chip Pearson's website (where Excel buffs can mine 100% pure gold VBA code. His website is 110% kosher; and MB should not be blacklisted IMO.
It's ill intentioned people that's the problem, not Chip's wonderfully documented examples.).
So the browser extension got promptly booted out too.

Neither Apps nor Control Panel now show any trace of MB, nor is there a top level folder in Program Files or x86

But Since MB I get this notification to turn on Windows Firewall after every re-boot

and I also see this


Reading other threads here, I suspect the MB uninstall was not complete, and has left traces of when it was top-dog firewall.

Can anyone help me return to Plain Vanilla Windows Defender?

I lead a very cautious and blameless life, and believe my activities are pretty risk-free

spilly

Thanks Jaycee, but no joy yet

I found more than one Windows defender Firewall node in services (one was prefixed "Microsoft ...", and the other was not).
I used only the one you specified (not prefixed)

Found the settings greyed out, so did a safe mode restart, and was able to restart the service there

On reboot I had two notifications

No change in Win Security report, saying No providers


Next move??

- - - Updated - - -

I thought I'd found a fix myself - but no luck

In Windows Security there is a button to "Restore Firewalls to Default" atthe bottom

Despite a reboot after resetting to default, the notification of No firewall still occurs.


I've poked around the Advanced security settings - I changed nothing; all appear reasonable & default

I've run out of ideas.
It's no disaster, but just irritating


spilly

Hi Jaycee
Your computerhope thread took me to the same place I'd checked last night before y'day's postEvery setting I can find is set to default values, yet it still notifies me that firewall is off after every reboot


Looks like it needs a registry hack to get it back to the original pre-MB state
I don't like ignoring security warnings, but I'm not sure I have the energy to search elsewhere just for this irritant


spilly

spilly said:

Hi Jaycee


Looks like it needs a registry hack to get it back to the original pre-MB state

Consider a System Restore prior to installing MB.

@x509

Like you I have relocated all my data to a D:drive and so can happily look at a complete restore of C: from my Reflect backups.
and then just allow WindozeUpdate to catch me up again.

The only hassle is that I've just installed Office 2019 clickToRun alongside my ancient copy of Office 2007,
I need to recall and record my preparation steps first so I redo the install properly.


My gut feel is that there's a registry setting bent rather than a serious intrusion by a "bad actor", but yes, you and I are on identical tracks

spilly

- - - Updated - - -

I've looked at my services WIndows Defender Firewall

Startup is Automatic, but the svchost parameters are as follows

C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p

That "NoNetwork" looks suspicious.

The node is locked up, so I can't edit it

Can anybody help with correct parameters please?

spilly