Windows 10: Safety Aspect ?

This is what I get no matter how many time I run it.

Microsoft Windows [Version 6.4.9860]
(c) 2014 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>SFC /SCANNOW

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.

C:\WINDOWS\system32>

 

That warning makes no sense. Of course your router is accessible from the internet. How else would the internet work? Your router *IS* what gives access to the internet... why all of your computers are reporting it. You are of course wrong stating that my router should be accessible to all and sundry to gain access to my computer and all details therein, that's what firewalls are there for.
Thanks to the warnings given by Avast as shown in my original post I have been able to rectify it.
How ? By clicking on "disable access to your router from internet" under the word Solution...see attachment first post.
How was it enabled in the first place ? it can only be either W10 TP or my broadband supplier to gain info.

 

SFC reports 100s of 'errors' because Win10 is limited to English. Most, if not all, of the 'errors' reported are language related (LP and fonts). There is nothing an end user can do to get around this and these 'errors' can be safely ignored in the Tech preview.

A few comments about DISM
1) Elevated Command Prompt:
Dism /Online /Cleanup-Image /RestoreHealth
2) Elevated PowerShell
Repair-WindowsImage -Online -RestoreHealth
You tried the Powershell version in Command Prmopt - that won't work.

About security on Win10:
I'm running the preinstalled Defender and feel comfortable doing so.
Avast previously had an install issue, so I'd be wary of it's readiness for Win10

My suggestion is to forget about trying to get Avast running on Win10 and protect the system with Defender ... for now. Let Avast work out the issues for a while and try installing later. If there are still Avast issue, stay on Defender until those issues get resolved. You're not having any fun this way - trying to work through Avast / Win10 issues.

 

On mine SFC & DISM are automatic
They run in the background the same as it does for Defrag and whatever else during maintenance

Never tried running them manually, as I have seen them run on their own in task manager

 

Good catch. How was it enabled in the first place?

Not knowing your ISP makes it difficult (I didn't scour the thread though). Some ISPs do set the router that way (or don't bother to change the router's default) so they can access your network. If you have a bundled pkg (phone, TV, Internet) the ISP might have a legitimate need - I know Vze often resets the network as one of the 1st things when trying to trouble shoot an issue.

I'd give your ISP a call and ask them about it instead of relying on Avast's reporting an 'erroneous' router setting. You could check with Avast as well, but I think your ISP knows best.

Bill
.

 

That warning makes no sense. Of course your router is accessible from the internet. How else would the internet work? Your router *IS* what gives access to the internet... why all of your computers are reporting it. You are of course wrong stating that my router should be accessible to all and sundry to gain access to my computer and all details therein, that's what firewalls are there for.
Thanks to the warnings given by Avast as shown in my original post I have been able to rectify it.
How ? By clicking on "disable access to your router from internet" under the word Solution...see attachment first post.
How was it enabled in the first place ? it can only be either W10 TP or my broadband supplier to gain info. How does the software firewall protect the router? I always thought that was why routers have hardware firewalls. I admit I don't know a lot about firewalls.

 

Paul: I checked TaskScheduler and only see WinSAT under Maint (Defrag is a seperate task)
Do you see Event logs showing that SFC and DISM ran or are there TaskScheduler enteris (what category?)

I'm wondering if what you're seeing is part of the Tech Preview process (check for preview builds) or part of Win10.

Curious minds want to know *Wink

Bill
.

 

Paul: I checked TaskScheduler and only see WinSAT under Maint (Defrag is a seperate task)
Do you see Event logs showing that SFC and DISM ran or are there TaskScheduler enteris (what category?)

I'm wondering if what you're seeing is part of the Tech Preview process (check for preview builds) or part of Win10.

Curious minds want to know *Wink

Bill
. The background processes and what they do go a little over my head at times, I am using 10 in a VM and only have 1GB allocated to it, which normally works reasonably well, but when the maintenance kicks in it does get sluggish

When I have looked a task manager when this happens it has had, both with quite high CPU use and disc activity

DISM - and some words after I cant remember
System File Checker

These could be for different things I don't know, but they sound the same, looked in event viewer and scheduled tasks but cannot find anything

I will watch out for them next time and get a screen grab

 

Thanks for that, LB. *Smile That copy/paste function in Command Prompt and PowerShell is a great new feature.

@ dencal

Just for info:

HTG Explains: I Have a Router, Do I Need a Firewall?

I’ll let MrE speak for himself, but he is correct and I do think the warning is at the least confusing. Perhaps it needs rewording. The router does indeed need access to the Net. It should have a firewall as explained in the article I posted. Then, the way I understand it, your ISP has a router that your router is connected to that has a firewall, therefore not everyone should have access to your router, save your ISP, which should be trusted. E.g. If you don’t pay your bill, they’ll unplug your router or disable it or they could temporarily disable all or some routers on the system for maintenance. Your ISP can’t get to your device because of a system firewall or at least they shouldn’t be able to.

So far as your 10TP system is concerned; I’ll assume it was configured as a part of your home network that’s why the warning from Avast? Dunno. I would reconfigure that not to be in Home Group. Since Avast can’t be loaded I’m quite sure Defender is sufficient. I wouldn’t and don’t keep personally-sensitive files on my 10TP.

 

I think I have finally solved this problem, the guilty party Microsoft.
A condition for installing W10 preview is being able to control the transmission of data. See link below.
To do so would mean they would be able to bypass the normal security inbuilt by the ISP router.
If you read the conditions below you will notice that the only way to stop this is by removing W10 completely from the computer affected.
How did other household computers get compromised, Cloud connection meant data transfer.
My ISP strongly recommend denying access to outside access, although they do give the option such as for example allowing Microsoft access if one so wishes.
Microsoft Privacy Statement – Microsoft privacy
Suggestions that this is a W10 versus Avast thread is absurd, I am only interested in maintaining security on all other computers in my household which have not got W10 installed yet operate from the same modem safely.

 

Your above link is not recognised by W10. That command is a PowerShell command that must be run in a PowerShell prompt, not a command prompt.

Notice that step 1 was:

Open an elevated PowerShell.

You are of course wrong stating that I said that, which I did not. You completely misunderstood the point I was making, which was that if your router is not accessible to the internet, you won't be able to access the internet. Your firewall is built into your router. So, by definition, your firewall and thus your router are accessible to the internet.

My point was that Avast's message was too "dumbed down" to have any real meaning, and did not adequately explain what the real problem was, instead it said something vague that didn't make any sense because of what I said above.

This is complete nonsense. Neither Microsoft, nor Windows 10 can alter the settings of your router unless you have given them your routers administrative user and password. And, since Windows never asks for this information, that would be somewhat difficult.

Again, the problem here is that this is a new feature that was introduce by Avast at the exact same time as you installed Windows 10. It's a coincidence that you're seeing the error message after installing Windows 10 because Avast did not have this feature before then. You have no way of knowing if it would have said the same thing prior to installing Windows, but you jump to the conclusion that it's Windows 10 anyways.

You also don't seem to understand that the problem was in your router, not your local machines. Your other household machines were never "compromised", they were simply all reporting the same problem because they all used the same router to access the internet.

Again, the real problem here is that Avast is too vague on both the error message, and what it "fixed". Maybe all it's doing is enabling your local computers firewall, which is unnecessary if you have a hardware firewall in your router.

Frankly, I don't see how Avast could "fix" the problem unless you gave it the routers administrative credentials to do so. But again, Avast is being way too vague about what it's actually doing.

 

MS doesn't have any control over your Router. You made the change based on Avast's alert - what did Avast say about it?

If your ISP said lock down your router, undo the change(s) you made following Avast's alert.

The Win10 agreement basically says
"Microsoft will collect more information about your system than usual so that we can analyze Windows 10 behavior and faults."

It doesn't say "Microsoft will open your network" You are the admin of your network, how it is configured determines a lot as to how hard the network is to penetration.

You decided to install the Windows 10 Technical Preview. If you're not comfortable with early and most likely buggy code, then you probably shouldn't be playing in this sandbox.

If you posted screen shots or information on what you changed rather than the recommendation to change or the resulting scan after the change - that might help people understand.

The Avast pic in post#1 clearly states router in a few places - what no one knows is what you changed and where you changed it.

Bill
.

 

That warning makes no sense. Of course your router is accessible from the internet. How else would the internet work? Your router *IS* what gives access to the internet... computers are reporting it. What you should have said is "your router has access to the internet" NOT "your router is accessible from the internet".

 

That warning makes no sense. Of course your router is accessible from the internet. How else would the internet work? Your router *IS* what gives access to the internet... computers are reporting it. What you should have said is "your router has access to the internet" NOT "your router is accessible from the internet". No. Because that's not true.

Your router *IS* accessible from the internet. I don't care what Avast is telling you. It is. If it wasn't, YOU could not access the internet. The problem is that this does not tell the whole story. Simply being accessible from the internet is not a problem. Having your router forward data without explicit instructions to do so, is what's a problem. That, however, is too difficult of a concept for Avast to explain to someone who doesn't understand how the internet works.

Whenever you connect to something on the internet, your router opens up ports on its firewall to allow that access. Otherwise, there would be no way for you to receive data back.

Your limited knowledge of how routers work leads you to accept what programs designed for non-technical people say at face value, but they are just hiding the technical details from you.

 

That warning makes no sense. Of course your router is accessible from the internet. How else would the internet work? Your router *IS* what gives access to the internet... computers are reporting it. What you should have said is "your router has access to the internet" NOT "your router is accessible from the internet". No. Because that's not true.

Your router *IS* accessible from the internet. I don't care what Avast is telling you. It is. If it wasn't, YOU could not access the internet. The problem is that this does not tell the whole story. Simply being accessible from the internet is not a problem. Having your router forward data without explicit instructions to do so, is what's a problem. That, however, is too difficult of a concept for Avast to explain to someone who doesn't understand how the internet works.

Whenever you connect to something on the internet, your router opens up ports on its firewall to allow that access. Otherwise, there would be no way for you to receive data back.

Your limited knowledge of how routers work leads you to accept what programs designed for non-technical people say at face value, but they are just hiding the technical details from you. Demeaning statements such as your last sentence are based on conceit. Beware the wise man in his conceit, he is worse than a fool. Proverbs.
All this nonsense concerning Avast "all it did was to warn", if you read my earlier posts by clicking on a link brought me to my ISP router configuration page where I RECONFIGURED IT.
Avast was installed a month prior to my W10 install and all computers had been checked for home network security and passed before the W10 install, only after was the change observed.
As for security Microsoft have the ability to access all your private and personal details on your computer in W10.
Something that even you cannot do.