You're going to have to give us some information about the pop-up. It sounds like a rogue spyware program trying to get you to click on it, scan and then charge for removal of the "many" malware entries it will find!

But without more information, I can't be specific. Please also advise if you have run a scan with your anti-virus program recently. (updated right before scan)

 

ok earlier i scan them it was found in my computer here the list. ABetterInternet.Aurora, Win32.TrafficSolc, Freeze, Funweb, Funwebproducts, Microsoft.windows.IEFirewallBypass, Microsoft.windows.Security.firewall0penPorts, Microsoft.Security.InternetExplorer, Microsoft.windows.SecurityCenter.AntiVirusDisableNotify, Microsoft.windowsercuritycent.FirewallDisablenotify, Mirar, MyWay.Mywebsearch, mywebsearch, noadware, spyhunter, tencent, wildtangent, Win32.Ezula.cc that all what i got on list. when i scan it.

 

I recognize some of this as processes that Spybot Search & Destroy flags.

1. Microsoft.windows.IEFirewallBypass
2. Microsoft.windows.SecurityCenter.AntiVirusDisableNotify
3. Microsoft.windowsercuritycent.FirewallDisablenotify

These can be ignored- for now.

But you are badly infested with malware and that is likely why you can't get the firewall to stay on. You say these are on the list when you scan- are you scanning with SB S&D? If so, did you remove the malware?

In view of the number of malware infections you have, I recommend you switch over to the HijackThis section, follow the directions there and get expert help with removal.

I think you may want to keep your sister away from the computer and/or give her some lessons in safe surfing!

 

btw: the firewall does not protect you from pop-ups -- they are caused by the
websites you are visiting.

see your browser on how to configure pop-up blocking.

once you get the system cleaned, ALWAYS run with a firewall enabled.

 

i use the Spy bot scan it and now i am on Hijack i try to figure out where do i look for to remove the bad malware not sure where do i find it.