Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mcafee firewall repeatedly turns off, then internet connection blocked


  • Please log in to reply
6 replies to this topic

#1 Nick_F1

Nick_F1

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:46 AM

Posted 14 May 2012 - 08:05 PM

Been having an issue where McAfee firewall repeatedly turns off. I can turn it back on manually but it only stays on for around 30 seconds to 1 min. When the firewall is off the internet connection is seemingly blocked. On chrome I receive the message

"Google Chrome is having trouble accessing the network.
This may be because your firewall or antivirus software wrongly thinks that Google Chrome is an intruder on your computer and is blocking it from connecting to the Internet."

If I manually turn the firewall back on the internet connection resumes but only for the 30 seconds that the firewall stays on.

I'm assuming this is some sort of malware? I'm unsure what to do.
Scanning with McAfee and MBAM leads to no results.
Have previously scanned with TDSSkiller but that too reports no results.

Thanks for any help.

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:05:46 AM

Posted 14 May 2012 - 08:37 PM

Download

FSS

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

#3 Nick_F1

Nick_F1
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:46 AM

Posted 14 May 2012 - 08:59 PM

Ok - FFS Scan

Farbar Service Scanner Version: 11-05-2012
Ran by Nick (administrator) on 15-05-2012 at 02:41:56
Running from "C:\Users\Nick\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****


and
aswMBR Log

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-05-15 02:46:06
-----------------------------
02:46:06.598 OS Version: Windows x64 6.1.7601 Service Pack 1
02:46:06.598 Number of processors: 4 586 0x2A07
02:46:06.598 ComputerName: NICK-PC UserName: Nick
02:46:09.016 Initialize success
02:47:31.430 AVAST engine defs: 12051401
02:47:36.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
02:47:37.015 Disk 0 Vendor: WDC_WD50 01.0 Size: 476940MB BusType: 3
02:47:37.046 Disk 0 MBR read successfully
02:47:37.046 Disk 0 MBR scan
02:47:37.062 Disk 0 Windows 7 default MBR code
02:47:37.062 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 100 MB offset 2048
02:47:37.077 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 15000 MB offset 206848
02:47:37.093 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461838 MB offset 30926848
02:47:37.124 Disk 0 scanning C:\windows\system32\drivers
02:47:53.220 Service scanning
02:48:23.762 Modules scanning
02:48:23.778 Disk 0 trace - called modules:
02:48:23.793 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll
02:48:24.308 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006074060]
02:48:24.308 3 CLASSPNP.SYS[fffff88001dbc43f] -> nt!IofCallDriver -> [0xfffffa8004146550]
02:48:24.324 5 ACPI.sys[fffff88000edd7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800414a050]
02:48:26.648 AVAST engine scan C:\windows
02:48:30.423 AVAST engine scan C:\windows\system32
02:51:41.466 AVAST engine scan C:\windows\system32\drivers
02:52:00.592 AVAST engine scan C:\Users\Nick
02:56:22.901 AVAST engine scan C:\ProgramData
02:58:06.221 Scan finished successfully
02:58:20.790 Disk 0 MBR has been saved successfully to "C:\Users\Nick\Desktop\MBR.dat"
02:58:20.806 The log file has been saved successfully to "C:\Users\Nick\Desktop\aswMBR.txt"

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:05:46 AM

Posted 14 May 2012 - 09:09 PM

Did you try reinstalling mcafee?

#5 Nick_F1

Nick_F1
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:46 AM

Posted 14 May 2012 - 09:16 PM

I'll give that a go now

#6 Nick_F1

Nick_F1
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:46 AM

Posted 14 May 2012 - 09:54 PM

Just finished reinstalling and so far it all seems good, firewall is staying on and internet is staying connected. Not malware after all.
Thanks for all your help!

#7 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:05:46 AM

Posted 15 May 2012 - 01:40 AM

You're welcome :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users