7 Replies Latest reply: May 16, 2012 5:28 PM by Ex_Brit RSS

    McAfee Firewall won't stay turned on

    abrabrook

      The McAfee Firewall will not stay on when I turn it on. I also cannot turn on the Windows Firewall. There is definitely Malware on the system, I have run McAfee in safe mode, it cleaned up a couple of issues it sais, then ran the Stinger and found nothing. But having installed a free spyware detection program it found a lot of issues. I am not sure how to remove them without paying for another spyware removal progrma when I am already paying for McAfee. I think it had the Win 7 Security malware but it doesn't show up that way in any of the scans I have done.

      Please help.

        • 1. Re: McAfee Firewall won't stay turned on
          Ex_Brit

          Moved to Malware Discussions > Home User Assistance.

           

          If this doesn't work in regular mode try the following in'Safe Mode with Networking' reached by tapping F8 repeatedly while booting up and it's usually #2 on the ensuing menu.  (It does work in that mode).

           

          Download, install, update (important) and run a full scan using the FREE version of THIS software.

           

          What is your operating system and service pack please, and what version of Internet Explorer is installed?  (Whether or not you use it).

           

           

           

           

           

          .

           

          Message was edited by: Ex_Brit on 08/12/11 8:12:07 EST PM
          • 2. Re: McAfee Firewall won't stay turned on
            abrabrook

            I tried this process in safe mode, I also tried Malware bytes, Spybot and Spyhunter. Spyhunter was only trial version and it continually finds malware that the others don't but I haven't paid to register it yet. I may have to to try and resolve this. I am going to try Adaware.

            • 3. Re: McAfee Firewall won't stay turned on
              Ex_Brit

              Post a Hijackthis log on one of the following forums for expert advice:

               

              DOWNLOAD HIJACKTHIS

               

              Do not post Hijackthis logs here, we can't help you with those !

               

              Post the logs at one of these specialist Forums:

               

              AUMHA

               

              BLEEPINGCOMPUTER

               

              MAJOR GEEKS

               

              MALWAREBYTES

               

              MALWARE REMOVAL

               

              SPYWAREHAMMER

               

              SPYWARE INFO

               

              WHATTHETECH

               

              Be sure to read all the sticky announcements/instructions at the top of each malware forum!

              • 4. Re: McAfee Firewall won't stay turned on
                ti07shadow

                I ahve asimilar issue, mcaffeee detected a trojan and said it removed it. However now im havign a issue I believe I have a trojan/virus however I cant seem to remove thsis one and its caused soem damagae I cant turn my firewall on, nor will mcafee's firewall stay on, I cliock turn on it wil be on for 3 secodns then turn off. and this fake virus scanner pops up asking me to turn on ( of coruse I know for a fact is fake) but I have no idea what to do to remove this virus. Heres my  hijack this log

                 

                the trojan it detected was "ZeroAccess" before this all happened. (of course mcafee said it removed it, but obviously not)

                 

                Logfile of Trend Micro HijackThis v2.0.4

                Scan saved at 1:05:26 PM, on 12/12/2011

                Platform: Windows 7 SP1 (WinNT 6.00.3505)

                MSIE: Internet Explorer v9.00 (9.00.8112.16421)

                Boot mode: Normal

                 

                Running processes:

                C:\Windows\SysWOW64\rundll32.exe

                C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

                C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

                C:\Program Files (x86)\Mozilla Firefox\firefox.exe

                C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

                C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

                C:\Users\David\Desktop\HijackThis.exe

                 

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

                F2 - REG:system.ini: UserInit=userinit.exe

                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

                O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110912190116.dll

                O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

                O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

                O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry

                O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

                O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin

                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

                O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

                O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE

                O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

                O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

                O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

                O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

                O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000

                O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

                O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

                O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

                O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

                O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

                O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe

                O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

                O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

                O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

                O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

                O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe

                O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

                O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

                O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe

                O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)

                O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

                O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

                O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

                O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

                O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

                O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

                O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

                O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

                O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

                O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

                O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

                O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

                O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

                O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

                O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

                O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.17\bin\httpd.exe

                O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe

                O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

                O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

                O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

                O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

                 

                --

                End of file - 9169 bytes

                • 5. Re: McAfee Firewall won't stay turned on
                  Ex_Brit

                  You'll have to post the log on one of those forums as I posted.  Unfortunately we don't have the resources to analyse them here.

                  • 6. Re: McAfee Firewall won't stay turned on
                    hubbub1105

                    I had the same issues as well.  However after hours of messing around I was able to fix it with   TuneUp Utilities 2012.  I'm not saying it's a sure thing, but I was able to resolve it. Before I did this, I restarted the computer in safemode with no networking, logged onto an administrater account and made a new administrator account.  After that, I restarted the computer and logged onto the new account.  And ran tuneup from there. 

                     

                     

                    I'm actually downloading it again since I had the system restore to a point before TuneUp was installed.

                    After you get it downloaded, open it, you can skip the e-mail step.  It will want to start an analysis, I let it.  It could take awhile depending on how fast or slow your computer is.  If you think it's taking too long you can click on the button on the bottom right that says open start center.  If it closes it, reopen it, it should go to the actual program now.  Click on the tab at the top that says "fix problems."  What I did here was click on "check hard disc for errors."  (If you know how to do this without TuneUp, by all means.  I'm not that computer smart, just stubborn.) It will take a good long while, when it's complete it will ask to restart your computer to finish checking and restore deleted files.  You click yes, it will restart and do some crazy stuff on a black screen before coming back to the loggin screen.  I logged on to the new account once again and checked the Mcafee firewall, it was staying on at this point, however, windows firewall was still having issues.  So, I did a system restore, and told it to restore to a point a few days before when I knew it was working fine with no errors.  After doing all this, You can now log onto your normal account (new account will be gone anyhow)  and after resetting the network password over the phone, I am happy to report no more issues.  Virus gone and firewalls both working.

                    • 7. Re: McAfee Firewall won't stay turned on
                      Ex_Brit

                      6 month-old thread now locked.   A common cause for this is infection which is what this thread was about.   Tune-Up Utilities wont help in that case and is something not recommended in these circumstances in any case.

                       

                      Message was edited by: Ex_Brit on 16/05/12 6:28:48 EDT PM