Trojan resets McAfee firewall permissions?!

dtrav001 · 08-22-2007, 06:33 PM

Hello, I'm new to this forum. I had something happen that shook me a bit, and I need advice.

McAfee Viruscan reported an intrusion of Adware-Zeno. I researched the removal and scraped out the registry entries and files, but the nasty reappeared.

As a last resort I checked my firewall permissions, and found to my shock that the security level had been reset to "Trusting", and two new programs were added to the Program Permissions list with full access! I'm certain I didn't reset the security level, and I'm dead positive I never granted those programs access.

The trojan hasn't reappeared, but I reported this to McAfee chat support and received a "thank you for your input" response. Does anyone else find this scary ... and how else might I spread the word? Thanks -- d

tetonbob · 08-22-2007, 07:29 PM

It's not unusual for trojans and bots to reset firewall, trusted zone, and certain command functions of Windows.

You may want to post a set of logs for review in our HijackThis log help section....after reading this thread:

http://www.techsupportforum.com/secu...tml#post342651

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

dtrav001 · 08-22-2007, 07:42 PM

Thanks so much Bob for the prompt reply (altho I do find this somewhat depressing news...) I'll go thru the log reporting process and post as soon as I can -- d

08-22-2007, 06:33 PM	#1 (permalink)
dtrav001 Registered User Join Date: Aug 2007 Posts: 2 OS: WinXP Svc Pack 2	Trojan resets McAfee firewall permissions?! Hello, I'm new to this forum. I had something happen that shook me a bit, and I need advice. McAfee Viruscan reported an intrusion of Adware-Zeno. I researched the removal and scraped out the registry entries and files, but the nasty reappeared. As a last resort I checked my firewall permissions, and found to my shock that the security level had been reset to "Trusting", and two new programs were added to the Program Permissions list with full access! I'm certain I didn't reset the security level, and I'm dead positive I never granted those programs access. The trojan hasn't reappeared, but I reported this to McAfee chat support and received a "thank you for your input" response. Does anyone else find this scary ... and how else might I spread the word? Thanks -- d

08-22-2007, 07:29 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,524 OS: 2000 Pro; XP Pro; XP Home	Re: Trojan resets McAfee firewall permissions?! It's not unusual for trojans and bots to reset firewall, trusted zone, and certain command functions of Windows. You may want to post a set of logs for review in our HijackThis log help section....after reading this thread: http://www.techsupportforum.com/secu...tml#post342651 After running through *all* the steps, please post the requested logs. If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

08-22-2007, 07:42 PM	#3 (permalink)
dtrav001 Registered User Join Date: Aug 2007 Posts: 2 OS: WinXP Svc Pack 2	Re: Trojan resets McAfee firewall permissions?! Thanks so much Bob for the prompt reply (altho I do find this somewhat depressing news...) I'll go thru the log reporting process and post as soon as I can -- d