Hi,
It seems McAfee is working perfectly on your computer and firewall set to stealth mode right? Please do not enable windows firewall along with McAfee Firewall as it may stop working both . There is big core change from the 2010 version to 2011 on its scanning andfirewall behavior. Do you have any other computer connected on your network?
Yea, when my isp tech help said that this activity sounds like adware I ran malwarebytes, but only a quick scan. Only items it found was 2 pum.disabled.securitycenter or something like that, which I know those 2 files are dangerous.
As for the hard drive light, I asked because usually when I leave the computer alone its light doesn't flash.
Yes, my firewall is set to shealth and it always has been. Also, I didn't turn back on Windows Firewall since, I komw that sill cause problems also my XP is hooked to my router through ethernet cable. As for other computers, yes I do have other xomputers connected to my network/router (wirelessly). I already added those computer to my list of trusted connections. However, I usually always only have one computer on at a time. Example, if I use my XP no other computer is on. Then, if I need to use,my Vista Laptop, I would turn off my XP and turn on my vista.
If the behavior of the 2011 Firewall changed, is the activity that I mentioned in my original post normal. Since before the update, this UDP Port 25701 event only sometimes happen when I shutdown my computer and the evnt only occurs once. Also, before the update I would usually have no activity logged into the log since I wasnt downloading things or anything like that. The only event that I see by my actions is when I use torrent, then my log would list many ip tr yu ing to access my torrent port. Of course, sometimes there are some events that happen while I am on firefox checking my email and gamspot. Like 2 or 3 day ago, there was a java update which I installed. Then I had to uninstall the,older plugin from Firefox, since it doesnt automatically remove it. After I was done checkimg, I checked my logs and list one ip for about 1and a half page in the Incoming Events tab. All trying to accessing TCP Port 3245, 3247, 3248, 3249, 3218 over a 15 minute timespan. I reverse lookup the,ip and found out of 500 something site one of the site was download.oracle.com.
Oracle is where Java comes from.
This logs may list on events and logs when the software on your computer run automatic update.
Right when I saw that one of the site was download.oracle.com, I just figured it wasnt something bad.
Sorry, but what automatic update are you talking about? All, I know is that the weird thing now is that my UDP port 25701 is being access or trying,to be accessed by alot of random ip address. There so much ip address I cant tell if any of them are the same or not. This event with my 25701 port happens from when my computer starts up till shutdown now, compared to before update, it only happens once during shutdown sometimes.
Forgot to mention that yesterday, the log/event continued for 3 hours; the whole time I was on my computer after restarting from update.
When software like java, mcafee, window...etc update automatically on your computer, it will be logged in firewall as some ips of that particular software server is trying to acccess that computer. In this case it seems like a java update made that logs.
I know it isnt the java update that was trying to access that port since it was already updated before McAfee was updated to 2011. It could be Windows update since, I know yesterday was when the update was released but I didnt get the automatic update shield popup saying that it was downloading updates.
As for the log, it was Incoming Events all those ip were trying to access my computer's system port (UDP Port 25701). When I checked the Outgoing Events there were none.
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: