firewall issues

Below is a post I made in the malware forum after having gone through the malware removal procedure with them. They referred me to this forum so I have cut and pasted the message below to see if you can assist me in this. Thank you!

I went through and did all that was instructed in your last post. I also uninstalled AVG free antivirus and installed PC Tools antivirus instead. When I first downloaded the PC Tools antivirus file and attempted to install it I got a message that said the file was corrupt. (I used the authors website). I deleted that then went back and downloaded the PC Tools file from the majorgeeks website. When I was attempting to install that it asked me to uninstall the PC Tools Firewall first. I did that and then installed the antivirus. Then I reinstalled the PC Tools firewall.
I am now getting alot of notices from the firewall. Yesterday, it was "mcci+mcci...?(can't remember the last word). It asked me four times about it. I allowed it once and then blocked it 3 times. My computer then froze and I turned it off at the back and restarted it. It seemed to be doing OK after that. Today, the firewall is saying "Services and Controller app is attempting to load driver (DSproct). I tried to block it but the message just keeps returning. Should I accept it. I did some online searching to learn more but I didn't get any answers that made me sure it was OK to allow it. Should I allow this and if not, how do I keep the firewall from asking me repeatedly? Also, what is the mcci+mcci thing? I know I should have known that before I allowed it but my research on that one was also a bit hard to understand and determine whether it was safe or not.
I have noticed today that my computer is opening Firefox and my email application a whole lot faster than it has in years. Don't know if that means anything but thought I should mention it.
Thanks for your help. )

 

Hello muchwork, sounds like you have been thru the mill. I also have PC Tools FW Plus installed . When you installed it, did you also install "Threatfire" ? That is not needed. It is bloatware. I would suggest, if you did, to remove it again, and this time download it, but click NO to the Threatfire.

The firewall will ask you for any and ALL appl. that is coming in or going out. A lot are things that run in the background, and we don't see them. I would suggest, click ask, until you find out exactly what that program is. You will get one notice, on each application.. IF you are sure of an appl, like the DSproct is the Dell Support Center. Yes, allow it.

You will only be asked once for each appl., then it won't bother you any more. It is a good apple., and I do like mine.. So, you had a problem dl the first time.. Hmmm... I have heard of others saying the same... Try this link:
http://www.pctools.com/support/answers/id/1072/ and scroll down, and LOOK at the screen shots it shows.. I hope this helps.. Just say NO[ to #8-ThreatFire Free Edition

I hope this helps you too.

 

Thanks so much for your help. I do have another question. You mentioned I should click "ask" and be sure I know what the appl is before I allow it however I don't see any button that says "ask" in the firewall window on the notice. I just have the option of "block" and "allow". Did I miss something in the download, did I get a different version of PC Tools Firewall Plus, or am I misunderstanding you?

I did view the shots on the link you gave me. I will uninstall and reinstall and pay attention to the threatfire issue. I don't remember seeing that window the first time but that doesn't mean it wasn't there. )
Thanks again for your help.

 

Hello, muchwork. I will try to explain. I have V. 6.0.0.88 ....

Once the FW is downloaded and installed, you will see it in your system tray. Now, just R. click onto it, and then Left click OPEN... Now, click Applications. You will see all the applications . Now, look to the right of them.
There are little light colored buttons there. Just click onto one, and you will see you have options. See my screenshot here:

View attachment 137711

When you click onto those buttons, TO THE RIGHT OF THE APPL. you have the option too:
*BLOCK
*ALLOW
*ALLOW TRUSTED
?ASK

You only need to do each application that the FW is unsure of, only once. Then, the FW will be taking care of things for you. But, it does need to know what you have that should be allowed to go in and out.. For instance, you certainly don't want to block your AV, or your browser. Hope this helps.

 

OK, maybe this one will show better. I want you to click onto the little buttons to the RIGHT of the applications.: You will have options for each appl. there.

View attachment 137712

Hope this shows better than the last one. rolleyes