This forum thread needs a solution.
Kudos0

I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 4:03AM · Edited: 08-Aug-2022 | 5:58AM · 9 Replies ·

Hi friends!

I have set the Norton Firewall to ALWAYS ask me even when low-threat apps attempt to connect to the internet. Today I see a whole bunch of programs that were set to allow access when I was away from the PC overnight. So the firewall is disobeying me. My system was hijacked a few days ago by someone using Teamviewer for remote access and no I see that one of these rules that were allowed when I was away was to allow the TeamViewer service to access the internet. This is terrible. What is going on here???

PLZ HELP!!

[Edit: Clarified Subject]

Labels: Connection Blocking, Firewall

Replies

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 5:49AM · Permalink

I would start by uninstalling the Team viewer app from your computer.

How did Team viewer get install in the first place? Did you contact someone for remote support?

Start with a full system scan with your Norton 360. Then I would suggest a second opinion scan using the FREE version of Malwarebytes. You can find it here https://www.malwarebytes.com/premium/

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 6:33AM · Permalink

While I appreciate your reply, it did not address the question:

Why did Norton 360 firewall allow a new rule without my consent? I can uninstall TV (i use it for colleagues to review work i do) but i don't want Norton firewall disobeying me (there were other rules allowed that I didn't get asked about)

In short, I don't want any inbound or outbound connection by any app, signed or not signed. without my explicate consent.

Malware bytes is garbage. it doesn't protect and they telling me to run this app and that app to collect info on my system, which is very lame.

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 7:48AM · Permalink

How did you set up the firewall to always ask, even for low risks? If it was the setting in my image below, that should alert you about access from all apps when set to alert always. Be sure you click on Apply before leaving that settings page.

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 8:01AM · Permalink

Yes, that is EXACTLY what I have done and applied the settings. And it still allowed TeamViewer (and others) access to the net without my consent. I am suspecting that digitally signed apps it is not asking, ever. Only "Low risk" apps which are not signed.

Makes sense?

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 8:06AM · Edited: 25-Jul-2022 | 8:07AM · Permalink

Have you tried to start Team viewer to see if you get an alert?

Are you getting any alerts when apps access the internet
 

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 8:15AM · Permalink

I have erased Teamviewer in order not to forfeit the few dollars I have in my bank account (a few months ago my system was hacked and they made a 1000 dollar transfer to some bank in Cairo and it took me a lot of work to get the money back)

I get a warning from time to time but as I said many rules were set without my consent.

What in the world is going on?

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 8:49AM · Permalink

Is Automatic Program Control off?  Disabling APC should prevent the firewall from granting access until you manually allow it.

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 25-Jul-2022 | 10:17AM · Permalink

I get a warning from time to time but as I said many rules were set without my consent.

Did the warning give an accept or deny option? Or did it just notify you that the app accessed the internet?

SendOfJive's suggestion will block all access until you allow it. But be ready for a barrage of notifications as every Windows background process that wants to access the internet will pop up.

Kudos0

Re: I see a whole bunch of programs that were set to allow access when I was away from the PC overnight.

Posted: 15-Aug-2022 | 9:49AM · Edited: 15-Aug-2022 | 9:50AM · Permalink

August 2022

Norton 360 still does this! Once I have blocked enough IP's thru Svchosts windows does a delayed start and low and behold Svchost is now allowed and all my blocked addresses are gone.

PS that delay start will allow my browser to access web sites prior to actually starting and showing up on task bar.

Anyone know whats going on?

This thread is closed from further comment. Please visit the forum to start a new thread.