eset firewall rules reset on their own?

[ftracy3 0]

Yesterday will trying to create an inbound/outbound rule for a program I kept getting the message (this is not verbatim but close)" Unable to access rule database". I was however eventually able to add the rule.

Today ALL of the user added rules related to installed programs seem to be gone. There are only a handful of rules which I assume are default.

 

Anyway any idea why/how this could have happened? I ran a scan this morning and a few threats were found( all related to Tversity media server--which I uninstalled anyway because I don't use it).

[Arakasi 549]

Sounds like you were or might be using a temporary profile.

Try inputting %userprofile% in the run dialogue or explorer address bar.

Im just guessing here without research.

[Arakasi 549]

Question for ESET mods.

If you create a firewall rule does it save in the users profile directories or even under their SID key in the current users or users hive of the registry? Or in a program files directory etc ?

Thanks

[Peter Randziak 1,130]

Hello,

 

Firewall rules are being stored in %Programdata%\ESET\ESET Smart Security\

 

At first please ensure, that your computer is clean, run full system scan.

Reinstallation after that could help.

[Arakasi 549]

Thank you Peter for your response and any research done.

So we know if your profile is bad, the correct rules will still be loaded every time, so the fact your rules did not, might indicate a greater issue at work here.

Although ESET may be having errors saving your rules, its more like a warning to you that your system is not operating at 100% here.

As Peter suggested i would try a full scan to make sure your not infected, and also check the permissions on the programdata folder to ensure Full Control for your account.

If nothing is found the answer to resolution may just be a reinstall of the software, and make sure your hard drive passes s.m.a.r.t. reporting.

[Marcos 5,074]

It could be that you're using Deep Freeze which will not save the status of protected folders in thawed state.

[Arakasi 549]

Also true.

Would need to login as local admin, open deep freeze and unthaw or unlock the system and reboot again to make changes !