[2Jedismom]

Ok...they are both on.

What does this mean?

"Generic Host Process for Win32 Services v5.1.2600.0", located in "C:\WINDOWS\SYSTEM32\svchost.exe", to communicate in a way that was disallowed by the program's filtering rules. The data direction was outbound. The IP protocol type was UDP/IP. The remote port was 666 [Nok Nok (trojan)]. The IP address was (removed by me). The user's response to the alert was to always deny this kind of communication in the future.

What is svchost.exe?

[HairOfTheDog]

svchost.exe is what drives your normal internet communications.... that it was communicating with someone is not scary in itself. The theme of the message is that whatever was attempted was BLOCKED by McAfee and that is good. I can't say whether it means you actually have the trojan NOK NOK or whether someone just tried to inflict it on you, because I am a driver, not a mechanic and it is all word salad to me.... Bear?

Did you just get that message from McAfee after turning the firewall on? - I would highly recommend turning the firewall ON but turning notifications OFF. It will warn you night and day of every blip and ping it sees and make you nuts with constant interruptions. If it is protecting you, great, but the constant warnings are a bother.

[HairOfTheDog]

I mean the firewall traffic notifications.... that you can turn those off if you want peace.