What are these chinese inbound firewall rules opened? 'txgameassistant' 'tencent' etc

sdowney717 · Mar 4, 2024

Don't allow or leave alone?

sdowney717 · Mar 4, 2024

I don't see a 'txgameassistant' folder in programfiles folder

is it left over from an uninstall?

sdowney717 · Mar 4, 2024

I see tencent is part of android emulator which I have been experimenting with

Uptodown GameLoop (Windows)

The official Tencent emulator

tencentgameassistant.en.uptodown.com

As is Koplayer

Neither is installed now, but the firewall rules are still there. Is that true, uninstalls do not delete firewall rules?

OAT · Mar 4, 2024

Installation folder: C:\Program Files\txgameassistant\appmarket
Uninstaller: C:\Program Files\TxGameAssistant\AppMarket\GF186\TUninstall.exe
Estimated size: 110.71 MB

Tencent Gaming Buddy is a software program developed by Tencent Technology Company. The primary executable is named appmarket.exe. The setup package generally installs about 43 files and is usually about 110.71 MB (116,091,629 bytes). While about 92% of users of Tencent Gaming Buddy come from the United States, it is also popular in Netherlands and Singapore. - Read more at Tencent Gaming Buddy - Should I Remove It?

You probably removed it but the rules remained.

sdowney717 · Mar 4, 2024

I decided to download a koplayer again from here

KoPlayer (Windows)

A powerful Android emulator that's easy to configure

koplayer.en.uptodown.com

and during install this shows up?
Don't recall ever seeing RAV before as in when downloading before, but could have been a different web site

sdowney717 · Mar 4, 2024

Then on RAV clicked block and this
Don't recall ever installing something called RAV

andrew129260 · Mar 4, 2024

You are most likely infected. I would download malwarebytes here and scan your system.

For a legit android emulator I would use bluestacks.

OAT said:
That is a web popup, not an app popup. They want you to click on it Rav to install their stuff.

That is also possible it's just a notification from the web browser. Some malicious sites use this as a way to trick you into getting infected or to install unwanted software.

I would also check to see if it appears under settings > apps for you to uninstall it.

sdowney717 · Mar 4, 2024

Must have installed with something else
While uninstalling RAV, I got a notice from windows defender to click to turn it on
RAV was listed in the installed programs list

OAT · Mar 4, 2024

@sdowney717

Just as a friendly advice, be careful when installing and clicking away too quickly.
Too many users are impatient with their installation, especially with games.
This could result in unwarranted consequences or worse.

sdowney717 · Mar 4, 2024

andrew129260 said:
You are most likely infected. I would download malwarebytes here and scan your system.

For a legit android emulator I would use bluestacks.

That is also possible it's just a notification from the web browser. Some malicious sites use this as a way to trick you into getting infected or to install unwanted software.

I would also check to see if it appears under settings > apps for you to uninstall it.

Oh, I was trying several ones including bluestacks.
I am reinstalling malware bytes now for a scan

sdowney717 · Mar 4, 2024

found 3 PUPs, which I will get rid of

andrew129260 · Mar 4, 2024

Thanks for the screenshot. It's been a very long time since I did malware removal volunteering. Most of the tools I used long ago no longer work and I alas am not as up to date as I used to be in malware removal.

First, go under settings > apps > installed apps > and uninstall anything there that you don't recognize. Or feel free to ask before removing programs if your not sure.

Second, So seeing as it's only a few pups, you might be okay. I trust Malwarebytes as its usually pretty good. Do a scan with windows defender as well. Remove anything found and restart. I would also reset the windows security back to defaults to make sure everything is well.

Third,
You can reset windows firewall which I would recommend by doing the following:

Type Control Panel in the Start menu search bar and select it.
Go to > System and Security> Windows Defender Firewall
Click the Restore defaults option on the left-hand side and follow the on-screen instructions.

Fourth,
Check for windows updates and make sure your up to date.

I recommend using windows defender combined with a malwarebytes scan every now and then.

Bluestacks should work fine for you.

Flashorn · Mar 4, 2024

Did RAV Antivirus Suddenly Appear on Your Windows PC? Here's Where It Came From & How to Uninstall It

Has RAV antivirus appeared on your PC without you realizing it? Here's how to uninstall it.

www.makeuseof.com

sdowney717 · Mar 4, 2024

Flashorn said:
Did RAV Antivirus Suddenly Appear on Your Windows PC? Here's Where It Came From & How to Uninstall It

Has RAV antivirus appeared on your PC without you realizing it? Here's how to uninstall it.

www.makeuseof.com

yeah, it's gone.
Also RAV VPN was installed, it is also gone.

Flashorn · Mar 4, 2024

sdowney717 said:
yeah, it's gone.
Also RAV VPN was installed, it is also gone.

Great, it's good news. Let's keep it that way pls.

Flashorn · Mar 4, 2024

Do you have any cleanup app(s)?
Also, verify that no files or folders are left in Windows
Windows C:\\ Program Files and Program Files x86

Try Treesize free:

TreeSize – Official Download

TreeSize is a disk space analyzer for Windows with customizable file search and several exporting and reporting possibilities. Download for free today!

www.jam-software.com

sdowney717 · Mar 5, 2024

seems a security risk to leave rule openings in windows firewall after programs are uninstalled.
Or maybe not as the firewall rules point to non-existent programs so nothing can happen?

Regardless it is just clutter. Delete a rule and reinstall a program and the installer will create the rule again. So why have it still in place?

It confused me to see rules for where there was no longer any program installed.
Do some uninstallers remove their own firewall rules that their installs created?
Or are they all that way.

andrew129260 · Mar 5, 2024

sdowney717 said:
seems a security risk to leave rule openings in windows firewall after programs are uninstalled.
Or maybe not as the firewall rules point to non-existent programs so nothing can happen?

Regardless it is just clutter. Delete a rule and reinstall a program and the installer will create the rule again. So why have it still in place?

It confused me to see rules for where there was no longer any program installed.
Do some uninstallers remove their own firewall rules that their installs created?
Or are they all that way.

It's kind of a random thing whether or not the program will remove the firewall entries it added. It is up to the developer of the software. As I suggested, I would just reset windows firewall to put it back to defaults. Firewalls are more important on the router level than the computer itself. I remember when on windows xp there was a lot more danger then, and using something like zonealarm was highly recommended. As it was a very robust allow or deny with an easy to understand pop up window.

You dont really need zonealarm or a dedicated firewall anymore. As windows firewall is more than enough especially behind a router firewall.

I would set UAC to always notify

It would be even better to use something like vmware player free which is a Virtual Machine that you can play around with without affecting your installation.

sdowney717 · Mar 5, 2024

andrew129260 said:
It's kind of a random thing whether or not the program will remove the firewall entries it added. It is up to the developer of the software. As I suggested, I would just reset windows firewall to put it back to defaults. Firewalls are more important on the router level than the computer itself. I remember when on windows xp there was a lot more danger then, and using something like zonealarm was highly recommended. As it was a very robust allow or deny with an easy to understand pop up window.

You dont really need zonealarm or a dedicated firewall anymore. As windows firewall is more than enough especially behind a router firewall.

I would set UAC to always notify

It would be even better to use something like vmware player free which is a Virtual Machine that you can play around with without affecting your installation.

I have 6 win 11 pro pc now.
The laptops are all intel based and newer I7 8000 series and work ok with bluestacks and google play games beta.
I have this older AMD3 MB with aa phenom IIx4 955 CPU and it has problem with virtualization programs.
Blue stacks version 4 runs on it but only some games, like you can not run 'clash of clans' on it, but can run 'fluvsies'
It also wont run windows subsytem for android.
I can run MS store games ok on it

So I have been experimenting with it

What are these chinese inbound firewall rules opened? 'txgameassistant' 'tencent' etc

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

"No need to be anybody but oneself"

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

"No need to be anybody but oneself"

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computers

My Computer

My Computers

My Computer

My Computer

My Computers

My Computers

My Computer

My Computers

My Computers

My Computer

My Computers

My Computer