Get to know the Zune HD>>
Spyware, viruses, & security : Computer system compromised by McAfee imposter?
Computer system compromised by McAfee imposter?
by marimari2006 - 8/20/06 6:50 PMHi, All
I'd appreciate your insights on the following issue:
Recently, I was prompted to manually download updates by a pop-up from the McAfee icon in my system tray. During the download sequence, I opted to have the updates placed on my desktop, but, when it was complete, they were nowhere in sight. I combed my computer for them but to avail.
Since then, Internet Explorer 6 keeps crashing constantly, plus SpybotSearchandDestroy continually reports the presence of ad/spyware on my machine.
Could I have fallen prey to a scheme designed by McAfee imposters? I should have remembered that my McAfee updates are done automatically, but oh well ... I've emailed McAfee, but they haven't replied me as of yet, and so I thought in the mean time I should seek advice elsewhere.
Thanks all!
Not an imposter. Most likely McAfee themselves..
by Carol~
- 8/20/06 10:18 PM
In reply to: Computer system compromised by McAfee imposter? by marimari2006
marimari..
This will all be conjecture on my part, since you never mentioned which version of VirusScan you have. My answer would be predicated, on the fact that you had Build 10.0.27 and possibly, quite unkowningly, just installed their new upgrade. McAfee has been trying, every which way, to have people upgrade to Version 11. Right-click on the ''M'' in your tray, then VirusScan and About. If you had Build 10 and now see 11, what you experienced was their latest upgrade to Version 11. It has caused a great deal of problems. The new version does not ''play well'' with Ad-Aware and Zone Alarm, only to name a few. Those who installed the upgrade, were forced to uninstall both. The newest version, includes an anti-spyware application, which may possbily be conflicting with Spybot, as it has the above.
Did that pop-up happen to say, ''Free Upgrade''? If you did get that pop-up and declined it, there's another method they've used, to have people install this version. If you manually tried to update recently and saw a Download Manager, instead of what you usually see, you installed the latest version. I don't want to get ahead of myself, not knowing any of the above information. I can only tell you, if you have installed the upgrade, there's a good chance it's causing your problems. Many people have uninstalled the new version and reinstalled the old.
If this be the case, the only way you can continue to use Version 10 is by letting the updates install automatically. All of the above is presumption on my part - in regard to your situation. The facts come from my own experience and what I spent two days researching!! I'm quite irrate about what McAfee has done, even moreso how they went about doing it. I was fortunate not to have installed the new version. Nonetheless, what they have done, is extremely unprofessional. IMHO!
If this is not your case, post back. If I can't help, no doubt Grif will be along shortly. Either way.. there are ways of resolving your presnt issues. I've taken a lot for granted. Hopefully, I am wrong. If so, please post back with the the version # of the program, Scan Engine and DAT file you have.
Carol
(NT) Given Your Detail, I Certainly 2ND Your Feelings Carol!
by tobeach - 8/20/06 11:42 PM In reply to: Not an imposter. Most likely McAfee themselves.. by Carol~
Your advice would be very much appreciated
by LOVEMONKEY28 - 9/20/09 1:00 AM In reply to: Not an imposter. Most likely McAfee themselves.. by Carol~
OS: XP Professional
This is my situation:
1/ I have not subscribed to, or downloaded any have any McAfee programs.
2/ 3 days ago a McAfee 'Check My Security Status' prompt popped up, which I disregarded. Upon checking my Control Panel I discovered 'McAfee Security Scan' on my list of installed programs - which I immediately removed.
3/ Today the same pop-up appeared, and the program has reappeared on my installed programs list.
4/ I will repeat step 2, but suspect that the problem will recur.
Are you able to suggest a solution?
Many thanks.
Regarding McAfee Security Scan
by Carol~ - 9/20/09 7:46 AM
In reply to: Your advice would be very much appreciated by LOVEMONKEY28
LM..
You mentioned you haven't subscribed (or downloaded) any McAfee programs. Did you recently upgrade Firefox? And did you install an Adobe Flash Player update? I haven't done so myself, but I'm reading where the "McAfee Security Scan" is offered with it. The scanner is selected by default, with the ability to uncheck it. (I'll be double-checking this myself, shortly) Could it be you inadvertently installed it in this manner?
The McAfee Security Scan is a "free tool that automatically checks and reports if your PC is protected. Your PC's security status is determined by the state of your anti-virus and firewall protection. Your security software may be switched off or become out of date without you realizing. Or, you may not have security software installed on your PC. McAfee Security Scan lets you know if your PC is at risk and what you can do to protect it."
Now how to get rid of it. According to "Common questions and answers about McAfee Security Scan, if you're a Windows administrator, you can uninstall the McAfee Security Scan from the Start menu. If you're still unable to find the uninstall option, I would go to C:\Program files\Mcafee Security Scan, to see if the folder includes an "uninstaller". You may want to try going into Safe Mode, and uninstalling it from there.
The McAfee Security Scan folder in your Program Files, along with C:\Document and Settings\User\Application Data and "C:\Document and Settings\All Users\Application Data" for program, should also be gone. In order to see the latter two folders , you will need to "Show all Hidden files and folders". (Launch Windows Explorer Tools > Folder Options > View tab).
I tend to doubt McAfee's Comsumer Removal tool will get rid of any remnants, for obvious reasons. Install the slim version of CCleaner, to see if it will complete the job.
Let us know how you make out..
Best of luck..
Carol
Additional Information..
by Carol~ - 9/20/09 8:55 AM
In reply to: Regarding McAfee Security Scan by Carol~
LV..
Adobe Flash Player version 10.0.32.18 definitely does show the McAfee Security Scan as an (optional) install. It comes checked by default, with the option to uncheck it. See: http://get.adobe.com/flashplayer/
Additionally, try doing a search for SSScheduler.exe. If you find it in running in the Task Manager, end the process.
Perhaps I should have mentioned this first, instead of last. If you installed the Security Scan, as a result of upgrading Flash Player (and did so recently) you also have the option of taking advantage of System Restore. It may save you a lot of time and effort.
Carol
Just Maybe...It's The FakeAlert McAfee Imposter
by Grif Thomas - 9/20/09 11:24 AM
In reply to: Your advice would be very much appreciated by LOVEMONKEY28
Please see the link below and read about it.
http://www.avertlabs.com/research/blog/index.php/2009/09/16/fakealert-malware-disguises-as-mcafee-product/
So, please follow the instructions below to download, install, update, then run a full system scan with Malwarebytes:
On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them. If you can't start the computer into "normal" windows, try installing, updating, and running the scans AFTER the computer is started into Safe Mode.. I use the sites below to download the installer file and the manual updater:
Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.
Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe
Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe
In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder....
_____________________
Hope this helps.
Grif
Additional Information...
by Carol~ - 8/21/06 12:35 AM
In reply to: Computer system compromised by McAfee imposter? by marimari2006
Mari..
I posted above taking for granted, you said you have your updates set to d/l automatically. That you were prompted to manually download the updates. The recent free upgrade to VS11 was offered through a popup. I didn't respond to the pop-up, so I'm not quite sure about the method of it's installation. I only know, when I went to update Friday, I was told to use the Download Manager, which would have installed the upgrade, not the updates. If for some reason, you have not installed the upgrade, perhaps you could provide the following:
- Which operating system are you running?
- Which McAfee products do you have? VS? PFWP? Security Suite? etc.
- The version # of the program, Scan Engine and DAT file you have.
- I show the DAT version of the updates on the 18th as #4832. And you?
- Can you tell us what kind of popup message and the exact text?
- You said you 'opted to have the updates 'placed' on your desktop, and say there is nothing on your desktop. Are you sure you downloaded them to your desktop and not installed them?
- You say you 'combed the computer' for the updates. Where were you looking for them?
- You said, 'Spybot Search & Destroy continually reports the presence of ad/spyware on my machine'. What is it reporting.
- Have you scanned with anything other than Spybot?
I realize it's a lot of questions, but the more information you can provide, the easier it will be for people to help. Help us.. help you.
Carol
Yep, It Looks Like Carol's Got It Right
by Grif Thomas - 8/22/06 9:10 AM
In reply to: Computer system compromised by McAfee imposter? by marimari2006
If the new version on your machine is Virus Scan 11, then you've been automatically updated to the new product line.. As indicated, it's creating lots of problems and patches for some of the issues should be released soon.
For specific problems, we'll need to know whether you have Virus Scan only or the Security Suite.. You can also visit the McAfee forums at the link below. Find the specific forum section for your version of McAfee and read the variety of questions and answers that others have posted there.;
http://forums.mcafeehelp.com/index.php
Hope this helps.
Grif
Not McAfee - its a trojan called 'FakeAlert'
by tsrman - 11/3/09 11:24 AM In reply to: Computer system compromised by McAfee imposter? by marimari2006The FakeAlert trojan is one of the nastiest pieces of malware in recent history because it morphs so quickly into variants that can't be spotted through typical 'heuristic' detection. More than 10K variants to date. Recently, it began using known Anti-Virus symbols in the system tool tray...which included McAfee. http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=146559#
If the free SuperAntiSpyware.com app can't clean you up, you'll probably need some expert 'live' help. The McAfee Virus Removal Service team is really good, with a money-back guarantee. www.mcafee.com/virusremoval
| Forum legend: | |
 |
Locked thread |
 |
Moderator |
 |
CNET staff |
 |
Samsung staff |
 |
Norton Authorized Support team |
 |
AVG staff |
 |
Windows Outreach team |
 |
Dell staff |
 |
Intel staff |
