Anti-Spyware Forums


Reply
Thread Tools Display Modes

Wierd... McAfee Antivirus' On-Access Scan gets disabled by itself

 
 
AK
Guest
Posts: n/a

 
      14-07-2005, 01:20 PM
Hi all,

I'm using McAfee's VirusScan Enterprise 7.1.0. I'm experiencing this
wierd problem (probably since today morning) with the On-Access Scan
feature: no matter how many times I enable it, it gets disabled by
itself after a few seconds.

Any ideas what's going on and what I can do about it? Any kind of help
will be appreciated.

Cheers,

AK

 
Reply With Quote
 
 
 
 
maximillianx
Guest
Posts: n/a

 
      14-07-2005, 01:49 PM
You are probably infected with a virus - we got hammered by the sdbot virus
earlier this year, and this was one of the minor symptoms.

I would download stinger from McAfee's website and run it against the box to
see what is going on - http://vil.nai.com/vil/stinger/

Perhaps run HijackThis and see what it tells you - you may need to rename
either stinger or HijackThis (our virus killed these processes unless we
renamed them).

Good luck!
Rob

"AK" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> Hi all,
>
> I'm using McAfee's VirusScan Enterprise 7.1.0. I'm experiencing this
> wierd problem (probably since today morning) with the On-Access Scan
> feature: no matter how many times I enable it, it gets disabled by
> itself after a few seconds.
>
> Any ideas what's going on and what I can do about it? Any kind of help
> will be appreciated.
>
> Cheers,
>
> AK
>



 
Reply With Quote
 
 
 
 
David H. Lipman
Guest
Posts: n/a

 
      14-07-2005, 02:13 PM
From: "AK" <(E-Mail Removed)>

| Hi all,
|
| I'm using McAfee's VirusScan Enterprise 7.1.0. I'm experiencing this
| wierd problem (probably since today morning) with the On-Access Scan
| feature: no matter how many times I enable it, it gets disabled by
| itself after a few seconds.
|
| Any ideas what's going on and what I can do about it? Any kind of help
| will be appreciated.
|
| Cheers,
|
| AK

As another indicated, you may be infected with a virus that disables the the McAfee
software. However, Stinger only targets ~53 infectors and their variants. A small subset
of the possible infectors that can possibly cause this kind of problem.

The following tool will simplfy the task using three different "On Demand" scanners to
find/remove the possible culprit. Instead of 53 infectors and variants, you will be
scanning with signatures in the range of 90,000 ~ 135,000

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
(.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
remove
viruses and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode. This
way all the components can be downloaded from each AV vendorís web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE and/or FTP.EXE to go
through your FireWall to allow them to download the needed AV vendor related files.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
maximillianx
Guest
Posts: n/a

 
      14-07-2005, 05:50 PM
David -

This looks interesting - - I'm going to check this out for my home users...

Thanks for the tip - !

Rob
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:(E-Mail Removed)...
> From: "AK" <(E-Mail Removed)>
>
> | Hi all,
> |
> | I'm using McAfee's VirusScan Enterprise 7.1.0. I'm experiencing this
> | wierd problem (probably since today morning) with the On-Access Scan
> | feature: no matter how many times I enable it, it gets disabled by
> | itself after a few seconds.
> |
> | Any ideas what's going on and what I can do about it? Any kind of help
> | will be appreciated.
> |
> | Cheers,
> |
> | AK
>
> As another indicated, you may be infected with a virus that disables the
> the McAfee
> software. However, Stinger only targets ~53 infectors and their variants.
> A small subset
> of the possible infectors that can possibly cause this kind of problem.
>
> The following tool will simplfy the task using three different "On Demand"
> scanners to
> find/remove the possible culprit. Instead of 53 infectors and variants,
> you will be
> scanning with signatures in the range of 90,000 ~ 135,000
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script
> Interpreter {
> http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart
> scripts, one Link
> (.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and
> WGET.EXE. It will
> simplify the process of using; Sophos, Trend and McAfee Anti Virus
> Command Line Scanners to
> remove
> viruses and various other malware.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
> Normal Mode. This
> way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files
> or you can
> download the files and perform a scan in Normal Mode. Once you have
> downloaded the files
> needed for each scanner you want to use, you should reboot the PC into
> Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want
> to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal
> Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
> comprehensive PDF help
> file.
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE
> and/or FTP.EXE to go
> through your FireWall to allow them to download the needed AV vendor
> related files.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



 
Reply With Quote
 
David H. Lipman
Guest
Posts: n/a

 
      14-07-2005, 06:14 PM
From: "maximillianx" <(E-Mail Removed)>

| David -
|
| This looks interesting - - I'm going to check this out for my home users...
|
| Thanks for the tip - !
|
| Rob

Rob:

I very very happy to entertain any/all feedback.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
Phil Weldon
Guest
Posts: n/a

 
      14-07-2005, 07:18 PM
'David Lipman' wrote:
| I very very happy to entertain any/all feedback

_____

If I should send feedback, what should it expect? Cocktails followed by a
meal and dancing?
B^)

Phil Weldon

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eUNCh$(E-Mail Removed)...
..
..


 
Reply With Quote
 
David H. Lipman
Guest
Posts: n/a

 
      14-07-2005, 07:44 PM
From: "Phil Weldon" <(E-Mail Removed)>

| 'David Lipman' wrote:
|> I very very happy to entertain any/all feedback
|
| _____
|
| If I should send feedback, what should it expect? Cocktails followed by a
| meal and dancing?
| B^)
|
| Phil Weldon
|
| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:eUNCh$(E-Mail Removed)...
| .
| .
|

Maybe if Phil was really Phyl and short for Phyllis. ;-)


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
AK
Guest
Posts: n/a

 
      15-07-2005, 04:43 PM
Hi guys,

First of all, thanks (to Rob and Dave) for your quick and comprehensive
responses.

Rob: I tried the Stinger program you suggested, but it didn't turn up
anything. I've also looked at Hijackthis' list of all running
processes, and there seem to be nothing suspicious there(if you like, I
can dump the contents of the log here in a future post).

David: I tried the AV-CLS software you mentioned. I started by scanning
my system in Normal mode, with McAfee. Unfortunately I had to shut down
the system (due to unrelated reasons) before scanning could complete.
The only thing worth mentioning was McAfee had been unable to scan/open
(I forget which term was used) pagefile.sys and hiberfil.sys.
When I booted my system again, I decided to perform a scan with the
Trend AV in AV-CLS. It did manage to find and delete two versions(?) of
the virus TROJ_STARTPAG.S which I think had been quarantined by my
version of McAfee, but that was about it. I don't know if this is
relevant or not, but again there were some problems with pagefile.sys
and hiberfile.sys; the messages were hiberfile.sys error (-94) and
pagefile.sys error (-94). (I should mention that my comp is a laptop
and I use hibernation mode a lot).
I still haven't scanned with Sophos (not to mention the incomplete
McAfee scan), basically because it's a very time consuming process. But
I plan to do it today.

I'm beginning to think it might not be a virus after all(?)... Any
follow up will be greatly appreciated.

Cheers!
AK


David H. Lipman wrote:
> From: "Phil Weldon" <(E-Mail Removed)>
>
> | 'David Lipman' wrote:
> |> I very very happy to entertain any/all feedback
> |
> | _____
> |
> | If I should send feedback, what should it expect? Cocktails followed by a
> | meal and dancing?
> | B^)
> |
> | Phil Weldon
> |
> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> | news:eUNCh$(E-Mail Removed)...
> | .
> | .
> |
>
> Maybe if Phil was really Phyl and short for Phyllis. ;-)
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
maximillianx
Guest
Posts: n/a

 
      15-07-2005, 05:09 PM
Yeah - it may just be a program issue if you've performed a number of scans
and haven't produced too much evidence for a major infection.

Try to download and install the latest DATs from McAfee here:
http://download.mcafee.com/us/upgrad...datRenewal.asp

Do you receive any errors in your event log? Also, there may be under the
McAfee console a 'view log' option under the File menu. Check there after
you've tried to enable your on-access scan a few times, it may produce some
interesting results.

Finally, you may even want to try and uninstall/reinstall the product to see
if that resolves it - however, if the install fails, you'll be without AV
unless you can download and install a different flavor of AV until the issue
is resolved.

Post the HijackThis log, maybe there's something in there that will stick
out...

Thanks!
Rob


"AK" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ps.com...
> Hi guys,
>
> First of all, thanks (to Rob and Dave) for your quick and comprehensive
> responses.
>
> Rob: I tried the Stinger program you suggested, but it didn't turn up
> anything. I've also looked at Hijackthis' list of all running
> processes, and there seem to be nothing suspicious there(if you like, I
> can dump the contents of the log here in a future post).
>
> David: I tried the AV-CLS software you mentioned. I started by scanning
> my system in Normal mode, with McAfee. Unfortunately I had to shut down
> the system (due to unrelated reasons) before scanning could complete.
> The only thing worth mentioning was McAfee had been unable to scan/open
> (I forget which term was used) pagefile.sys and hiberfil.sys.
> When I booted my system again, I decided to perform a scan with the
> Trend AV in AV-CLS. It did manage to find and delete two versions(?) of
> the virus TROJ_STARTPAG.S which I think had been quarantined by my
> version of McAfee, but that was about it. I don't know if this is
> relevant or not, but again there were some problems with pagefile.sys
> and hiberfile.sys; the messages were hiberfile.sys error (-94) and
> pagefile.sys error (-94). (I should mention that my comp is a laptop
> and I use hibernation mode a lot).
> I still haven't scanned with Sophos (not to mention the incomplete
> McAfee scan), basically because it's a very time consuming process. But
> I plan to do it today.
>
> I'm beginning to think it might not be a virus after all(?)... Any
> follow up will be greatly appreciated.
>
> Cheers!
> AK
>
>
> David H. Lipman wrote:
>> From: "Phil Weldon" <(E-Mail Removed)>
>>
>> | 'David Lipman' wrote:
>> |> I very very happy to entertain any/all feedback
>> |
>> | _____
>> |
>> | If I should send feedback, what should it expect? Cocktails followed
>> by a
>> | meal and dancing?
>> | B^)
>> |
>> | Phil Weldon
>> |
>> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
>> | news:eUNCh$(E-Mail Removed)...
>> | .
>> | .
>> |
>>
>> Maybe if Phil was really Phyl and short for Phyllis. ;-)
>>
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> http://www.ik-cs.com/got-a-virus.htm

>



 
Reply With Quote
 
AK
Guest
Posts: n/a

 
      15-07-2005, 06:01 PM
Hi,

Thanks for the follow-up.

I'd already looked at the on-access scan logs, the last entry is

14/07/2005 08:10:28 AM Statistics:
14/07/2005 08:10:28 AM Files scanned: 13870
14/07/2005 08:10:28 AM Files infected: 0
14/07/2005 08:10:28 AM Files cleaned: 0
14/07/2005 08:10:28 AM Files deleted: 0
14/07/2005 08:10:28 AM Files moved: 0

and it hasn't logged anything since.

Here's the Hijackthis log file, it seems okay to me, but you can
probably read it a lot better than I can:

Logfile of HijackThis v1.99.1
Scan saved at 18:53:27, on 15/07/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Network Associates\Common
Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Network Associates\VirusScan\mcconsol.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Akiel\LOCALS~1\Temp\Rar$EX00.547\Hijac kThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://red.clientapps.yahoo.com/cust...//my.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,AutoConfigURL = http://www-config.strath.ac.uk/proxy.config
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings,ProxyServer = www-cache4.strath.ac.uk:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
files\google\googletoolbar2.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} -
C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power
Management\CePMTray.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [bcmwltry] bcmwltry.exe
O4 - HKLM\..\Run: [RemoveCpl] RemoveCpl.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network
Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network
Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O8 - Extra context menu item: &Google Search - res://c:\program
files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program
files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page -
res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download all by Net Transport -
C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program
Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program
Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://c:\program
files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program
files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: @btrez.dll,-4015 -
{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program
Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 -
{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program
Files\Belkin\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/ms...downloader.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{B44987AA-A1BF-4C89-ACCB-FD80C90E7BC9}:
NameServer = 127.0.0.1
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program
Files\Belkin\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - Macrovision -
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program
Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. -
C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: FLEXlm License Manager - Unknown owner -
C:\SynaptiCAD\Licensing\lmgrd.exe (file missing)
O23 - Service: MATLAB Server (matlabserver) - Unknown owner -
C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network
Associates, Inc. - C:\Program Files\Network Associates\Common
Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network
Associates, Inc. - C:\Program Files\Network
Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) -
Network Associates, Inc. - C:\Program Files\Network
Associates\VirusScan\vstskmgr.exe

*************************************************

Akiel

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
McAfee's scan32.exe runs itself kimiraikkonen Spyware 5 14-04-2007 10:55 PM
popup-blocking and mcafee disabled automatically roelo Anti-Virus 2 10-06-2006 06:01 PM
McAfee disabled =?Utf-8?B?Q0h1Z2hlcw==?= Computer Security 4 16-02-2006 05:22 AM
McAfee 8.0.0 resetting itself hatfieldnate Anti-Virus 2 07-04-2005 02:15 PM
when i sign in my account gets hang =?Utf-8?B?ZmF5YXogYnVya2k=?= Virus Information 1 27-12-2004 02:43 PM


All times are GMT. The time now is 09:33 PM.