techcosupport.com » Malware http://techcosupport.com/press Techco Support Site - We support your business through Technology, Training and Coaching Thu, 29 Jul 2010 07:08:25 +0000 en hourly 1 http://wordpress.org/?v=3.0 McAfee Security Scan Problems http://techcosupport.com/press/mcafee-security-scan-problems/ http://techcosupport.com/press/mcafee-security-scan-problems/#comments Mon, 04 Jan 2010 19:34:09 +0000 bgt http://techcosupport.com/press/?p=544 It was reported by one of our Windows XP users that they were getting a message from McAfee Security Scan® with a request to Check My Security Status. As we protect all of our Windows PCs using McAfee, this message was not out of place, and the user clicked Scan Now. The alarm [...]]]> It was reported by one of our Windows XP users that they were getting a message from McAfee Security Scan® with a request to Check My Security Status. As we protect all of our Windows PCs using McAfee, this message was not out of place, and the user clicked Scan Now. The alarm bells started when the Security Scan reported that there was no anti-virus software installed, which just is not true.

A cursory glance (right click on the Shield in the system tools) shows that VirusScan Enterprise was alive and well on his machine, and the consol showed that the last auto-update was successful. Initial attempts to uninstall the unwanted program using Control Panel, Add or Remove Programs were unsuccessful. Googling the phrase How do I get rid of McAfee Security Scan turned up several suggestions involving booting into Safe Mode or installing anti-malware programs. There were also several suggestions that McAfee Security Scan is downloaded with an update to Adobe Reader, which our user had recently installed.

This is the removal method which worked for us:

  • Run msconfig using the Start, Run dialoge
  • When msconfig has loaded, click on the Startup tab
  • Find the entry for McAfee Security Scan, and uncheck the box
  • Then click on Apply

This will prevent the application from reloading next time you start up. Next you need to uninstall the application:

  • Call up Windows Task Manager
  • Click on the Applications tab
  • Click on McAfee Security Scan then click the End Task button
  • Fire up Control Panel then double click Add or Remove Programs
  • Wait a minute and McAfee Security Scan will relaunch and appear again in Task Manager, just like malware!
  • In Task Manager, click McAfee Security Scan, then End Task again
  • In Control Panel, immediately click Change for McAfee Security Scan, then Remove

If you have found this program installing itself without your conscious intent or consent we suggest that you voice your disapproval to Adobe. If enough people post their disapproval of this forced installation of annoying software to Adobe, they might just change their policy.

To any Adobe directors reading this, let me be the first to admit that you market some brilliant software, which is a credit to your company. Why risk your excellent corporate image with this offensive and shoddy software installation tactic?

For anyone else who is installing or upgrading Adobe Flash or Reader, take special note that there is an optional McAfee Scan listed in the installation that must be unchecked if you do not want to install McAfee Security Scan.

]]> http://techcosupport.com/press/mcafee-security-scan-problems/feed/ 0 Parliamentary computers infected by Conficker worm http://techcosupport.com/press/parliamentary-computers-infected-by-conficker-worm/ http://techcosupport.com/press/parliamentary-computers-infected-by-conficker-worm/#comments Fri, 27 Mar 2009 17:33:28 +0000 bgt http://techcosupport.com/press/?p=280 The House of Commons internal computer network has been infected by the “Conficker” worm and has had to ban its users from attaching outside storage, such as USB memory sticks, in case it gets reinfected. An estimated 10 million PCs worldwide have also been infected and experts fear next week will see problems worsen. [...]]]> The House of Commons internal computer network has been infected by the “Conficker” worm and has had to ban its users from attaching outside storage, such as USB memory sticks, in case it gets reinfected. An estimated 10 million PCs worldwide have also been infected and experts fear next week will see problems worsen. For more on this story, see the article House of Commons network hit by Conficker computer worm from guardian.co.uk

If your computer is infected with this worm, you may not experience any symptoms, or you may experience any of the following symptoms:

  • Account lockout policies are being tripped.
  • Automatic Updates, Background Intelligent Transfer Service (BITS), Windows Defender, and Error Reporting Services are disabled.
  • Domain controllers respond slowly to client requests.
  • The network is congested.
  • Various security-related Web sites cannot be accessed.

For more information about Win32/Conficker.b, visit the following Microsoft Malware Protection Center Web page http://www.microsoft.com/security/portal/Entry.aspx?Name=Win32/Conficker

Network managers can also stop Conficker from spreading by using Group Policy, and creating a policy that applies to all computers in a specific organizational unit (OU), site, or domain in your environment. For more details on this process see Microsoft Help and Support Article ID 962007

]]> http://techcosupport.com/press/parliamentary-computers-infected-by-conficker-worm/feed/ 0