1 2 3 Previous Next 22 Replies Latest reply: Apr 9, 2013 4:23 PM by Ex_Brit Go to original post RSS
      • 10. Re: Metropolitan Police Virus (ukash)

        Hello again -

        boustrophedon wrote:


        So why can't Mcaffe do it, if it is such a small data set? Sorry but you are just another apologist for a service that is below par. As for "send us a sample" well unfortunately I don't know how to do this: How do I find an unknown file on my PC?

        I`m afraid your missing the point. Antivirus vendors have many more samples to analyse than antispyware vendors do, each sample takes time to analyse/test/ QA and not every sample will be malicious - some will be corrupt or clean - which wastes an analysts time. I`m no apologist for McAfee or any other vendor for that matter: just realistic.



        boustrophedon wrote:

        I am just a home PC user paying good money for anti virus, only to be infected by the same virus twice in a period of two months.



        If you have been infected twice within the last two months then maybe you need to change your browsing habits - since this is the major attack vector. You maybe running outdated third-party installed programmes which can be exploited. Check link below to see if this is the case.




        boustrophedon wrote:


        Your post falls perilously close to blaming the customer, which is not a good stance for a company to take, are you writing on behalf of the company?


        Or is this a forum where no criticism of the company is allowed?


        I would say that most infections are down to the user, in one way or another. I have visited thousands of infected sites over the years with all kinds of exploits and not once did i become infected, and i ain`t doing anything special.


        We can handle constructive criticism



        on 02/04/12 16:22:46 IST
        • 11. Re: Metropolitan Police Virus (ukash)

          So far we have had the following excuses: It's a grey area, it's the way it works you can't prevent it, it's the user's fault, it's spyware not a virus and we don't do spy ware.


          OK lesson learned I will not be renewing my Mcaffe AV when it expires.

          • 12. Re: Metropolitan Police Virus (ukash)

            You obviously don't want to listen unless it's what you want to hear.     I posted a link to some tools, including McAfee Stinger which wqorks similarly to Malwarebytes, but obvioiusly that;s too inconvenient for you, so good luck to you as any other antivirus will have the same story to tell you.

            • 13. Re: Metropolitan Police Virus (ukash)

              Ok fair enough, it is not obvious from the documentation that stinger will help with that particular virus. As for Malwarebytes, I had already installed and run that before I posted.

              • 14. Re: Metropolitan Police Virus (ukash)

                If you download it. always load a fresh copy as it doesn't auto-update and if you click the 'List Viruses' button that tells you what it detects.


                However in this case it might behoove you to run Hijackthis and post it's log on one of the specialist forums listed near the bottom here:  https://community.mcafee.com/docs/DOC-2168


                (That's the same link I posted earlier).


                That way some independent experts can analyse what's going on.

                • 15. Re: Metropolitan Police Virus (ukash)


                  This virus seems difficult but is relatively easy to get rid of. Follow the steps below:


                  - Reboot your PC in safe mode (tap F8 while booting and select option Safe Mode)

                  - Go to Start -> Run

                  - Type 'Msconfig' and hit Enter

                  - Go to Startup and disable every option

                  - Save

                  - Reboot your PC


                  The virus will not start up anymore. it is, however, still present on your PC. No big deal but you can remove it.


                  - Go tot Msconfig as mentioned above.

                  - enable the first option and reboot


                  if the virus stays away it is not present in this option and you can leave it enabled safely


                  repeat these steps for every option. As soon as the virus reappears after reboot you know in which option the virus is hiding. Just delete the directory in which it is present and the virus is gone.


                  Good luck!

                  • 16. Re: Metropolitan Police Virus (ukash)

                    Thanks for the tips.  I changed your user name to remove the email portion for your own safety and privacy.

                    You will have to re-log in.

                    • 17. Re: Metropolitan Police Virus (ukash)

                      This discussion has (belatedly) been moved into Top Threats. All useful solutions to removing this malware should be kept in the same discussion area for reference.


                      Also, see the blog post in this section with links to Microsoft for the Malware Protection Center


                      Message was edited by: Hayton on 23/04/12 01:21:07 IST
                      • 18. Re: Metropolitan Police Virus (ukash)

                        I'm sorry ..but I think he has a point here...I also recently got struck with this virus twice..and i'm still struggeling to get rid of it...blaming it on browsing  habbits is a poor excuse...I have got it twice because certain java video's being loaded on various sites or popups on which you have limited control over... Mcafee failed to detect it...and also fails to detect it during a full scan mode...I had to manualy remove it..unfortunately the creator has been more creative.now. During boot in safemode it keeps rebooting...booting is DOS safemode works...but i'm failing to fully getting rid of it...I will post what I have attempted later.

                        • 19. Re: Metropolitan Police Virus (ukash)

                          Unfortunately none of  the major antivirus software suites will detect this sort of thing because of the way it works, requiring user interaction, no matter how little or trivial, to activate.


                          When hit by one of these, don't touch any key or click the mouse - hard power off and then reboot into Safe Mode to initiate System Restore. 


                          Depending on your OS System Restore can be started from DOS/Command Prompt mode.


                          Message was edited by: Ex_Brit on 09/04/13 10:56:06 EDT AM