Three days ago, McAfee pop-ups started warning me that a program - shell.exe - wants Internet access. I also noticed that when I tried to click on various links from Google searches, my browser was being redirected to sites other than those I was clicking on. (This happened in both IE8 and Firefox.) I blocked this program, but then I could not access anything via the Internet. I ran a full system scan, and McAfee produced the following 2 report items:
Viruses, Trojans, and Cookies Quarantined = Artemis!8453D8F4B708
Potentially Unwanted Programs Quarantined = WINHOST
However, after rebooting (or not rebooting - it did not matter), this redirection was again occuring. If I tried to manually delete shell.exe from its location - C:\documents and settings\[USER NAME]\application data\microsoft\windows\ - shell.exe kept being re-created there. If I run another scan, McAfee again finds the same 2 items for quarantine as above, and this starts all over again.
I have the latest updates on my McAfee security program.
Can anyone please advise me as what is the best way to get rid of this virus from my PC permanently...? Thanks very much!
You might have an undetected malware which is dropping/downloading these files again.
If you suspect you're infected and have trouble finding what is causing the infection, I'd suggest giving this handy tool a try.
"McAfee GetSusp is intended for users who suspect undetected malware on their system. By using a combination of clever heuristics and querying McAfee's online database of known clean files to gather suspicious files, GetSusp eliminates the user's need for deep technical knowledge of computer systems to isolate undetected malware. McAfee GetSusp is recommended as a tool of first choice when analyzing a suspect machine."
Get it from here: https://community.mcafee.com/message/148081#148081
Once GetSusp identifies and collects the suspect files, post the logs here and we community members can help.
I have the same exact problem! A program named MS Shell wants access to the internet, if I block access I will lose all access to the internet. If I grant access my google searches get redirected. I use both Mozilla and Chrome. I will try this recommended solution and let you know if it works for me. In the mean time, any info if this worked for anyone?