Showing results for 
Search instead for 
Did you mean: 
Level 7

Masked malware named iptyr.exe disables McAfee update function!

iptyr.exe is a masked malware which is reported as uninfected by McAfee AntiVirus disables SecurityCentre's update function!

Name: iptyr.exe

Location: %systemdrive%\Documents and Settings\Administrator\Application Data\iptyr.exe

McAfee SecurityCentre gives the following warning after 8 days:


Only a "Fix" action updates the definitions.

This shook my confidence in McAfee's ability to protect my computer.

iptyr.exe is disguised as a system file in windows & thus remains hidden.

Googling for "iptyr.exe" shows that is is a newly reported file.

I was able to delete the file & associated registry entries using Unlocker 1.9.0, regedit.exe & Autoruns for windows:

Afterwards, the update function of McAfee Security Centre started working again.

McAfee needs to udate its definitions to include this malware immediately before iptyr.exe becomes a epidemic & destroys McAfee's reputation.

0 Kudos
1 Reply
Level 21

Re: Masked malware named iptyr.exe disables McAfee update function!

It's probably a bit late now but there is a submission process to have suspect files analysed & included in the detection database.  It's quite a rapid process and is usually solved within 24 hours.


No antivirus on the market is 100% proof against everything out there unfortunately.

Message was edited by: Ex_Brit on 26/07/10 1:10:10 EDT PM
0 Kudos