Hopefully, I'm posting this in the right area / forum for support and help on this issue.
McAfee Did NOT Remove or Even Find the Ave.exe Trojan / Virus on my Computer, even though it's definitely on my computer.
Frustrating 2 days of this ave.exe stuff taking over my computer.
I have Windows Vista, and never had a virus on this laptop in over 3 years since I got it (knock on wood).
On Saturday (4/10/10) I got this fake Vista Security Tool 2010 Firewall Alert pop up, and using my other laptop quickly found info about the file ave.exe coming up in the Task Manager.
The way I got it was from a TV Show website I was Googling for the latest episode of a TV Show, and other than clicking search results from Google, I never clicked anything else while surfing through these various sites. They were all "junk" sites and full of advertising. Not sure the exact site / ur this happened from, but I never download anything from sites.
Sure enough, I saw it (ave.exe), and kept disabling it, but could not find it anywhere on my computer (I'm not technically saavy at all).
What I didn't realize, was my McAfee was expired for over 6 months - my fault!
I paid for new subscription, was able to get it installed (although had to repeatedly stop the ave.exe process from my Task Manager).
Ran a new fully comprehensive virus scan today (Sunday - 4/11/10) and McAfee didn't find or quarantine this virus / Trojan.
Confused why McAfee wouldn't be able to find and remove this crap from my computer.
As soon as I went to open an Internet Explorer Window after McAfee virus scan was complete, then bam, that stupid fake Vista Security Tool pop up occurred again, and the only thing McAfee pop up told me was something was trying to access the Internet, so I blocked it.
Can any one help with the specific soultion (in as non-techie speak as humanly possible )
- Can McAfee remove this? If so, why didn't it?
- If not, is there non-techie instructions on how to remove this ave.exe virus?
Thanks in advance for your help on this!
I got infected on the same days, wierd.. any way i used loaris trojan remover and got rid of it, just follow directions they give you. Will be uninstalling my mcafee today due to me scanning twice to try and remove this bug and it found nothing. Mcafee was running in background when i was infected.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp mcafee posted this today but I wasn't able to run it as it is not signed and windows doesn't allow it. Good JOB to get the money and do nothing, eventually created viruses and infect the ones who paid!!!!
With all due respect you are talking absolute rubbish. Any reputable company dealing with security matters, and McAfee is a very reputable one, would never in a month of Sundays download malicious software to their clients.
Also those DAT downloads are for Enterprise customers, not home users.
It was most likely that nasty recovery that was involved with getting the infection.
please explain how in the world i got the virus twice having total protection on my computer while the virus was known and in mcafee's database.
It's fake anti-spyware requiring someone to click on something in order to install the malware in the first place so none of the antivirus applications on the market detect it as far as I know. I wasn't aware that it was in the database to start with so if you found it there perhaps you could point me to it.
In any case variations on these things come out often which are then undetectable until someone submits them for analysis.
No antivirus on the market can stop everything that's out there, but they can protect against major threats and the rest is up to you the user.
Applications like Malwarebytes Free often can deal with that kind of thing, or use Hijackthis and post the log on one of the forums specializing in HJT logs.
A long time ago I posted a sticky with lots of such tools and links here: http://community.mcafee.com/thread/1996
what i had downloaded both times was an hp update. it might be hp fault but that is not an excuse for mcafee for letting it go thru. follow this link to see the virus @ mcafee: http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=262933
I don't believe McAfee wrote this virus. At the worst I could suspect that they might be slow to counter it in order to get more removal money. Annoyed as I am I would even doubt that conspiracy theory.
I am still trying to get this/these infections off of my PC. One of the anti virus utilities said it was NEWHEUR_PE What this sucker does is hijack IE and take you to websites that infect your machine with another virus.
McAfee ha blocked some of these new infections but it still hasn't detected the underlying virus.
FYI some of the things I have tried.
tdsskiller.exe It finds two issues and says it will clean one of them on reboot. Run it again after reboot and it says the same thing.
malwarebytes This is the one that got rid of the ave.exe infection
McAfee didn't do a thing about ave.exe for three or four days but then started finding and removing it. Finds nothing on the current infection.
Microsoft Malware removal tool. Nothing.
There's more but my brain is about fried at this point so I can't remember anymore of the things I have tried. I have been fighting with this for a week and a half. I am about ready to say screw it and fdisk my hard drive and reinstall Windows.
If anyone has specific suggestions I am interested in hearing them. At one point I found some removal tools on McAfees site but I haven't been able to find them again. Anyone know where to find those? How many are there and what viruses they are for?
FYI my current symptoms are Internet Explorer will open a new window with and ad and or install (without a click by me) a new virus. The shortcut under the Start button either doesn't work or it takes me straight to some unwanted site instead of my home page. Trying to view youtube videos is also very bad news. That will trigger the redirect by the virus.
Help me, Heeelp meeeeee!
I got the same virus. I have been fighting to get rid of it for three or four days. I have computer skills and still haven't been able to get rid of it. I deleted the file and regestry entries and it still came back. I went to McAfee suport and emailed a report to them. I couldn't follow their reporting instructions because the page couldn't be found. So I winged it sending them versions of my browser and McAfee software the file name and other info that thought they may want. I got zero reply. I went back to their suport page and ran their free scan, it found nothing. I then went to suport and ran another program to get to their suport chat. Then I I got to their tech support chat and it ran yet another program. The tech said he couldn't help but for a fee, $90 McAfee could remove it. I said no thanks could he tell me where to find removal instructions and he said he would email them to me. He didn't. I waited until the next day and still no email so I went back to their site and jumped through the hoops again and asked the tech to email me the instructions or tell me where to find them. She sent me two emails with links to McAfee suport sites. When I told her that I had already been there she told me for the second or third time that McAfee could remove the virus for a small fee. Frankly it felt like their main goal was to get me to pay the fee and not to actually help me. If anyone from CrapAfee is reading this you have one angry customer here. Here are the service numbers SR-488112213 and SR-488309168.
This virus makes multiple regestry changes that removes all file associations so nothing will run. Everytime you try to run something it runs another ave.exe. To get around this I went to a folder and tools/folder options file types tab new advanced. entered exe and application. I did a search on ave.exe to find and delte the files after ctrl/alt/delete task manager to stop the running ave.exe's 5 at one point! You have to make hidden files visable first. This will get the machine running again but the virus is still there and pops back up and redoes all of its regestry changes! I eventually call tech support at my ISP looking for help and the tech recomended two anti virus programs. Malwarebytes and ComboFix remover. The second requires uninstalling CrapAfee so I went with the first. I ran the scan. It took three hours! But it found 14 items including three or four files. I told it to delete them and figured I was good. Wrongo. Damn thing came back. I ran it again because I had done the above and figured it may have missed it because I had already deleted the key files. So I ran it while the virus was screaming about all of the ifections it claimed I had. The time Malwarebytes found eight items and deleted them. I am running it again right after it rebooted from the last scan. If this doesn't work I will try the combofix or the one recomended in the second post. I have also heard of one called Trojan remover by get this Simply Super Software LOL what a name.
In conclusion I think McAfee sucks. I may just uninstall it because it is a resource hog that is iffy on protection. This isn't a brand new virus it is a modified version of the av.exe fake alert virus. There is info on it on the internet. Malwarebytes has it in their dat file. Why doesn't CrapAfee? The only reason I can figure is that they want to get more money from their customers for removing it. McAfee=Epic Fail.