Virus scan is reporting that the file McSvHost.exe is infected. It says it is unable to delete it and that I should manually do so. I haven't tried to do this yet, as the file appears to be a legitimate McAfee file. The path to the file, as reported by the virus scan, is C:\Program Files\Common Files\Mcafee\McSvcHost. Should I delete the file?
I assume you have access protection disabled?
Go to navigation and general settings and alerts and settings and check if access protection ticked. This should stop mcafee files being altered.
That said this not normal. Run this program as mcafee might be compromised. I have asked the techs for comment if they have seen this happen.
You might need to download the program's setup file to a usb stick on another PC and rename the file . When installing it rename suggested install folder as some malware look for known AV and malware programs. Renaming the exe file also worth a thought.
You are not using two scanners by chance that can maybe cause a clash and possible false detection.
I am also getting the message to delete this file. With a reference to New 32.
I down loaded McAfee, via Verizon In-Home Agent support, yesterday (Wednesday) because I was consistantly receiving a message to buy "XP Total Security" and I could not get onto the internet. When I tried to get on the net the URL I requested would come up for a nano second then the screen immediatedly went to Alert Screen and I would receive 3 options to either Stop or Continue to my requested URL (but this link went no where) or Purchase "XP Total Security.
Also when I shut off the wireless I would still get popup alerts regarding trojans, worms, stealth etc...... with a link to buy "XP Total Security.
The day prior (Tuesday) I could not use any functions (reply, reply all, forward) in my on-line MSN mail. These functions did work for Outlook Express and still do. Also when I used Google on Tuesday and clicked on any suggested link I would get to "Monster Markets".
Once I downloaded McAfee on Wednesday some viruses were found and handled. And I can get to the net via Verizon Support but not through my desktop or start Internet link. When I try to use desktop or start links it appears that the .exe files are not present and I receive a message to pick what type of file I want to use to open the .exe file. Once I click on the Browse to see files from the net I do get connected to the net.
I am no longer getting the "XP Toyal Security" message either on or off line but I am getting the delete file - CrogramFiles\Mcafee\mcsvchost\mcsvhost.exe.... when I run the McAfee scan and none of my exe files can be opened. And every time I shut down & restart the McAfee Firewall is off.
Major Mess - HELP
Message was edited by: kareninparadise on 5/19/11 12:54:00 PM CDTMessage was edited by: kareninparadise on 5/19/11 12:57:00 PM CDT
XP Total Security is one of the many pseudonyms for a very persistent fake anitspyware which is circulating the web and all it takes is a click on the wrong link to fall victim to it.
There is an excellent removal guide on the web here: http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-2011
Please scroll down that page as the first links you will see are advertising that helps pay for their website.
This sort of thing is rarely stopped by antivirus engines and usually needs specialist software as is explained on that link.