cancel
Showing results for 
Search instead for 
Did you mean: 
edwsin
Level 7
Report Inappropriate Content
Message 1 of 11

[ask] u.cpl is it a viruses..?

Hello,

I am new in this forum, hope someone could help me with my problem, its been almost 1 week i had 4 notifications (same notifications) everyday, below is the example:

Client Name xxx

IP Adress xxx

Affected Objects E:\Common\u.cpl

Event Description Infected file deleted.

Notification send 11/8/11 9:08:48 AM

Configured Threat Name (Alle)

All 4 notifications are indicating u.cpl is the infected file, and mcafee said: the file is deleted.

But why the next day, i get the same 4 notifications...?

How should i do this..?

I have run:

1. Full Scan

2. And Stinger.exe

But nothing seems to fix it.

Best regards,

Edward Sinaga

10 Replies
exbrit
Level 21
Report Inappropriate Content
Message 2 of 11

Re: [ask] u.cpl is it a viruses..?

What exactly is your E: drive?   Also what operating system and service pack are you using?

Sometimes infections will hide in System Restore points.  Try turning off SR for that drive and see if it continues.

What version of McAfee VirusScan is installed?

Message was edited by: Ex_Brit on 08/11/11 7:43:35 EST AM
edwsin
Level 7
Report Inappropriate Content
Message 3 of 11

Re: [ask] u.cpl is it a viruses..?

Hi Ex_brit,

Thanks for the reply,

My E: drive is my share folders to all of my users, my server use windows server 2003 and my clients using windows xp.

The restore point was disable, we are using mcafee:

Mcafee Virus Scan Enterprise ver. 8.7 i

Mcafee Agent version 4.0.0.1494

exbrit
Level 21
Report Inappropriate Content
Message 4 of 11

Re: [ask] u.cpl is it a viruses..?

Moved to Corporate User Assistance so someone from that side can help you.

nownitin
Level 12
Report Inappropriate Content
Message 5 of 11

Re: [ask] u.cpl is it a viruses..?

Please submit this file <http://www.mcafee.com/us/mcafee-labs/resources/how-to-submit-sample.aspx> and mentiion the ID in this thread.

Regards,

Nitin

edwsin
Level 7
Report Inappropriate Content
Message 6 of 11

Re: [ask] u.cpl is it a viruses..?

Dear Nownitin,

How can i submit the file, when the infected file was directly removed or deleted by mcafee..?

nownitin
Level 12
Report Inappropriate Content
Message 7 of 11

Re: [ask] u.cpl is it a viruses..?

check in quarantine folder if any file is created at the time of this detection and what is the detection name?

edwsin
Level 7
Report Inappropriate Content
Message 8 of 11

Re: [ask] u.cpl is it a viruses..?

nownitin
Level 12
Report Inappropriate Content
Message 9 of 11

Re: [ask] u.cpl is it a viruses..?

ID please?

edwsin
Level 7
Report Inappropriate Content
Message 10 of 11

Re: [ask] u.cpl is it a viruses..?

What ID..?

Where i can find the ID..?