I was able to remove (I hope!) system tools from my computer by going into safe mode and doing a system restore to an earlier date. The machine has been working fine until today, when it popped onto my screen again. I removed it again the same way and contacted via online chat McAfee to ask why my current virus protection did not stop it. I was asked to give them my phone number and was called shortly later by a salesman wanting to sell me "upgraded" protection. I wanted technical answers, not a sales pitch. I'm not happy with McAfee right now.
Hi lgemmel, I totally feel your pain. Although, Norton's Symantec will not catch the FakeAlert-WinWebSec virus either. Switching from McAfee to Norton will not save you any grief, it will just make you sad to find your computer still pulls in trojans. McAfee's Stinger scanner finds the trogan, although it is unable to repair the files.
Quoted from toddc:
"Although, Norton's Symantec will not catch the FakeAlert-WinWebSec virus either."
I can only think you've posted in the wrong thread.
Norton does detect the problem, and has done for over three weeks.
"McAfee's Stinger scanner finds the trogan, although it is unable to repair the files."
No files are damaged from this infection, so again, I think you're accidentally talking about a completely different infection...?
Norton may catch some variants of System Tools. However, it will not catch all of them:
No vendor will- there can be 10+ new variants of System Tool per hour, every vendor is playing catchup. With anywhere from 30,000 to 60,000 new malware sample released every day it is impossible for any vendor to detect this amount.
MalwareBytes and SuperAntiSpyware generally do not target certain types of infections as your antivirus has first call on important components running on your system, such as TDL3/4 and those that write to your MBR. However, they may detected and remove certain other types of infections that may have been dropped by these infections.
Users that are running Vista and Windows 7 SHOULD have their UAC( User Account Control) turned ON, this should stop you from becoming infected as these types malicious files generally need Administration Privileges to run - having the UAC turned on should stop this from happening.
So, same machine, McAfee on and up to date, infected by System Tool once again. Just removed it before Christmas. It also disables real-time scanning on McAfee. It does not seem to be on the drive the same as before so I am still looking for the infection. Malware Bytes scanning right now in safe mode. We will see if it can find it. This virus bites and McAfee does not even seem to notice. This machine has been scanned inside out and everything updated in the last week and yet it has been infected again today. Ideas?
MB did not find the infection even with the updated definitions. I found it manually and deleted it. I do not know where it is coming from.
restart your computer ... during restart, press f8 ... pick safe mode to restart ... before it completely restarts, it asks you if you want to restore ...simply restore to before system tool virus was on your computer ... worked with xp
This virus hit me Dec 26 and I removed it myself (see my post #7, Dec 26, 2010 2:20 PM). Today I ran a full scan and McAfee found and removed it. Looking around the McAfee Security Center, I found the "Quarantined and Trusted Items" window and, under Quarantined Potentially Unwanted Programs," I found a number of files that had the Dec 26 date. This tells me that the real-time scanning saw something fishy but McAfee was unable to properly detect the virus until the DAT file was updated and a full scan performed.