to clarify iy isn't asking me to sub to a mcafee program but to a windows or something pro package...
wont let me load mcafee. i get a windows security alert saying application cannot be executed, searchprotocolhost.exe is infected.
wants to go to intsecureprof2009.com. I think thats where they ask for money. ??
updast - says antivirus system pro ... scanning my computer, comes up with 34 viruses asks if i want to remove th threats... and i think \then it asks for money. says evaluationj copy only, i'm not protected. obviously a scam.
update - tells me i'm infected with nuqel.e, bankerfox, it won't let me load taskmanager to fix it, says its infected.
so where is mcafee??? What am i paying for????
pps: at no time did mcafee tell me i wasn't protected.
Message was edited by: snews on 11/25/09 1:19 AM
Message was edited by: snews on 11/25/09 1:46 AM
You have a fakealert infection on your machine by the sounds of it. We see many many new variants of these every single day. Can you please try running our stinger tool on the machine and let us know if it helps? You can download the file here http://vil.nai.com/vil/stinger , and instructions on how to run it are documented.
Hope this helps,
k, assuming your profile and other info isn't fake, i'll give it a whirl. i'm assuming this thing attaches itself to every program i run, it's infected mcafee and seems to shut down everything as i use it, so i'll assume only chrome is affected at this stage and replug the desktop to the modem and try explorer or firefox and hope for the best. i did get the task manager up by doing cnt alt delete before mcafee (or whatever) loaded and catching the sucker in processes, but even after running malwarebytes, still got a windows alert and caught it again in processes.
so unless somebody tells me otherwise, i'll load a browser from the desktop and try the above stinger thing. thanks. i think.
I had the same thing....Stinger downloaded ok, but wouldn't start...still disappeared after showing up for a moment......
ReStarting computer then immediately before the bad program started, I opened the Stinger and hit scan and within moments it had found and deleted the trojan..... (which turned out to be in my Documents and Settings/Joe/Local/ApplicationsData/aehryx/phhlsysguard.exe -- that was the name)
superantispyware seems to have worked. malwarebytes detected three but not a fourth.
running the stinger but not sure theres anything left for it to detect.
still have to run the regular mcafee scan. and give a donation to sas. i should take it out of the mcafee renewal. if i renew. probably not the place to discuss it but why pay the big bucks if the big guns can't keep this stuff out, and charges you more to fix it.
at leasat this forum was helpful. thanks.
A recap now that I can type properly... I got back into the task manager by hitting ctr alt del before the screen was up, deleted a process called bsomethingguard?, followed the direction in an earlier forum post about downloading malwarebyte, loaded it onto a flash drive, changed the name of the file, loaded it onto the desktop. Got a 723? error which apparently is an update error, and the file got infected so I had to uninstall (which finally worked) and repeat, but a quick scan still caught three infected files.
I tried a full Malwarebytes scan but Windows decided to update and auto rebooted on me, so I don't know the results).
Rebooting the computer brought up another Windows alert. and the AntiVirusPro screen again, but not as intense. I used a different browser than I had been using and downloaded and as long as I got into the Task Manager early again (pre-McAfee I think) and deleted the virus process, I could download SuperAntiSpyware directly to the desktop. I updated and ran it, it found and cleaned four files.
I deleted my temp internet files and turned off my System Restore. (Oops, have to turn it on again). I should have deleted my browser history, but I need some of it.
I ran the McAfee stinger and McAfee scan afterwards, nothing came up, and everything is now great. .
So that's what worked for me. Thanks again.
I have had similar bankerfox A attack. Tried to access internet malware url from mcafee site but blocked by virus to acess any internet site.
Started in safemode networking to access internet and blocked again.
in Safemode, I opened mcAfee and did quick scan. nothing found.
Why isn't McAfee picking this up?
Thanks for your help,