1 Reply Latest reply on Dec 12, 2010 11:55 PM by Peacekeeper

    GenericPUP.x!fr

      McAfee has detected a program on my laptop identified as "GenericPUP.x!fr" which it recommends be quarantined or removed.  When i attempt to do either of these actions by using McAfee, i geta message that indicates:

      "You're about to remove programs that may have been installed as a bundle or suite. Please read the program's license agreement before removing.

      To let McAfee automatically remove these programs, click OK.  Otherwise, click Cancel and remove them on your own.'

       

      Neither action accomplishes anything and the notice indicatind that the item detected by McAffee still is an issue.

       

      any thoughts on how to remove this item or get by the notification messages?

      Thanks for any help!!!

        • 1. Re: GenericPUP.x!fr
          Peacekeeper

          New trojan

           

          Update your dat files and scan your PC with Virusscan in Safe Mode.

           

          To do this, tap F8 repeatedly while booting up. You'll get a boot screen with choices. Pick Safe Mode. Your PC will boot in a low resolution state as most processes won't be running. Go to "My Computer" (XP) or "Computer" (Vista), right-click the hard drive and select "Scan" from the drop-down menu. You'll see an extra taskbar icon which will show a progress report if you hover over it.

           

          If you think you have a virus infection on your PC do one or both of the following :

           

          - Run the free Mcafee Stinger program from http://vil.nai.com/vil/stinger/ -

           

          set it to Report Mode (in Preferences) and post the logs of anything it detects.

           

          - Join the McAfee Getsusp group at https://community.mcafee.com/groups/getsusp30-beta-feedback

          You will have to ask there for Getsusp, which is a Beta program and not yet on general release.

          Before you use Getsusp, you should go to this document

           

          https://community.mcafee.com/docs/DOC-1323

           

          and download the PDF file explaining what Getsusp is and how it works, and this document

           

          https://community.mcafee.com/docs/DOC-1761

           

          which downloads the installation guide PDF document.

           

          If you want a second opinion, or to be on the safe side, then you can do a scan with the free versions of these tools :

           

          Malwarebytes and SuperAntiSpyware

           

          If you already have Malwarebytes installed, the virus could be protecting itself against it. In that case, in order to get Malwarebytes running you'll need to rename the executable. Open the C:\Program Files\Malwarebytes Antimalware folder, then rename the "mbam.exe" file and double-click directly on the file to open the program. After updating the program, run a full system scan using Malwarebytes.

           

          Make sure both programs are updated to the latest versions before running them and let them clean anything they find. If they quarantine a file or fail to remove a file try to get a copy of it and send it to Mcafee using the virus submission path described here :

           

          Send the file to mcafee labs at http://vil.nai.com/vil/submit-sample.aspx

           

          Zip the file and password it with password infected.

           

          You will probably get an autoreply back saying it is infected; reply asking for it to be manually tested.

           

          This starting point 1 variety of this trojan only found yesterday

           

           

          Message was edited by: Peacekeeper on 13/12/10 3:55:52 PM