I think you should read this; https://community.mcafee.com/docs/DOC-1294
But first you might want to do this;
With this particular threat, you'll need to start by disabling System Restore. This one definitely gets into those restore points and uses them to reinfect your computer.
- Click the Start button, then click Control Panel.
- Double-click System and select the System Restore tab.
- Check the box beside Turn off System Restore.
- Click OK and restart your computer.
If you're problem isn't solved, you can post back, if this is the answer, can you mark it as the answer.
Moved to Malware Discussion > Home User Assistance.
Try running McAfee in Safe Mode after disabling System Restore temprorarily.
Safe Mode is reached by tapping FD8 repeatedly while booting up.
Then go to Computer (Vista/Windows 7), My Computer (XP)
Right-click the hard drive and select Scan.
All you'll see is an icon near the clock. Hover over it for a report.
I disabled System Restore, went into safe mode and did a McAfee scan. Attached is a copy of the scan report that shows it detected the Adware-Onestep.n.
Then I downloaded and ran Stinger in safe mode. Attached is the Stinger report where it says my computer was infected with the FakeAlert PCVirusless cirus. The report said number of infected files: 1, and number of files cleaned: 1.
When I restarted my computer in regular mode, I'm still getting the same McAfee pop-up window that says I have the Adware-OneStep.n that is blocked.
1 of 1 people found this helpful
Hmm, you can try to restore the file and run Malwarebytes, it might get rid of the Adware.
Actually, right after I posted my follow up question, I looked around the discussion board and found the Malwarebytes software in another discussion. I downloaded it, ran a scan and it found a bunch of Adware files that I deleted and now the McAfee pop-up window is gone!
Thank you for your help!
Glad you're problem is sorted out.
Good Luck and stay safe!
Please help me!!
I have paid to have Adwear-one step removed and it has returned twice...
after getting my clean p.c. back i ran a scan and went on firefox then facebook.... surely this can lead to the virus returning?
I have cleared my internet history and restored firewall settings.
I have windows 7.
I have tried the system restore and can not find that box (im pretty sure i was on the wrong thing)
Also Malwearbytes doesn't find the virus but i see the people i paid used it to success.
How do i remove it and stop it coming back? I can not afford to pay again.
Please help me,
Jade, obviously something yoiu are doing is bringing it back or it never actually left.
Download Hijackthis and post a log on one of the followinjg forums for expert free advice.
Do not post Hijackthis logs here, we can't help with those!
Post the logs at a specialist Forum:
Be sure to read all the sticky announcements/instructions at the top of each malware forum!
Just wanted to say that I found this thread invaluable as I had a similar problem this week with "Adware.Onstep.l"
The information you have given me helped me resolve this problem! Running McAfee with the system restore disabled didn't work for me. In the end, the free Malwarebytes software did the trick (in safe mode, with system restore disabled). McAfee is no longer telling me that I have a potentially unwanted program. I'm very relieved! My computer is also working much faster than previously. I am guessing that Malwarebytes found other issues that were slowing down my PC before the Adware arrived ...
Thanks so much !