4 Replies Latest reply on May 19, 2011 2:48 PM by Peter M

    McAfee is telling me to delete one of its own files ...

      Virus scan is reporting that the file McSvHost.exe is infected. It says it is unable to delete it and that I should manually do so. I haven't tried to do this yet, as the file appears to be a legitimate McAfee file. The path to the file, as reported by the virus scan, is C:\Program Files\Common Files\Mcafee\McSvcHost. Should I delete the file?

        • 1. Re: McAfee is telling me to delete one of its own files ...
          Peacekeeper

          I assume you have access protection disabled?

          Go to navigation and general settings and alerts and settings and check if access protection ticked. This should stop mcafee files being altered.

           

          That said this not normal. Run this program as mcafee might be compromised. I have asked the techs for comment if they have seen this happen.

           

          You might need to download the program's setup file to a usb stick on another PC and rename the file . When installing it rename suggested install folder as some malware look for known AV and malware programs. Renaming the exe file also worth a thought.

           

          You are not using two scanners by chance that can maybe cause a clash and possible false detection.

           

          Message was edited by: Peacekeeper on 18/05/11 8:19:30 PM
          • 2. Re: McAfee is telling me to delete one of its own files ...
            Nitin Kumar

            Hi,

             

            Please zip this file with password 'infected' and submit it to <virus_research@avertlabs.com >, also provide the id here.

             

            Regards,

            Nitin

            • 3. Re: McAfee is telling me to delete one of its own files ...

              I am also getting the message to delete this file. With a reference to New 32.

               

              I down loaded McAfee, via Verizon In-Home Agent support,  yesterday (Wednesday) because I was consistantly receiving a message to buy "XP Total Security" and I could not get onto the internet. When I tried to get on the net the URL I requested would come up for a nano second  then the screen immediatedly went to Alert Screen and I would receive 3 options to either Stop or Continue to my requested URL (but this link went no where) or Purchase "XP Total Security.

               

              Also when I shut off the wireless I would still get popup alerts regarding trojans, worms, stealth etc...... with a link to buy "XP Total Security.

               

              The day prior (Tuesday) I could not use any functions (reply, reply all, forward) in my on-line MSN mail. These functions did work for Outlook Express and still do. Also when I used Google on Tuesday and clicked on any suggested link I would get to "Monster Markets".

               

              Once I downloaded McAfee on Wednesday some viruses were found and handled. And I can get to the net via Verizon Support but not through my desktop or start Internet link. When I try to use desktop or start links it appears that the .exe files are not present and I receive a message to pick what type of file I want to use to open the .exe file. Once I click on the Browse to see files from the net I do get connected to the net.

               

              I am no longer getting the "XP Toyal Security" message either on or off line but I am getting the delete file - C:ProgramFiles\Mcafee\mcsvchost\mcsvhost.exe.... when I run the McAfee scan and none of my exe files can be opened. And every time I shut down & restart the McAfee Firewall is off.

               

              Major Mess - HELP

              Thanks

              Karen

               

              Message was edited by: kareninparadise on 5/19/11 12:54:00 PM CDT

               

              Message was edited by: kareninparadise on 5/19/11 12:57:00 PM CDT
              • 4. Re: McAfee is telling me to delete one of its own files ...
                Peter M

                XP Total Security is one of the many pseudonyms for a very persistent fake anitspyware which is circulating the web and all it takes is a click on the wrong link to fall victim to it.

                 

                There is an excellent removal guide on the web here:  http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-201 1

                 

                Please scroll down that page as the first links you will see are advertising that helps pay for their website.

                 

                This sort of thing is rarely stopped by antivirus engines and usually needs specialist software as is explained on that link.