Printable View
I opened an e-mail attachment the other day that my mcafee detected and deleted. Ever since, my mcafee has been acting funny like when I open a scan it closes. Can any of these viruses screw up an antivirus program? W95.CIH, VBS.LoveLetter, and some MarkerC virus.
Just try updating it to the newest version.
some of the newer Worms seek and destroy the executors for AV programs, or try to anyway. But just 'acting funny' doesn't seem to qualify in that respect.
You may just want to uninstall and reinstall the software and see how it acts...
Ouroboros
p.s. Uninstall the software, jump back online and try an online scan, such as the one at www.sygate.com , see how that works, and then reinstall and UPDATE it...
O
Some worms are purposely ment to destroy virus scanners for possible further attack. Ya might wanna always get the update and never TOUCH any suspicious email.
I did not know that it was infected. it wasn't an attachment. I have just read about W95.CIH and it says that if you are infected by it it will infect every file that is scanned by Norton or any other virus scanner. i used norton's removal tool and it told me that I wasn't infected with it. Thank god!
HeyRyan:
Don't you have multiple AV programs installed?
Possibly that is your answer.
Download the latest superdat (engine and definition update) and run: "superdatname".exe /f
This forces the superdat to update the program even if its updated. I have used this now and then when my McAfee AV started to behave strange :).
This will hopefully help you with your problem.
Quote:
Originally posted here by Ryan Nyquist
I opened an e-mail attachment the other day that my mcafee detected and deleted. Ever since, my mcafee has been acting funny like when I open a scan it closes. Can any of these viruses screw up an antivirus program? W95.CIH, VBS.LoveLetter, and some MarkerC virus.
When you opened the e-mail attachement, what did McAfee detected?? It should have given you the name of the Virus. If you can't remember, there should be a log file with the name of the virus in it. It might help us out if we know what McAfee 'thinks' it detected.
it detected those three virus names. it was not an attachment, it was just a plain e-mail with source codes on it.
alot of stuff was loading at that time and I'm not sure if it deleted them correctly.
Any chance your running Windows ME ??
OK we can deal with the Windows ME problem later (if you are running it).
Lets start with CIH virus thing. You said LoveLetter was detected on you PC. A variant of the virus writes a line-by-line hexadecimal file and saves it as \Windows\Cih_14.exe. This file contains a dropper for the CIH virus. This may explain why your AV thinks your infected and the removal tool doesn't. Look for this file (it may be hidden) if you find it, delete it and empty your trash.
After you have done this, come back here and fill us in, and we'll move forward from there.
HeyRyan:
If you attempted to view the famous J-Lo attachment, this Symantec write-up might interest you:
http://securityresponse.symantec.com...eletter.a.html
;)
*rain man voice* yeah, yeah definatly get the update
yeah! gotta get the update. no not from here from cincinatti kmart. hahaha! naw thas a joke.
um just update: your best bet.
I have reinstalled and scanned with mcafee. it did not detect anything. it was probably just a problem with a deleted mcafee program file or something. what about windows me? and ya i am running it
HeyRyan:
First, I dunno much (anything) about McAfee, which you use. :confused:
I do know that Norton 7.0 (2001) will not detect a virus lurking in the Win ME System Restore folder. McAfee *might* be the same. You might want to check the problems associated with your version of McAfee.
If the problem occurs again, you might want to try dumping the contents of the System Restore folder. Good luck.
:thumbsup:
McAfee does scan the C:\_RESTORE folder (system restore). It will not delete or clean any infected files in it. You have to run a scan in DOS to clean any infected files that are in the C:\_RESTORE folder. I have had to remove several trojans using a DOS scan (bo2k, netbus 2.10) because I could not repair any infected files in the restore folder.