Hello cannykins
EDIT: The below looks complex but is not 1 step at a time
Mcafee can be just as stouborn as Norton to remove.
Download and run Autoruns
http://live.sysinternals.com/autoruns.exe
Once running click everything tab
Slowly and carefully go down the 3rd colum Publisher (Most are Microsoft)
Look for Mcafee and Network Associates when found rt click that line and delete it
Once they are all gone REBOOT
--------------------------------------------------------------------------------------------------------
Then download and run each of the tools below very straight forward. These cover several versions and products but Mcafee uses a lot of the same locations in different products. May get some errors but that is OK!
http://download.mcafee.com/products/licensed/cust_support_patches/MPFCleanupTool.exe
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe
http://download.mcafee.com/products/licensed/cust_support_patches/MPSCleanupTool.exe
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
Then drag mouse copy for pasting, the entire content of the box below watch the slider and go all the way to bottom.
Code:
cd\
attrib -h -s -r McAfee*.* /d /s
attrib -h -s -r AvSynMgr*.* /d /s
attrib -h -s -r McShield*.* /d /s
attrib -h -s -r NaiFiltr*.* /d /s
attrib -h -s -r VirusScan*.* /d /s
attrib -h -s -r AlogServ*.* /d /s
attrib -h -s -r Avconsole*.* /d /s
attrib -h -s -r Vshwin32*.* /d /s
attrib -h -s -r Avsmcpa*.* /d /s
attrib -h -s -r naifsrec*.* /d /s
attrib -h -s -r mckrnl*.* /d /s
attrib -h -s -r mcscan32*.* /d /s
attrib -h -s -r mcutil*.* /d /s
attrib -h -s -r vshield*.* /d /s
attrib -h -s -r vshinit*.* /d /s
attrib -h -s -r vsstat*.* /d /s
attrib -h -s -r webscanx*.* /d /s
attrib -h -s -r scan32*.* /d /s
del /f /s /q mcafee*.*
del /f /s /q AvSynMgr*.*
del /f /s /q McShield*.*
del /f /s /q NaiFiltr*.*
del /f /s /q VirusScan*.*
del /f /s /q AlogServ*.*
del /f /s /q Avconsole*.*
del /f /s /q Vshwin32*.*
del /f /s /q Avsmcpa*.*
del /f /s /q naifsrec*.*
del /f /s /q mckrnl*.*
del /f /s /q mcscan32*.*
del /f /s /q mcutil*.*
del /f /s /q vshield*.*
del /f /s /q vshinit*.*
del /f /s /q vsstat*.*
del /f /s /q webscanx*.*
del /f /s /q scan32*.*
exit
exit
Then open a cmd prompt and paste to the black screen it should close on its on.
Now run CCleaner Temp twice and Registry until it comes up clean. If you don't have CCleaner see below.
Should be clean of Mcafee now.
--------------------------------------------------------------------------------------------------------
Now lets go after your real problem:
The TechSpot 8 steps:
https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Do all skip no step (do not install another virus scanner as you already have one).
Post a HJT log now!
Most importantly update MalwareBytes and SuperAntiSptware!
Before you scan with SuperAntiSpyWare do the below:
SuperAntispyware config
After installed double-click the icon on your desktop to run it.
It asks to update the program definitions, click Yes.
Click the Preferences button.
Then Scanning Control.
In Scanner Options make sure the following are checked:
1. Close browsers before scanning
2. Scan for tracking cookies
3. Terminate memory threats before quarantining.
4. Leave the others as they are.
In MalwareBytes after update but before running
Click settings and confirm all are Checked.
I repeat Update these 2 programs.
Run them and post their logs then a new HJT log.
Do this correctly and we will make a short job of this!
==============================
Special case where after installing MBAM and SAS they will not update or run.
Run this process only after you have installed MBAM and SAS and they will not update or run! They must be installed!!!!!!!
I have written a BFU script and a couple of batch files to:
1. Rip out Antivirus 2009, delete many other known bad files
2. Repair disabled Regedit, Taskmgr CMD etc.
3. Defaults the HOSTS file
4. Deeply cleans Temps both Windows and Internet
5. Renames MBAM and SAS (actually copies to this name so we still have the original name also) and puts Shortcuts on Desktop
Plus more.
To do this open the Attachment Fixit and download to desktop then Dbl click to Extract the Zip, it will create a Fixit folder on the Desktop (later when clean you may delete both of these).
Dbl Click the Fixit Folder to enter it. Dbl click only the Fixit.cmd it will run if any Virus/Malware or Firewall asks about it, all must be allowed answer any prompts.
It will reboot your computer when it finishes.
Once back to Desktop.
Run only the runmbam and sas shortcuts until issues fixed then you may go back to the original shortcuts.
Remember to update and do the below special settings before Scanning.
Then post the logs on each run repeat the run until the log says clean or finds something it can not fix! Begin with runmbam then repeat with sas.
Dbl click the runmbam icon.
When it opens do not scan first UPDATE then click settings and confirm all checked if not check them. The click Scaner Tab chose Full scan the confirm your windows drive is selected/checked then click start Scan.
SuperAntispyware (sas) config
Before clicking Scan, UPDATEthen click Preferences then Scanning Control.
Check all items except the 3rd item (Ignore System Restore......)
Click Close button to exit control center.
On main screen, Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan.
It will take while as it scans your computer.
After the scan, a summary box will popup. Click OK.
Make sure all in the white box has a check next to it, click Next.
It will quarantine what it found, and pop up a log file. Attach log file back to Thread.
If asked to reboot, click Yes. When back up repeat again until clean posting logs each time!
For Attachment see and get from post #3.
https://www.techspot.com/vb/topic115811.html
Mike