Re: Wierd... McAfee Antivirus' On-Access Scan gets disabled by itself

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 07/14/05


Date: Thu, 14 Jul 2005 10:13:06 -0400

From: "AK" <danrop1@gmail.com>

| Hi all,
|
| I'm using McAfee's VirusScan Enterprise 7.1.0. I'm experiencing this
| wierd problem (probably since today morning) with the On-Access Scan
| feature: no matter how many times I enable it, it gets disabled by
| itself after a few seconds.
|
| Any ideas what's going on and what I can do about it? Any kind of help
| will be appreciated.
|
| Cheers,
|
| AK

As another indicated, you may be infected with a virus that disables the the McAfee
software. However, Stinger only targets ~53 infectors and their variants. A small subset
of the possible infectors that can possibly cause this kind of problem.

The following tool will simplfy the task using three different "On Demand" scanners to
find/remove the possible culprit. Instead of 53 infectors and variants, you will be
scanning with signatures in the range of 90,000 ~ 135,000

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
(.LNK) file, this PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
remove
viruses and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE and/or FTP.EXE to go
through your FireWall to allow them to download the needed AV vendor related files.

* * * Please report back your results * * *

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Stinger updates
    ... Stinger is NOT a good backup for AVG becuase it only targets ~53 infectors, ... None of the three scanners need to pre-exist on your PC as the utility will download the ... This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Need some help with Alcan Worm... Please help!
    ... will make the PPPoE connection. ... a utility that provides 3 different anti virus scanners from; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ...
    (alt.comp.anti-virus)
  • Re: spoolsv32.exe
    ... The submission will then be tested against 18 different AV vendor's scanners. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... Execute; Multi_AV.exe ...
    (microsoft.public.security.virus)
  • Re: help! Internet Explorer ignoring my HOSTS file
    ... correct any alterations and the utility provides AV scanners from; ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... You can choose to go to each menu item and just download the needed files or you can ... It is suggested to run the scanners in both Safe Mode and Normal Mode. ...
    (microsoft.public.security.virus)
  • Re: Malware seen during scan but security suite not catching it.
    ... | Have you tried Windows Live OneCare (a free malware scan from Microsoft)? ... MS OneCare is one of the worst anti virus scanners in the anti virus market. ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (microsoft.public.windowsxp.security_admin)