Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Combofix Detects McAfee After Uninstallation

01 Dec 2013   #31
ICIT2LOL

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
 
 

It could possibly be that it is the very first scan it's done my Kaspersky does that but it certainly doesn't take that long but there again my machines are reasonably fast.


My System SpecsSystem Spec
.
01 Dec 2013   #32
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

[QUOTE=JOSHSKORN;2612414]
Quote   Quote: Originally Posted by ICit2lol View Post

As an update: 4 hours into the ESET scan, at 31%. I left the room and the screen went black (screen saver/power saver). Would that impact the scan? I moved the mouse around and had to log back in. The scan was still running. Can I leave this running all night? I might need to, and I believe the laptop is set to hibernate after a while of inactivity.
Yep! This would definitely impact the scan. Can you tell me what ESET has found at this point?
My System SpecsSystem Spec
02 Dec 2013   #33
JOSHSKORN

Windows 7 Ultimate 64-bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Can you tell me what ESET has found at this point?
ESET just finished. Weird how the last 65% went so fast. Here is what it found.
Quote:
C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe a variant of Win32/SpeedingUpMyPC application cleaned by deleting - quarantined
C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe a variant of Win32/Adware.SpeedingUpMyPC.C application cleaned by deleting - quarantined
C:\Users\Peggy\Downloads\youtube_halloween_embroidery.zip a variant of Win32/Kryptik.BDUM trojan deleted - quarantined
My System SpecsSystem Spec
.

02 Dec 2013   #34
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

That looks good ... now let's see what other 'adware' might be hiding.

Download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished...

This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
My System SpecsSystem Spec
15 Dec 2013   #35
JOSHSKORN

Windows 7 Ultimate 64-bit
 
 

I do apologize for not responding sooner. I've been busy with the holidays, myself, along with work. My issue still hasn't been resolved.

Quote   Quote: Originally Posted by Jacee View Post
That looks good ... now let's see what other 'adware' might be hiding.


Download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
I've done this before, as ICit2lol instructed me to do so here. When I initially ran the test, it took several hours. I ran it three times today and each time, it took under a minute, stopping with the message "Pending. Please uncheck items you don't want to remove." I've so far only done what I've quoted in your text. No cleaning, yet.

I also went through the registry and did a find of "McAfee", deleting several keys. A few of the keys were stubborn and would not delete, as I did not have permission to do so, even though I'm logged in as Administrator. I've even tried to change permissions on the key, with no luck. I will attempt to attach the screen shots in this post. If it does not allow me to, the McAfee-related registry keys I'm seeing are cfwids.sys and various LEGACY keys under root, all of them containing the word McAfee in a key.

Do I even need to worry about these keys? I was able to get a different AV installed and working properly (MSE), which really was my primary objective. I purchased Bitdefender a week ago just before the Black Friday special ended, but wanted to make sure something that was at least free would work, first.

Attached are log files from today from AdwCleaner and screen shots from my registry.


Attached Thumbnails
Combofix Detects McAfee After Uninstallation-cfwidsdotsys.jpg   Combofix Detects McAfee After Uninstallation-legacycfwids0000.jpg   Combofix Detects McAfee After Uninstallation-legacymfeavfk02000.jpg   Combofix Detects McAfee After Uninstallation-legacymfeavfk03000.jpg   Combofix Detects McAfee After Uninstallation-legacymfefirek010000.jpg  

Combofix Detects McAfee After Uninstallation-legacymfertdet0000.jpg  
Attached Files
File Type: txt AdwCleaner[R1].txt (1.3 KB, 1 views)
File Type: txt AdwCleaner[R2].txt (1.4 KB, 1 views)
File Type: txt AdwCleaner[R3].txt (1.4 KB, 1 views)
My System SpecsSystem Spec
16 Dec 2013   #36
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Run AdwCleaner again .... but This time click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
My System SpecsSystem Spec
22 Dec 2013   #37
JOSHSKORN

Windows 7 Ultimate 64-bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Run AdwCleaner again .... but This time click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
I am attaching two text files, one from each computer. The first is the HP G72-262NR that I was originally trying to do this to. The second is an HP TouchSmart600, which I found for some reason much easier to work with.


Attached Files
File Type: txt AdwCleaner[S2]-G72-262NR-Laptop.txt (1.4 KB, 1 views)
File Type: txt AdwCleaner[S1]-HPTouchSmart600.txt (897 Bytes, 1 views)
My System SpecsSystem Spec
Reply

 Combofix Detects McAfee After Uninstallation




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Do not use Combofix on your own!!
This is a 'specialized/heavy duty tool' and it can render your computer as a doorstop if not used without trained supervision. :cry: Please don't download and run it unless you are asked to do so by a "certified" malware instuctor who has gone through the use and special training of this...
System Security
John McAfee hates McAfee !!!
Guys Thought this would bring in some much needed laugh :D bKgf5PaBzyg p.s let me know if this isn't appropriate .. will delete the post !!
Chillout Room
Combofix infected
Users who downloaded combofix yesterday,please check for SALITY infection Information about ComboFix being infected and what you should do
System Security
cannot open combofix.exe
Hey everyone, I have one computer running XP Home x86, and I am certain it has a virus. I had ComboFix in a folder of utilities I downloaded, but when I tried to run ComboFix.exe, nothing happened. I know the file is not corrupted, because when I run it on my Windows 7 machine, it will open up...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App