BleepingComputer.com: Mcafee Update Won't Install If Spybot S&d Present!

Jump to content

  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Mcafee Update Won't Install If Spybot S&d Present! McAfee also doesn't like Ad-Aware or Spyware Blaster

#16 User is offline   Galadriel 

  • Bleepin Elf
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 2,715
  • Joined: 11-November 04
  • Gender:Female
  • Location:Missouri, USA

Posted 23 July 2008 - 12:05 AM

The path is listed in bold (bold added by me).

Quote

7/22/2008 5:50:24 PM Deleted HOME-Y1CKB12FY3\Owner SpybotSD.exe C:\WINDOWS\Belt.ini IPInsight (Potentially Unwanted Program)
7/22/2008 5:50:53 PM Deleted HOME-Y1CKB12FY3\Owner SpybotSD.exe C:\WINDOWS\QuickBrowserNew.exe Adware-180SA (Adware)


So basically yes, Spybot was most likely accessing the files during a scan or something and it triggered McAfee. That's not unusual. I suppose that's another reason they don't like other scanners to be installed along side their app.
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#17 User is offline   tos226 

  • BleepIN--BleepOUT
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,423
  • Joined: 21-October 04
  • Gender:Female
  • Location:LocalHost

Posted 23 July 2008 - 07:10 PM

View Postrainbow_warrior, on Jul 22 2008, 11:55 PM, said:

I don't notice a conflict with the teatimer so far, but when I ran SpybotSD 1.6, McAfee deleted two files of Spybot: Belt.ini and QuickBrowseNew.exe. I didn't disable the antivirus until Spybot was almost done and I noticed the deletions.

Belt,ini is not in my Spybot.
QuickBrowserNew.exe is crap put out by Adware.
If McAfee is trying to kill at the same time as Spybot, you've got trouble.

I've used McAfee enterprise and there were no conflicts with Spybot on the desktop. As far as I recall the firewall is part of the enterprise suite.

How about you run a-squared scan. It might show that these are traces of malware already removed at this point.

I have this entry in my hosts file. Clearly malware or it would not be in Hosts.
127.0.0.1 www.top-banners.com #[Adware.QuickBrowser][Win32/Actux.A]
Adware scumbags named it so that to many people it looks like Ad-Aware, a legitimate Lavasoft application.

Hijack This log at this point does make sense.

Quote

Another point is that when I disabled the antivirus, Windows Security didn't warn me. An override was in effect, as discovered by Spybot. I think it must be a separate override from the one which keeps Windows from telling you it doesn't recognize a firewall when you are using Zone Alarm, which is also detected by Spybot.

Windows Security is notorious for being blind and recognizes only the applications which is chooses. That said, Zone Alarm is normally detected. I don't know about McAfee.


You have to clean up the conflicts. Too many security products here.

This post has been edited by tos226: 23 July 2008 - 07:12 PM


#18 User is offline   tos226 

  • BleepIN--BleepOUT
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,423
  • Joined: 21-October 04
  • Gender:Female
  • Location:LocalHost

Posted 23 July 2008 - 07:20 PM

View PostGaladriel, on Jul 9 2008, 02:34 PM, said:

Edit - Here's the list of incompatible apps as of last year...

http://service.mcafee.com/FAQDocument.aspx...064&lc=1033

Are they SERIOUS???? No one can have Acronis? No Backup software?????!!!? UH? :huh:

Also of note is that HijackThis and DSS aren't listed.... methinks it's because McCrappy isn't aware they exist.... :cool:

:thumbsup: :flowers: Unbelievable, isn't it. A image/backup incompatible :trumpet: :inlove:
I actually don't think they're serious, just LAZY. It might be that McA scans every darn file while the image is being made and slow things down. A simple solution might be to unplug the internet cable, turn off big-M, and do the backup. But that might be too much work for the techs to explain :) :woot:

#19 User is offline   Galadriel 

  • Bleepin Elf
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 2,715
  • Joined: 11-November 04
  • Gender:Female
  • Location:Missouri, USA

Posted 23 July 2008 - 08:35 PM

View Posttos226, on Jul 23 2008, 07:10 PM, said:

QuickBrowserNew.exe is crap put out by Adware.
If McAfee is trying to kill at the same time as Spybot, you've got trouble.
<...snip...>
I have this entry in my hosts file. Clearly malware or it would not be in Hosts.
127.0.0.1 www.top-banners.com #[Adware.QuickBrowser][Win32/Actux.A]
Adware scumbags named it so that to many people it looks like Ad-Aware, a legitimate Lavasoft application.


Actually the name isn't Adware.QuickBrowser, that's just the name the anti-virus/malware companies gave it, to categorize it. It remains QuickBrowser. The prefixed Adware part of the name is to indicate it's not a backdoor, or a trojan, it's an ad ware. Its purpose is to present ads. And this has absolutely nothing to do with Lavasoft whatsoever.

Just wanted to clarify this.
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#20 User is offline   tos226 

  • BleepIN--BleepOUT
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,423
  • Joined: 21-October 04
  • Gender:Female
  • Location:LocalHost

Posted 26 July 2008 - 07:24 PM

That is the clarification I've needed for a looooooooooooooooooong time, and never asked. Thanks!
Just learning every day :thumbsup:

#21 User is offline   Galadriel 

  • Bleepin Elf
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 2,715
  • Joined: 11-November 04
  • Gender:Female
  • Location:Missouri, USA

Posted 26 July 2008 - 08:02 PM

View Posttos226, on Jul 26 2008, 07:24 PM, said:

That is the clarification I've needed for a looooooooooooooooooong time, and never asked. Thanks!
Just learning every day :flowers:


Glad to have been of service. Hope it serves as a lesson... no such thing as a dumb question. :thumbsup:
I cemna prestar aen. Han mathon ne nen. Han mathon ne chae. A han noston ne 'wilith. - Galadriel
'The avatar is changed; I can feel it in the water, I can feel it in the earth, I can smell it in the air.'

Phear teh ceiling cat, for he is roofkittehd! - Basement Cat

I'm a Bleeping Folder, are you? - Join BC in the fight against diseases - Click here
Become a BleepingComputer fan: Facebook

#22 User is offline   rainbow_warrior 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 87
  • Joined: 24-October 06
  • Location:Newark, Delaware

Posted 28 July 2008 - 12:26 PM

On this computer I have now reinstalled Avast! Home and the latest versions of Spybot S&D 1.6, AdAware 2008, Malwarebytes Antimalware, and SuperAntiSpyware, while removing McAfee Enterprise (firewall not included--UD version) and running the McAfee product remover. I am having more trouble reinstalling Zone Alarm. The Downloads box shows the download of zlsSetup_70_483_000_en.exe as done (44.2 MB). Clicking on on the file on the desktop produces a message that the file is not a valid Win32 application. Clicking ``open'' in the download box instead produces a message that an external application is required--and gives the file on the desktop as the external application. Clicking on launch, nothing happens.

Should I assume the download was corrupted and clear space on a flash drive to download it again, or is there another explanation?

I believe the SuperAntiSpyware free version doesn't do anything in the background. (Am I correct?) Therefore I have disabled it in the Spybot startup list. There is also a winlogon dll in the list which resets whenever SAS runs or updates. What is the purpose of this program, and does it delay startup. I know the SAS main program takes a significant time to start. Also, there is aawservice which shows up in the task manager but not the Spybot startup list. If it is disabled in the Windows services manager, it will not restart when AdAware starts, and AdAware will not function. What is the purpose of having this program run all the time. By the way, AdAware doesn't hang up any more at the end of a complete scan; however, after using a flash drive to install from the latest download of the AdAware install progrqam, the AdAware dowload manager immediately downloaded a different version of AdAware--about 20 MB judging from the connection window--and installed that version instead, this time via dial-up. AdAware never tells you how big an update will be, and no longer shows a bar to indicate the percent downloaded. I assume they also download several programs that only work if you buy the package.

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users