Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How to disable McAfee when mcshell.exe won't execute


  • Please log in to reply
14 replies to this topic

#1 tyromaniac

tyromaniac

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 10 January 2010 - 05:09 AM

The Malware I have prevents .exe's from executing. I can make them run by changing the .exe to .bat but I can't change McAfee's. Exit is not an option when I right-click on the Icon (mine's a red M in a white box). Is there another way or maybe a way to prevent it from starting in the first place? Uninstall doesn't work either for the same reason.

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 07:30 PM

Hello,

I see this question is related to your HJT topic here: http://www.bleepingcomputer.com/forums/t/282343/wscsvc32exe-virus/ Have you resolved the problem of deactivating McAfee?

I'm moving this topic to the AV forum for you.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:14 PM

Thanks for replying, Blossom. I thought my post had failed because I forgot to say "Mother, may I" or something.

I figured out a way-- right click the M -- select properties -- select find target -- rename mcshell.exe to mcshell.bat -- click on mcshell.bat.

Trouble is, then I can't put it back -- but eventually it resue anyway.

#4 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:15 PM

i meant "eventually it resumes anyway".

#5 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:25 PM

sorry, what is the "AV" forum?

#6 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 10:25 PM

The reason why your post didn't show is because you posted it in a mini-guides forum where topics must be approved before they can be seen. I'll see what I can find about disabling McAfee.

Orange Blossom :thumbsup:

Edit: AV forum is the AntiVirus, Firewall and Privacy Products and Protection Methods forum.

Edited by Orange Blossom, 13 January 2010 - 10:26 PM.

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#7 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:28 PM

Thanks, B--

--T

#8 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 10:39 PM

Have you tried this? I'm not entirely certain this is the most recent disabling information. ~ OB

To disable McAfee Virusscan:
Please navigate to the system tray on the bottom right hand corner and look for a Posted Image sign.
  • right-click it -> chose "Exit."
  • a popup will warn that protection will now be disabled. Click on "Yes" to disable the Antivirus guard.
You succesfully disabled the McAfee Guard.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#9 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:44 PM

yes, I've tried that--

"Exit" is not an option.

#10 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 10:49 PM

I have just found this as well:

Double-click the taskbar icon to open the Security Center
Click Advanced Menu (lower left)
Click Configure (left)
Click Computer & Files (upper left)
VirusScan can be disabled on the right.

Do the same via Internet & Network for Firewall Plus.


Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#11 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 10:53 PM

double clicking the icon calls mcshell.exe (my malware prevents .exe's from executing).

#12 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 10:57 PM

In that case, if you haven't already, I'd inform your HJT helper about your problem disabling McAfee so he can assist you in disabling it. Please be sure to let him know what you've done to try to disable it etc. and how to got it somewhat disabled at least. That will help him help you. Under the circumstances, we cannot assist you further in this forum.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#13 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 11:09 PM

maybe it would be helpful for you to re-read the third entry in this dialogue (starts: "I figured out a way...").

#14 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,948 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:40 PM

Posted 13 January 2010 - 11:22 PM

That's what I was referring to by "somewhat disabled".

~ OB
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#15 tyromaniac

tyromaniac
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:03:40 PM

Posted 13 January 2010 - 11:45 PM

...and how to got it somewhat disabled at least.

Orange Blossom :thumbsup:



sorry, i didn't exactly understand what you meant.

Thanks for all your efforts in this forum and thanks for your help.

--T




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users