McAfee Virus scan problem .dat file updates - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 12-08-2004, 02:02 AM   #1 (permalink)
True Techie
 
Join Date: Nov 2004
Posts: 163
Default McAfee Virus scan problem .dat file updates

Everytime I try to update my virus definition files McAfee Security Center opens Internet explorer and immediately after Internet explorer says there is an error and must be terminated. It happens everytime, and I have tried it A LOT of times. Also, my IE will have the same problem sometimes when I click on a link and it tries to open a new window instead of just browsing in the same window. How can I fix this? Also, is there a different way to update my virus .dat files?
__________________

__________________
Dell XPS 420
Core 2 Quad Processor Q9300 (2.50GHz 1333FSB) with 6MB cache
4GB DDR2 SDRAM at 667MHz
256MB Radeon ATI HD 2600 XT
Western Digital 7200 rpm 500GB SATA HDD w/ 16MB DataBurst Cache
Sound Blaster X-Fi Xtreme Gamer
Dell 2408wfp LCD
6X Blu-ray and 16X DVD+/-RW
Altec-Lansing THX certified 5.1 ADA995 Dolby Digital Speakers
Vista Home Premium
fifreak3 is offline  
Old 12-08-2004, 03:58 AM   #2 (permalink)
Super Techie
 
Join Date: Sep 2004
Posts: 371
Default

get someone to copy the latest .dat for you.

the IE problem sounds like a virus

try using a different browser
__________________

IAM_7154 is offline  
Old 12-08-2004, 04:07 AM   #3 (permalink)
Ultra Techie
 
Join Date: Jun 2004
Posts: 973
Send a message via Yahoo to intercodes
Default

fifreak3,

Okay, iam afraid a lot of bad programs are running in your system.. some virii/trojan disrupts your AV programs and firewall. Try running an online virus scan from Trend. Also check with 'hijackthis' and post a log in here.
intercodes is offline  
Old 12-08-2004, 05:28 AM   #4 (permalink)
True Techie
 
Join Date: Nov 2004
Posts: 163
Default

Here is my hijackthis log:

Logfile of HijackThis v1.97.7
Scan saved at 2:26:31 AM, on 12/8/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunesHelper.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\System32\wisptis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\SCOTTT~1\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\KXIB416J\HijackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mail.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=489
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.makemesearch.com/?said=489
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R3 - URLSearchHook: (no name) - _{87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csea rchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Scott Taylor\Application Data\Mozilla\Profiles\default\pj5gplyw.slt\prefs.j s)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] C:\Program Files\McAfee.com\MPS\mscifapp.exe /embedding
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunesHelper.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] /L:ENG
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [Tsa2] C:\PROGRA~1\COMMON~1\tsa\tsm2.exe
O4 - HKLM\..\RunOnce: [Regsister WScript] wscript -regserver
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: ATI TV (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: MoneySide (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O9 - Extra button: WeatherBug (HKCU)
O15 - Trusted Zone: *.musicmatch.com
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeup...ntent/opuc.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1408.g.akamai.net/7/1408/995...TunesSetup.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/...4/mcinsctl.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1...datePortal.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.co...885.0859259259
O16 - DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} (GDIChk Object) - http://www.microsoft.com/security/co...I/0/GDIChk.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/...21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {FDDCE9FF-1FC6-413C-80B1-37B101FDA1D4} - http://download.buddylinks.net/ShellInstaller.cab
__________________
Dell XPS 420
Core 2 Quad Processor Q9300 (2.50GHz 1333FSB) with 6MB cache
4GB DDR2 SDRAM at 667MHz
256MB Radeon ATI HD 2600 XT
Western Digital 7200 rpm 500GB SATA HDD w/ 16MB DataBurst Cache
Sound Blaster X-Fi Xtreme Gamer
Dell 2408wfp LCD
6X Blu-ray and 16X DVD+/-RW
Altec-Lansing THX certified 5.1 ADA995 Dolby Digital Speakers
Vista Home Premium
fifreak3 is offline  
Old 12-08-2004, 05:47 AM   #5 (permalink)
Ultra Techie
 
Join Date: Jun 2004
Posts: 973
Send a message via Yahoo to intercodes
Default

fifreak3,

Fix these stuff,

C:\PROGRA~1\COMMON~1\tsa\tsm2.exe
c:\program files\180solutions\sais.exe
C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
C:\Program Files\Microsoft Money\System\mnyside.dll

Did you try trend? and download spybot and adaware, install, update and scan your computer with them.
intercodes is offline  
Old 12-08-2004, 03:28 PM   #6 (permalink)
True Techie
 
Join Date: Nov 2004
Posts: 163
Default

Yes, I tried trend. It didn't find anything. I have ad-aware and spybot and I run them at least once a day. How am I supposed to fix those extensions, should I just delete them or what?
__________________
Dell XPS 420
Core 2 Quad Processor Q9300 (2.50GHz 1333FSB) with 6MB cache
4GB DDR2 SDRAM at 667MHz
256MB Radeon ATI HD 2600 XT
Western Digital 7200 rpm 500GB SATA HDD w/ 16MB DataBurst Cache
Sound Blaster X-Fi Xtreme Gamer
Dell 2408wfp LCD
6X Blu-ray and 16X DVD+/-RW
Altec-Lansing THX certified 5.1 ADA995 Dolby Digital Speakers
Vista Home Premium
fifreak3 is offline  
Old 12-09-2004, 12:08 AM   #7 (permalink)
Ultra Techie
 
Join Date: Jun 2004
Posts: 973
Send a message via Yahoo to intercodes
Default

fifreak3,

Yeah, delete them or use the hijacklog, and select these entries and fix them
intercodes is offline  
Old 12-09-2004, 01:22 AM   #8 (permalink)
True Techie
 
Join Date: Nov 2004
Posts: 163
Default

Thanks a lot intercodes, it will update my antivirus definitions now. Is there anything that I can do to ensure that this problem doesn't happen again?
__________________
Dell XPS 420
Core 2 Quad Processor Q9300 (2.50GHz 1333FSB) with 6MB cache
4GB DDR2 SDRAM at 667MHz
256MB Radeon ATI HD 2600 XT
Western Digital 7200 rpm 500GB SATA HDD w/ 16MB DataBurst Cache
Sound Blaster X-Fi Xtreme Gamer
Dell 2408wfp LCD
6X Blu-ray and 16X DVD+/-RW
Altec-Lansing THX certified 5.1 ADA995 Dolby Digital Speakers
Vista Home Premium
fifreak3 is offline  
Old 12-09-2004, 01:30 AM   #9 (permalink)
Ultra Techie
 
Join Date: Jun 2004
Posts: 973
Send a message via Yahoo to intercodes
Default

fifreak3,

You just gotta stay protected. Then it doesnt mean you have to download and run all the protection tools. It will screw your system for sure. LIke running 3 AV's or somethin like that.

The Virus/Worm forum in the main page of tech-forums has some excellent instructions compiled by some of the mods. Check those links. . .

Personally, i think you should have zonealarm,avast,spybot,adaware,spysweeper. That's it i guess. Update them and run them regularly. Its not necessary that you run them at the background always. Just AV is enuf to run at the background.

And, try to get Firefox or opera browser , IE has lot of security problems...
__________________

intercodes is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 11:29 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.