Itunes stops McAfee Virus Scan
I have isolated a file in Itunes and it is stopping my virus scan from proceeding and locks up my brower (actually locks up my entire system). I am using McAfee Virus Scan, have updated it as required.
The file that seems to be stopping the process is:
c:/program files\itunes.resources\fr.lproj\Placards.nib\objects.xib
If I let the virus scan run, it functions until it gets to this file then everything just comes to a standstill.
I have even run the online McAfee Virus Scan and it too gets to this file and stalls and the system is locked up.
Anyone have any idea?
Thanks for your help.
Jeff
Try posting in the iTunes Windows Discussions.
This is an issue with McAfee and not iTunes.
MJ
Similar Messages
-
Using Windows GPO to automatically run McAfee Virus Scan
Is it possible to write a GPO to run Virus scan automatically?
Hi Scot Triplett,
Based on my understanding, you would like to automatically run McAfee Virus Scan via GPO. Right?
You can create a scheduled task to run a batch file which is set to run McAfee Virus Scan. As for how to configure a scheduled task, please refer to the following article:
Configure a Scheduled Task Item
As for the batch file, please refer to the following article:
How to run a VirusScan Enterprise On-Demand Scan task from a command prompt
https://kc.mcafee.com/corporate/index?page=content&id=KB60684
Note:
Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
Lany Zhang -
Automating McAfee Virus Scan Exclusions
So i wanted to share with the community a function I wrote to assist in the automating of virus scan exclusions. In Windows 2008 R2, we were able to import a reg file with the exclusion so it wasn't a big deal. However, we are using 2012 R1/R2
with our Lync 2013 deployment and this option is no longer available to me. The team in charge of the central AV management servers (whatever it is called) are not offering to assist in loading a policy in their management server for our Lync deployment.
Inserting a ton of exclusions manually for over hundred servers (that is just a single customer) isn't something I would be willing to do manually, not to mention things would get missed. I made this relatively generic so it should work (I think)
for other people. It sends key strokes to the OS to accomplish as I couldn't find another way. I haven't found anyone who has a solution so I wrote this one. I could be much much more involved in identifying which roles or what the server
is (SQL, DC, SharePoint, etc), but I am not sure I want to spend that kind of time. Maybe in the future.
Note: My "One Access Scanner" is listed fourth in the Virus Scan Console. If yours is not, this will need some tweaking. This isn't really an appropriate solution (I just hack this stuff together), but it works.
Things you need to know.
Single file or single directory exclusions go into the array $Procs
File Types go into $FileTypes
Any directory that you want the sub directory to be excluded as well goes into $ProcIncludingSubs
Function SetAVExclusions ()
$ErrorActionPreference = "silentlycontinue"
Function GetActiveWindows ()
# sample script to query winapi GetForegroundWindow and GetWindowText
Add-Type @"
// **** every time you make a change to this class, you have to restart powershell session or change class name to new name ****
using System.Runtime.InteropServices;
using System.Text;
public class Win51
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindow(string className, string windowName);
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindowEx(System.IntPtr parentHandle, System.IntPtr childAfter, string className, string windowTitle);
[DllImport("user32.dll")]
static extern System.IntPtr GetForegroundWindow();
[DllImport("user32.dll")]
static extern int GetWindowText(System.IntPtr hWnd, System.Text.StringBuilder text, int count);
[DllImport("user32.dll")]
static extern System.IntPtr GetWindow(System.IntPtr hWnd, uint uCmd);
[DllImport("user32.dll")]
static extern bool SetForegroundWindow(System.IntPtr hWnd);
enum UCmd
GW_CHILD = 5,
GW_ENABLEDPOPUP = 6,
GW_HWNDFIRST = 0,
GW_HWNDLAST = 1,
GW_HWNDNEXT = 2,
GW_HWNDPREV = 3,
GW_OWNER = 4
public string getForegroundWindowTitle()
const int nChars = 256;
System.Text.StringBuilder Buff = new System.Text.StringBuilder(nChars);
System.IntPtr handle = getForegroundWindow();
if (GetWindowText(handle, Buff, nChars) > 0)
return Buff.ToString();
return null;
// returns null / 0 if find window fails
public System.IntPtr findWindow(System.IntPtr hWndParent,System.IntPtr hWndChildAfter, string lpszClass, string lpszWindow)
System.IntPtr handle = FindWindowEx(hWndParent,hWndChildAfter, lpszClass, lpszWindow);
// System.IntPtr handle = FindWindow(lpszClass, lpszWindow);
return handle;
public System.IntPtr getForegroundWindow()
System.IntPtr handle = GetForegroundWindow();
return handle;
public bool setForegroundWindow(System.IntPtr hWnd)
return setForegroundWindow(hWnd);
public System.IntPtr getWindow(System.IntPtr hWnd, uint uCmd)
return GetWindow(hWnd,uCmd);
$winObj = New-Object Win51
$text = $winObj.getForegroundWindowTitle();
return $text
} #End Function GetActiveWindows
$Procs = @("{%}Systemroot{%}\system32\GroupPolicy\registry.pol",` # Corporate Defaults
"{%}allusersprofile{%}\NTUser.pol",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb.chk",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00001.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00002.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res1.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res2.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Tmp.edb ",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\datastore.edb",` #KB822158
"{%}windir{%}\security\*.chk",`
"{%}windir{%}\security\*.edb",`
"{%}windir{%}\security\*.log",`
"{%}windir{%}\security\*.sdb",`
"{%}windir{%}\security\database\Security.sdb",`
"C:\quarantine",`
"{%}systemroot{%}\System32\GroupPolicy\Machine\Registry.pol", ` #KB822158
"{%}systemroot{%}\System32\GroupPolicy\User\Registry.pol", ` #KB822158
"{%}windir{%}\security\database\*.edb",` #KB822158
"{%}windir{%}\security\database\*.sdb",` #KB822158
"{%}windir{%}\security\database\*.log",` #KB822158
"{%}windir{%}\security\database\*.chk",` #KB822158
"{%}windir{%}\security\database\*.jrs",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.jrs",` #KB822158
"{%}windir{%}\Ntds\Ntds.dit",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Ntds.pat",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\ED*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Res*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"e:\Ntds\Ntds.dit",` #KB822158 - AD DCs
"e:\Ntds\Ntds.pat",` #KB822158 - AD DCs
"e:\Ntds\ED*.log",` #KB822158 - AD DCs
"e:\Ntds\Res*.log",` #KB822158 - AD DCs
"e:\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\sys\edb.chk",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\ntfrs.jdb",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\log\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"e:\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.dns",` #KB822158 - AD DCs
"ABServer.exe", ` # Begin Lync 2013 Exclusions
"AcpMcuSvc.exe", `
"ASMCUSvc.exe", `
"AVMCUSvc.exe", `
"ChannelService.exe", `
"ClsAgent.exe", `
"ComplianceService.exe", `
"DataMCUSvc.exe", `
"DataProxy.exe", `
"FileTransferAgent.exe", `
"IMMCUSvc.exe", `
"LysSvc.exe", `
"MasterReplicatorAgent.exe", `
"MediaRelaySvc.exe", `
"MediationServerSvc.exe", `
"MRASSvc.exe", `
"OcsAppServerHost.exe", `
"ReplicaReplicatorAgent.exe", `
"ReplicationApp.exe", `
"RtcHost.exe", `
"RTCSrv.exe", `
"XmppProxy.exe", `
"XmppTGW.exe", `
"Fabric.exe", `
"FabricDCA.exe", `
"FabricHost.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.LYNCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.RTCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}systemroot{%}\System32\LogFiles", `
"{%}systemroot{%}\SysWow64\LogFiles", `
"{%}programfiles{%}\Microsoft Lync Server 2013", `
"{%}programfiles{%}\commonfiles\Microsoft Lync Server 2013", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Ext", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Ext", `
"{%}systemroot{%}\Windows\Microsoft.NET\Framework64\v4.0.30319\Config", `
"{%}ProgramFiles{%}\Microsoft System Center 2012 R2\Server\Health Service State",` #Begin SCOM 2012 R2 Exclusions
"{%}ProgramFiles{%}\System Center Operations Manager\Gateway\Health Service State",`
"{%}ProgramFiles{%}\Microsoft Monitoring Agent\Agent\Health Service State",`
"CShost.exe","Microsoft.Mom.Sdk.ServiceHost.exe","HealthService.exe","MonitoringHost.exe",`
"e:\WAC_Server_Cache","e:\WAC_Server_Logs","e:\WAC_Server_Rendering_Cache"` # WC Server storage locations
# This section will exlude file types
$FileTypes = @("MDF","LDF")
# This section will include sub folders in the exclusion. Path must end in a \
$ProcIncludingSubs = @("{%}programfiles{%}\Microsoft Lync Server 2013\", `
"{%}systemroot{%}\RtcReplicaRoot\", `
"{%}SystemDrive{%}\RtcReplicaRoot\", `
"E:\RtcReplicaRoot\xds-replica\", `
"{%}systemroot{%}\assembly\", `
"{%}systemroot{%}\ServiceProfiles\", `
"{%}systemroot{%}\Windows\Microsoft.NET\", `
"{%}systemroot{%}\system32\inetsrv\", `
"{%}systemroot{%}\system32\LogFiles\", `
"{%}systemroot{%}\SysWOW64\inetsrv\", `
"{%}systemroot{%}\SysWOW64\LogFiles\", `
"{%}systemroot{%}\System32\Dns\Boot\",` #KB822158 - AD DCs
"{%}programfiles{%}\Common Files\Microsoft Lync Server 2013\Watcher Node\" `
$TotalExclusionsinFunction = $Procs.Length + $FileTypes.Length + $ProcIncludingSubs.Length
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinFunction -eq $TotalExclusionsinRegistry)
Write-Host ""
Write-Host "`tChecking Anti-Virus Exclusions in the Registry"
Write-Host ""
Write-Host "`t`tStatus : " -ForegroundColor White -NoNewline
start-sleep -m 500
Write-Host "Count Matches" -ForegroundColor Yellow
Write-Host ""
Write-Host "`t`t`tThe number of exclusions in this script match the number of exclusions in the registry" -ForegroundColor Yellow
Start-Sleep 5
return $true
[void] [System.Reflection.Assembly]::LoadWithPartialName("'Microsoft.VisualBasic")
[void] [System.Reflection.Assembly]::LoadWithPartialName("'System.Windows.Forms")
Write-Host "`tDisabling Artemis (Hueristic Scanning)" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -ErrorVariable "AOS" -Force
If ($AOS)
Write-Host "`tForce Close Failed - Taking Extrodinary Actions (~20 Secs)" -ForegroundColor Yellow
If ($ActiveApp -eq "On-Access Scan Properties")
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
$ActiveApp = GetActiveWindows
$Count = 0
Write-Host "`t`t`t[" -ForegroundColor Yellow -NoNewline
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
Start-Sleep 1
$Count++
$ActiveApp = GetActiveWindows
Write-Host "*" -ForegroundColor Green -NoNewline
Write-Host "]" -ForegroundColor Yellow
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If ($VConsole1 -ne $null)
Write-Host "`t`tIssue Closing the App"
Pause
Else
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Setting Hueristic Settings to disabled
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{UP}","{UP}","{UP}","{UP}","{UP}","{UP}","{TAB}","{TAB}","{TAB}","{ENTER}"
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Start Exclusions
Write-Host "`tStarting VirusScan Exclusions" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -Force
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Removing all On Access Scanner Exclusions
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{TAB}","{DOWN}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","%E"
#[System.Windows.Forms.SendKeys]::SendWait("{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{DOWN}{TAB}{TAB}{TAB}{RIGHT}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{RIGHT}%E")
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Removing exclusions 150 times.
Write-Host "`t`tRemoving existing virus exlcusions (up to 150)"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep 5
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to get Focus on Set Exclusions"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "Set Exclusions") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to grab focus of [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
For ($i=1;$i -lt 150; $i++)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%R")
start-sleep 1
# Processing the different Directories and process
ForEach ($y in $ProcIncludingSubs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{TAB}{ADD}{ENTER}")
Start-Sleep -m 200
ForEach ($y in $Procs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{ENTER}")
Start-Sleep -m 200
ForEach ($y in $FileTypes)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A%F{TAB}$y{ENTER}")
Start-Sleep -m 200
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}{TAB}{TAB}{TAB}{ENTER}")
start-sleep 1
Stop-Process -Processname shcfg32 -Force | Out-Null
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinRegistry -ne $TotalExclusionsinFunction)
Write-Host "`t`tUpdate appears to have failed" -ForegroundColor Yellow
Start-Sleep 1
Return $False
Return $True
} #End FunctionSo i wanted to share with the community a function I wrote to assist in the automating of virus scan exclusions. In Windows 2008 R2, we were able to import a reg file with the exclusion so it wasn't a big deal. However, we are using 2012 R1/R2
with our Lync 2013 deployment and this option is no longer available to me. The team in charge of the central AV management servers (whatever it is called) are not offering to assist in loading a policy in their management server for our Lync deployment.
Inserting a ton of exclusions manually for over hundred servers (that is just a single customer) isn't something I would be willing to do manually, not to mention things would get missed. I made this relatively generic so it should work (I think)
for other people. It sends key strokes to the OS to accomplish as I couldn't find another way. I haven't found anyone who has a solution so I wrote this one. I could be much much more involved in identifying which roles or what the server
is (SQL, DC, SharePoint, etc), but I am not sure I want to spend that kind of time. Maybe in the future.
Note: My "One Access Scanner" is listed fourth in the Virus Scan Console. If yours is not, this will need some tweaking. This isn't really an appropriate solution (I just hack this stuff together), but it works.
Things you need to know.
Single file or single directory exclusions go into the array $Procs
File Types go into $FileTypes
Any directory that you want the sub directory to be excluded as well goes into $ProcIncludingSubs
Function SetAVExclusions ()
$ErrorActionPreference = "silentlycontinue"
Function GetActiveWindows ()
# sample script to query winapi GetForegroundWindow and GetWindowText
Add-Type @"
// **** every time you make a change to this class, you have to restart powershell session or change class name to new name ****
using System.Runtime.InteropServices;
using System.Text;
public class Win51
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindow(string className, string windowName);
[DllImport("user32.dll", SetLastError = true)]
static extern System.IntPtr FindWindowEx(System.IntPtr parentHandle, System.IntPtr childAfter, string className, string windowTitle);
[DllImport("user32.dll")]
static extern System.IntPtr GetForegroundWindow();
[DllImport("user32.dll")]
static extern int GetWindowText(System.IntPtr hWnd, System.Text.StringBuilder text, int count);
[DllImport("user32.dll")]
static extern System.IntPtr GetWindow(System.IntPtr hWnd, uint uCmd);
[DllImport("user32.dll")]
static extern bool SetForegroundWindow(System.IntPtr hWnd);
enum UCmd
GW_CHILD = 5,
GW_ENABLEDPOPUP = 6,
GW_HWNDFIRST = 0,
GW_HWNDLAST = 1,
GW_HWNDNEXT = 2,
GW_HWNDPREV = 3,
GW_OWNER = 4
public string getForegroundWindowTitle()
const int nChars = 256;
System.Text.StringBuilder Buff = new System.Text.StringBuilder(nChars);
System.IntPtr handle = getForegroundWindow();
if (GetWindowText(handle, Buff, nChars) > 0)
return Buff.ToString();
return null;
// returns null / 0 if find window fails
public System.IntPtr findWindow(System.IntPtr hWndParent,System.IntPtr hWndChildAfter, string lpszClass, string lpszWindow)
System.IntPtr handle = FindWindowEx(hWndParent,hWndChildAfter, lpszClass, lpszWindow);
// System.IntPtr handle = FindWindow(lpszClass, lpszWindow);
return handle;
public System.IntPtr getForegroundWindow()
System.IntPtr handle = GetForegroundWindow();
return handle;
public bool setForegroundWindow(System.IntPtr hWnd)
return setForegroundWindow(hWnd);
public System.IntPtr getWindow(System.IntPtr hWnd, uint uCmd)
return GetWindow(hWnd,uCmd);
$winObj = New-Object Win51
$text = $winObj.getForegroundWindowTitle();
return $text
} #End Function GetActiveWindows
$Procs = @("{%}Systemroot{%}\system32\GroupPolicy\registry.pol",` # Corporate Defaults
"{%}allusersprofile{%}\NTUser.pol",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb.chk",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00001.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edbres00002.jrs",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res1.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Res2.log",`
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Tmp.edb ",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\datastore.edb",` #KB822158
"{%}windir{%}\security\*.chk",`
"{%}windir{%}\security\*.edb",`
"{%}windir{%}\security\*.log",`
"{%}windir{%}\security\*.sdb",`
"{%}windir{%}\security\database\Security.sdb",`
"C:\quarantine",`
"{%}systemroot{%}\System32\GroupPolicy\Machine\Registry.pol", ` #KB822158
"{%}systemroot{%}\System32\GroupPolicy\User\Registry.pol", ` #KB822158
"{%}windir{%}\security\database\*.edb",` #KB822158
"{%}windir{%}\security\database\*.sdb",` #KB822158
"{%}windir{%}\security\database\*.log",` #KB822158
"{%}windir{%}\security\database\*.chk",` #KB822158
"{%}windir{%}\security\database\*.jrs",` #KB822158
"{%}windir{%}\SoftwareDistribution\Datastore\Logs\Edb*.jrs",` #KB822158
"{%}windir{%}\Ntds\Ntds.dit",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Ntds.pat",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\ED*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Res*.log",` #KB822158 - AD DCs
"{%}windir{%}\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"e:\Ntds\Ntds.dit",` #KB822158 - AD DCs
"e:\Ntds\Ntds.pat",` #KB822158 - AD DCs
"e:\Ntds\ED*.log",` #KB822158 - AD DCs
"e:\Ntds\Res*.log",` #KB822158 - AD DCs
"e:\Ntds\Edb*.jrs",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\sys\edb.chk",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\ntfrs.jdb",` #KB822158 - AD DCs
"{%}windir{%}\Ntfrs\jet\log\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"e:\Sysvol\Staging areas\Nntfrs_cmp*.*",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.log",` #KB822158 - AD DCs
"{%}systemroot{%}\System32\Dns\*.dns",` #KB822158 - AD DCs
"ABServer.exe", ` # Begin Lync 2013 Exclusions
"AcpMcuSvc.exe", `
"ASMCUSvc.exe", `
"AVMCUSvc.exe", `
"ChannelService.exe", `
"ClsAgent.exe", `
"ComplianceService.exe", `
"DataMCUSvc.exe", `
"DataProxy.exe", `
"FileTransferAgent.exe", `
"IMMCUSvc.exe", `
"LysSvc.exe", `
"MasterReplicatorAgent.exe", `
"MediaRelaySvc.exe", `
"MediationServerSvc.exe", `
"MRASSvc.exe", `
"OcsAppServerHost.exe", `
"ReplicaReplicatorAgent.exe", `
"ReplicationApp.exe", `
"RtcHost.exe", `
"RTCSrv.exe", `
"XmppProxy.exe", `
"XmppTGW.exe", `
"Fabric.exe", `
"FabricDCA.exe", `
"FabricHost.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\Bin\ReportingServicesService.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSAS11.MSSQLSERVER\OLAP\Bin\MSMDSrv.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.LYNCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}ProgramFiles{%}\Microsoft SQL Server\MSSQL11.RTCLOCAL\MSMQL\Binn\SQLServr.exe", `
"{%}systemroot{%}\System32\LogFiles", `
"{%}systemroot{%}\SysWow64\LogFiles", `
"{%}programfiles{%}\Microsoft Lync Server 2013", `
"{%}programfiles{%}\commonfiles\Microsoft Lync Server 2013", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Ext", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Mcx\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Int", `
"{%}ProgramFiles{%}\Microsoft Lync Server 2013\Web Components\Ucwa\Ext", `
"{%}systemroot{%}\Windows\Microsoft.NET\Framework64\v4.0.30319\Config", `
"{%}ProgramFiles{%}\Microsoft System Center 2012 R2\Server\Health Service State",` #Begin SCOM 2012 R2 Exclusions
"{%}ProgramFiles{%}\System Center Operations Manager\Gateway\Health Service State",`
"{%}ProgramFiles{%}\Microsoft Monitoring Agent\Agent\Health Service State",`
"CShost.exe","Microsoft.Mom.Sdk.ServiceHost.exe","HealthService.exe","MonitoringHost.exe",`
"e:\WAC_Server_Cache","e:\WAC_Server_Logs","e:\WAC_Server_Rendering_Cache"` # WC Server storage locations
# This section will exlude file types
$FileTypes = @("MDF","LDF")
# This section will include sub folders in the exclusion. Path must end in a \
$ProcIncludingSubs = @("{%}programfiles{%}\Microsoft Lync Server 2013\", `
"{%}systemroot{%}\RtcReplicaRoot\", `
"{%}SystemDrive{%}\RtcReplicaRoot\", `
"E:\RtcReplicaRoot\xds-replica\", `
"{%}systemroot{%}\assembly\", `
"{%}systemroot{%}\ServiceProfiles\", `
"{%}systemroot{%}\Windows\Microsoft.NET\", `
"{%}systemroot{%}\system32\inetsrv\", `
"{%}systemroot{%}\system32\LogFiles\", `
"{%}systemroot{%}\SysWOW64\inetsrv\", `
"{%}systemroot{%}\SysWOW64\LogFiles\", `
"{%}systemroot{%}\System32\Dns\Boot\",` #KB822158 - AD DCs
"{%}programfiles{%}\Common Files\Microsoft Lync Server 2013\Watcher Node\" `
$TotalExclusionsinFunction = $Procs.Length + $FileTypes.Length + $ProcIncludingSubs.Length
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinFunction -eq $TotalExclusionsinRegistry)
Write-Host ""
Write-Host "`tChecking Anti-Virus Exclusions in the Registry"
Write-Host ""
Write-Host "`t`tStatus : " -ForegroundColor White -NoNewline
start-sleep -m 500
Write-Host "Count Matches" -ForegroundColor Yellow
Write-Host ""
Write-Host "`t`t`tThe number of exclusions in this script match the number of exclusions in the registry" -ForegroundColor Yellow
Start-Sleep 5
return $true
[void] [System.Reflection.Assembly]::LoadWithPartialName("'Microsoft.VisualBasic")
[void] [System.Reflection.Assembly]::LoadWithPartialName("'System.Windows.Forms")
Write-Host "`tDisabling Artemis (Hueristic Scanning)" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -ErrorVariable "AOS" -Force
If ($AOS)
Write-Host "`tForce Close Failed - Taking Extrodinary Actions (~20 Secs)" -ForegroundColor Yellow
If ($ActiveApp -eq "On-Access Scan Properties")
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
$ActiveApp = GetActiveWindows
$Count = 0
Write-Host "`t`t`t[" -ForegroundColor Yellow -NoNewline
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
[System.Windows.Forms.SendKeys]::SendWait("{ESC}{ESC}{ESC}{ESC}{ESC}")
Start-Sleep 1
$Count++
$ActiveApp = GetActiveWindows
Write-Host "*" -ForegroundColor Green -NoNewline
Write-Host "]" -ForegroundColor Yellow
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If ($VConsole1 -ne $null)
Write-Host "`t`tIssue Closing the App"
Pause
Else
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Setting Hueristic Settings to disabled
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{UP}","{UP}","{UP}","{UP}","{UP}","{UP}","{TAB}","{TAB}","{TAB}","{ENTER}"
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Start Exclusions
Write-Host "`tStarting VirusScan Exclusions" -ForegroundColor Cyan
$VConsole = Get-Process -Name mcconsol -ErrorAction SilentlyContinue
$VConsole1 = Get-Process -Name shcfg32 -ErrorAction SilentlyContinue
If (($VConsole -ne $null) -or ($VConsole1 -ne $null))
If ($VConsole -ne $null)
$VConsole.CloseMainWindow() | Out-Null
If ($VConsole1 -ne $null)
Stop-Process -Processname shcfg32 -Force
Write-Host "`t`tClosing all McAfee Windows"
start-sleep -m 500
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Else
& 'C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHCFG32.EXE'
Start-Sleep 2
# Removing all On Access Scanner Exclusions
Write-Host "`t`tGrabbing focus of window [On-Access Scan Properties]"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep 1
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to get Focus On-Access Scan Properties"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "On-Access Scan Properties") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("On-Access Scan Properties")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to grab focus of [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
$KeyboardArray1 = "%S","{TAB}","{DOWN}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","+{TAB}","+{TAB}","+{TAB}",,"+{TAB}","{RIGHT}","%E"
#[System.Windows.Forms.SendKeys]::SendWait("{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{DOWN}{TAB}{TAB}{TAB}{RIGHT}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{TAB}{RIGHT}%E")
ForEach ($z in $KeyboardArray1)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "On-Access Scan Properties")
Write-Host "`t`tUnable to keep focus on [On-Access Scan Properties]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait($z)
start-sleep -m 300
start-sleep 2
# Removing exclusions 150 times.
Write-Host "`t`tRemoving existing virus exlcusions (up to 150)"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep 5
$ActiveApp = GetActiveWindows
Write-Host "`t`tCurrent Focus is $ActiveApp"
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to get Focus on Set Exclusions"
$Count = 0
start-sleep -m 300
while (($ActiveApp -ne "Set Exclusions") -and ($Count -lt 10))
$Count++
Write-Host "`t`t`t`tTrying again: $Count of 10 times"
[Microsoft.VisualBasic.Interaction]::AppActivate("Set Exclusions")
start-sleep -m 750
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to grab focus of [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
For ($i=1;$i -lt 150; $i++)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%R")
start-sleep 1
# Processing the different Directories and process
ForEach ($y in $ProcIncludingSubs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{TAB}{ADD}{ENTER}")
Start-Sleep -m 200
ForEach ($y in $Procs)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A{TAB}$y{ENTER}")
Start-Sleep -m 200
ForEach ($y in $FileTypes)
$ActiveApp = GetActiveWindows
If ($ActiveApp -ne "Set Exclusions")
Write-Host "`t`tUnable to keep focus on [Set Exclusions]"
Write-Host "`t`tStarting over again"
Stop-Process -Processname shcfg32 -Force
Start-Sleep 5
Return $False
[System.Windows.Forms.SendKeys]::SendWait("%A%F{TAB}$y{ENTER}")
Start-Sleep -m 200
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}{TAB}{TAB}{TAB}{ENTER}")
start-sleep 1
Stop-Process -Processname shcfg32 -Force | Out-Null
$TotalExclusionsinRegistry = ((Get-Item -Path 'HKLM:\SOFTWARE\Wow6432Node\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default\').Property -match "ExcludedItem_").count
If ($TotalExclusionsinRegistry -ne $TotalExclusionsinFunction)
Write-Host "`t`tUpdate appears to have failed" -ForegroundColor Yellow
Start-Sleep 1
Return $False
Return $True
} #End Function -
VISS (McAfee) virus scan error at 7%
Error message:"Problem: Product configuration XML file missing". Running the online Troubleshooter produces the same error message for: 'Anti-Spam', 'Personal Firewall', 'Site Advisor', 'Security Center', 'Quick Clean & Shredder', and 'Virus Scan'. Thinking this was a problem with the McAfee software, I reinstalled the Security Suite, but got the same result. Using Windows 7. VISS has been working normally until today's error messages. How do I correct this?
Thank you very much for your response. I will try that this morning.
After posting my message, I discovered that my 'Windows Updater' encounters 'unknown problem' and stops update, so I'm not current on my Windows updates - I may have more of a problem than just with VISS - may require a professional technician to resolve. But, in any case, thanks for your help.
Ben -
McAfee Virus Scan VShieldScanner in Root
I decided to try out a trial version of Virus Scan months ago. One day, while looking at the Activity Monitor, I saw up to 4 tasks that were running in the background, 3 of which are called "VShieldScanner". These tasks belong to Virus Scan (which I only ran once), so I deleted the application using App Delete. ClamXAV was good enough for my virus concerns.
After emptying the trash and restarting the computer, the tasks were all still running. I tried to reinstall and delete again, and the same result happened. So now, I've got processes going on that I don't even need, for a program that I deleted. The processes are all under "root" as the user, so I can't change it. I read elsewhere that I can grant myself admin rights via the terminal, or download some type of GUI to access root. Did anyone else have this issue?
By the way, here's what Activity Monitor says:
Process IDs: 400,401,402
Real Memory: About 23 MB each
Virtual Memory: About 611.50 MB each
Deleting the processes via Force Quit only results in the process that was just deleted to pop back up in the Activity Monitor seconds later.that program has an uninstaller and you should have used that. the easiest thing is to redownload the program and use the uninstaller.
https://knowledge.mcafee.com/article/664/8328353f.SALPublic.html -
Conflicting results from McAfee virus scan
I ran a Full Scan on my Windows XP computer using Verizon Internet Security Suite powered by McAfee. It took about 5 hours but eventually it told me Your computer is secure (no action required). 0 Viruses detected in your last scan. Then I clicked View Security Report, and that said it had detected 4 Viruses and 81 Trojans. Why the difference? Also, there was no way to display a list of what was found and their locations. Anyone else had that kind of problem with the McAfee tool? I have run McAfee Virtual Technician, it didn't find anything wrong.
I ran the full scan again, same conflicting result. I think the Security Report doesn't just report on the scan just completed, it reports some or all of the prior scans. If this is the case it should say so.
-
Uninstalling Mcafee virus scan from Lion
I'm trying to install a Norton antivirus product, however the installer tells me that I cannot install it on my hard drive because I already have "incompatible antivirus software" installed on it, and it lists McAfee VirusScan. I had McAfee on it previously, however I have run the Unistaller provided by Mcaffee. I thought this had removed the program, however there are still clearly remnants of it somewhere on the drive. Does anyone have experience with this and is willing to help?
Removing all traces of anti-virus software is often difficult. In your case, you need to go to the McAfee site, not the Norton site, to search for a manual uninstall process.
Try: https://kc.mcafee.com/corporate/index?page=content&id=KB54975
However, I agree with others in not recommending Norton as a replacement. If you feel that you need an anti-virus software to detect you from no known Mac viruses in the wild, try ClamXav. At least it's free. -
as sta.ted above i cannot download the Reader software from the Adobe website.there is nothing saved in nthe Windows downloads folder nor is there any sign of the Downloads box. We hnave W7 on the pc so know what to expect. Have even tried saving it in ano9ther location. Stil no good. Currently have the new Firefox and Windows and Mcaffe dowloads are happening automatically. Any ideas? Using an Acer Aspire one netbook
Try to boot the computer in Windows Safe mode with network support (press F8 on the boot screen) as a test to see if that helps to download the Adobe Reader file.
*http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode
If that still fails then you will have to use another computer to download the file and use an USB stick too transfer the file. -
Which is better and newer, virus scan 6 or pc cillin 2000?
which is better and newer, mcafee virus scan v6 or pc cillin 2000?
thanks,
edisonedison,
I run without a Virus Smasher Program. If I am going to download something I run Housecall. Also I do not use Outlook or Outlook Express for email so I do not get those types of attacks.
You could try Housecall here:
Trend Micro's free online virus scanner
This thing is a browser plugin. Does not run unless you are on their site. It is Free. It does not take up any recourses. It is Free. It is always up to date. It is Free. It never expires. It is Free. You never need to register to use it. Oh, and did I mention it is FREE!!! :D
Take Care,
Richard -
HT4235 ipod will not sync after mcafee vulnerability scan installs itunes update?
ipod will not sync after mcafee vulnerability scan installs itunes update?
When I tried the first time it asked me if i wanted it to stop syncing and to restore. It gave the choices of yes and cancel, i didn't click either because the option box went away and it just stopped restoring on its own. I did the store again and now it is asking if i want to set up as a new ipod or to restore to Andrea's ipod. Should I set up as new?
Thank you Espeon for the article -
My itunes account on windows xp shuts down for no reason. If even try to delete something from my library it shuts down. It wont recognize my iphone and there is an issue with network connectivity and I can't connect to the store. I have already reinstalled itunes and did a system restore on my computer, firewall has been checked, itunes is ok on firewall and virus scan done. Ideas??
Same problem. I can see the itunes store so not a problem with windows firewall. The account is active on my iphone so i know i am not locked out. I can connect the PC to my iphone so i know itunes is working ok. It is just logging into itunes on this pc which doesn't work. Only thing I can think of is that the email address I use for my apple id has been offline for a while and is working again now, I'm wondering whether this has been the case for others who are having this issue?
-
Automatic virus scanning of USB devices stopped - how do I restart
It used to be when I put in a thumb drive there was auotmatic virus scanning.
This no longer happens.
How do I restart this function?You don't need anything like that. Perhaps when you did a software update your old anti-virus stopped working. That is a good thing.
If you insist, you could reinstall it. My official suggestion is to reinstall it properly and then uninstall it properly. -
Virus scan / spyware scan deleting library?
I recently ran a full virus scan on McAfee Sonic Wall. When asked if I wanted to delete "potentiall unwanted programs", I just hit yes.
When I went to reload iTunes, my entire library was gone. I was able to re-import (but lost play counts and date added), but next time I opened iTunes, it said that the iTunes Music Library.itl file had been damaged.
Is there a connection here? Does anyone know how to disable the functions within Sonic Wall to stop it from messing with my Music Library file?I seem to have solved the problem Swymer.
I was lucky in that I had a backup of my iTunes Music Library file pre-virus scan. Check around in other folders. I had a copy in the "Previous iTunes Libraries" folder.
Then do this:
1) uninstall then re-install your virus software. This was a real pain, but it was the only way for me to clear the quarantine logs and start over. McAfee had the iTunes folder flagged forevermore.
2) Delete all your old libraries, following the instructions in this document:
http://docs.info.apple.com/article.html?artnum=93313
3) Restart iTunes and let it do its thing.
That's it. I've got my music back. Back to living.
If you didn't have a library backup, don't despair. Your songs are still on your hard drive. It's only your Library files that are nuked; they're the roadmaps that tell iTunes how everything works.
If they are zapped, you may just have to rebuild your playlists & ratings using the "add folder" option. -
Itunes stops working with vista
Has anyone had problems with itunes stopping working with windows vista? I have tried all the upgrades but itunes still stops working when playing songs and videos.
Tizzy79,
Your computer is blue screening. This is frequently caused by problems with driver conflicts or a computer virus. Make sure you've scanned your computer for viruses and spyware.
If that doesn't help, let's capture a minidump of the crash and send it to the Apple engineers to analyze.
To set up your machine to capture a minidump, right click on "My Computer", select "Properties". In the dialog that comes up, select "Advanced System Settings" on the left. In the dialog that comes up, select the "Advanced" tab, select the "Startup and Recovery" Settings button, select "small memory dump" from the popup. When it crashes, look for the MiniDump file. It's usually in the folder "C:\WINDOWS\Minidump" and is called something like Mini<number>-<number>.dmp.
You need to send that file to our buddy Roy, [email protected] Make sure that you include:
(1) the mini dump file.
(2) the link to this thread.
(3) a one line description of your problem, i.e. "iTunes Blue Screens Vista".
(4) the username that you're using here in the discussion boards.
Roy is getting a little swamped with messages and needs to make sure he gets all the information. And if he doesn't get that information, the message is just going to get dropped on the floor. -
New computer, installed Firefox, went to get Flash Player for Firefox.
Install the plugin, Firefox warning comes up about software trying to be installed, click "allow", install window pops up, 3;2;1, click install.
Adobe Download Manager comes up downloads Flash Player, Adobe Flash install programs starts, need to close Firefox to continue
Flash installed, McAfee Security Scan Plus installed.....
Huh? What? McAfee Security Scan Plus????
Their was no notification that McAfee Security Scan Plus was going to be installed. Their was no check box.
I am an IT guy. I dont get viruses. I dont fall for scams. I dont get phished. I dont click "yes" on anything that pops up on my screen. I fix all my family and freinds computers. I build my own computers, I havent bought a premade pc from a company in over 15 years. I am a Linux system admin.
When I install software, like Flash player, I read everything that pops up on my screen, except for the full EULA.
I cant wait till HTML5 becomes standard. Then the world can rid itself of this resource hog and now apprently also a virus.
Adobe Flash did not notify me McAfee Security Scan Plus was being installed untill after it was installed.I'm another IT guy, and I did NOT get the normal Flash install screen with the McAfee junk checkbox. I've learned long ago to watch for it, especially with Adobe products.
I run a utility on my system that watches the Startup paths in the operating system, and notifies me when something wants to install itself to start automatically. That gives me option to say "no," and keep my system running fast a smooth. Well, Adobe has even worked its way around that kind of protection. Their products now scan for available updates in the background when they are running, then use the system's Shut Down process to put their updater in the "RunOnce" key of the Registry! Then when you reboot, even though you KNOW you didn't authorize any Adobe product to auto-start, up comes their updater. But I digress....
This time I was browsing with Firefox, and a Flash page said my player was out of date. Click the link to update it. The download started immediately, with no option to opt out of anything.
Surprise! McAfee Security Scan Plus pops up so it can do its fake scan and try to get me to buy something. McAfee used to be the flagship anti-virus out there. It was fast, unobtrusive, and just did the job. But McAfee lost sight of it's original purpose, and now, in their attempts to become a one-package security solution, McAfee has become a bloated, sluggish system hog like Norton. And like Adobe. They all deserve to just die.
McAfee has resorted to Adware to make sales, and uses scare tactics to get you to buy. They have obviously partnered with Adobe with a deal to make money for both of them. (Norton, also, has now resorted to scareware sales tactics, BTW.) Why are they doing this? Because Microsoft came out with Security Essentials, which is free. And it provides better protection with far less system load because it integrates with the operating system.
I dropped Adobe Acrobat a long time ago. If there were a good alternative Flash player, I would dump Adobe player in a second. In half a second. This kind of bloatware sales partnership garbage is unacceptable. There are other multimedia formats out there. Maybe the world will wake up one day and stop using Flash altogether.
Oh! And their forum software sucks, too. My screen name isn't supposed to be "BubbaJoeBlow." It's supposed to be "D'Hag," which was registered with my account. But the forum wouldn't let me use it. Great job, Adobe!
Message was edited by: Me
Maybe you are looking for
-
In the morning, after I bring up the computer (An Apple), I launch Firefox. Inevitably, another window opens up behind the Firefox window with advertisements. It goes by "Pulse 360" and if you Google it, people are always complaining about how to get
-
SQL Server Data Tools (SSDT) is missing some features
I am using SSDT for the Team Database development. I have created the Database project on SSDT and bind this project with the TFS. And asked team to start working on SSDT instead of SSMS. Below are the list of challenge that team are facing 1. The
-
How to change the color of selected value in a poplist/LOV?
Hi When we select a value in a poplist or a LOV the value is highlighted in blue color. Can we cutomise this color? How? TIA
-
IMove Won't Import Photos from iPhoto Library Album
Tried to import photos from iPhoto Library/Selected Album. Pictures appeared in photos window but a high lighted photo did not appear in the large window. Tried dragging photos to build project, received message: ERROR DURING IMPORT: The file could n
-
I'm trying to match my numbers with R/3 through ME81 for Net Order Value but they are not matching. I made sure that i'm using the right time references also. I also tried to match by individual company codes but no luck. The difference is small but