1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

mcafee ghosts

Discussion in 'Virus & Other Malware Removal' started by Seminoletide, Apr 4, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. Seminoletide

    Seminoletide Thread Starter

    Joined:
    Apr 7, 2003
    Messages:
    9
    I recently got rid of my mcafee internet security software and went to Norton. Although there is no part of the mcafee software listed on my computer, both at start up and when starting Outlook, my computer prompts an error message that a mcafee "dll" library file is missing.

    Although I can just click "ok" to bypass the error message, I am wondering if there is a way to remove the command that is telling my computer to look for these dll files and remove the annoying error prompt. Any ideas?
     
  2. jameso321

    jameso321

    Joined:
    Jun 26, 2002
    Messages:
    176
    I have seen this before.

    Answer coming in a sec.


    jameso321
     
  3. Nok1

    Nok1

    Joined:
    Feb 15, 2004
    Messages:
    826
    If I'm not wrong, the start-up entry for mcafee didnt get deleted properly.

    Download HijackThis from here. Make a new folder for the program and then open it, click Scan. When it finishes scanning, do no remove anything but instead save the log and post it here.

    From the above log, we'll be able to remove the startup entry and that annoying box won't come up as the computer starts.
     
  4. jameso321

    jameso321

    Joined:
    Jun 26, 2002
    Messages:
    176
    This is for Outlook 2002 and may work with 2000 also

    Open outlook

    Go to Tools -> Options -> "Other" Tab -> Advanced Options -> Add-In Manager

    You should see something there that references McAfee - Uncheck that and click "Ok" then click "Ok" again.

    If it is not there, look in Comm Add-Ins, although I am not sure about the Comm Add ins at all.



    Write back with success or failure



    jameso321
     
  5. jameso321

    jameso321

    Joined:
    Jun 26, 2002
    Messages:
    176
    Removing the entry Via HJT will work too. :)


    Nok1, its time for bed you are answering faster than I am :)


    jameso321
     
  6. Nok1

    Nok1

    Joined:
    Feb 15, 2004
    Messages:
    826
    hehe
     
  7. Seminoletide

    Seminoletide Thread Starter

    Joined:
    Apr 7, 2003
    Messages:
    9
    jameso3321,

    Your suggestion has done the trick! :) I appreciate the help. I haven't restarted my computer yet to see if I am getting the mcafee error message at start up but it is definitely off the Outlook program. I'll restart my computer now and see if it's still at start up. If so, I'll reply back.

    Thanks again,

    Seminoletide
     
  8. Seminoletide

    Seminoletide Thread Starter

    Joined:
    Apr 7, 2003
    Messages:
    9
    NOK1,

    I attempted to download the Hijack program you spoke of but my computer doesn't recognize the download program format. It is asking me what program to use to open the zip file. What program is it in?

    As I indicated in the last message, jameso321's suggestion on removing the Outlook message worked but I still have the annoying message at computer startup.

    Thanks for your continued help with this.

    Seminoletide
     
  9. Nok1

    Nok1

    Joined:
    Feb 15, 2004
    Messages:
    826
  10. Seminoletide

    Seminoletide Thread Starter

    Joined:
    Apr 7, 2003
    Messages:
    9
    NOK1,
    I downloaded Winzip and completed your earlier request. Here is the log of the scan done by Hijack this:
    Logfile of HijackThis v1.97.7
    Scan saved at 12:35:56 PM, on 04/07/2004
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPROXY.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\HPOBKG03.EXE
    C:\PROGRAM FILES\HP OFFICEJET SERIES 700\BIN\HPOVDX03.EXE
    C:\WINDOWS\SYSTEM\HPOHID03.EXE
    C:\WINDOWS\SYSTEM\HPOTBX03.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OUTLOOK.EXE
    C:\PROGRAM FILES\MICROSOFT WORKS\MSWORKS.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
    C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dev.ntcor.com/search.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.charter.msn.com/
    O2 - BHO: McAfee Privacy Service - {cc4b2ee5-4803-11d7-8a38-00b0d0c6b814} - C:\PROGRAM FILES\MCAFEE\MCAFEE PRIVACY SERVICE\GDIEHELP.DLL (file missing)
    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL (file missing)
    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
    O4 - HKLM\..\Run: [URLLSTCK.exe] c:\Program Files\Norton Internet Security\UrlLstCk.exe
    O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
    O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [ccProxy] c:\PROGRA~1\COMMON~1\SYMANT~1\CCPROXY.EXE
    O4 - HKLM\..\RunServices: [SndSrvc] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSRVC.EXE
    O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Privacy Bar (HKLM)
    O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll

    Thanks for your continued help,

    Seminoletide
     
  11. Seminoletide

    Seminoletide Thread Starter

    Joined:
    Apr 7, 2003
    Messages:
    9
    NOK1,

    Did you have any further ideas on this issue? Does the info I sent help at all? Please let me know.

    Seminoletide
     
  12. Nok1

    Nok1

    Joined:
    Feb 15, 2004
    Messages:
    826
    Sorry about the long period of time before I replied - I was on vacation.

    Anyways, what you shall need to fix in hijack this is to make sure that all folders and internet explorer windows are closed, and then place a check by the following entry and then click on "Fix"

    O2 - BHO: McAfee Privacy Service - {cc4b2ee5-4803-11d7-8a38-00b0d0c6b814} - C:\PROGRAM FILES\MCAFEE\MCAFEE PRIVACY SERVICE\GDIEHELP.DLL (file missing)

    Reboot

    The problem should be gone by now.
     
  13. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/217150

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice