Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
21 - 40 of 83 Posts

Registered
Joined
52 Posts
Discussion Starter · #21 ·
Okay, I'm in the process of uninstalling both programs just to be safe. I started with WebAdvisor since that was the free one. I got a pop up during the process, which I've attached. I'm terrified to click anything on this ---so I won't until I hear from you (I'll just let it sit there. But I will continue to run the scan per your directions since I want this stuff off the computer. I hope that's okay.
 

Attachments

Registered
Joined
52 Posts
Discussion Starter · #22 · (Edited)
Okay, I did as instructed (removed both WebAdvisor and McAfee Total Protection (just in case) and have attached the logs you request. Also, got this weird pop up when I was running the FRST scan and am afraid to click anything on it at this point. No idea if it's coming from HP or somewhere else. But I wanted you to see it in case you have any advice as to what I should do to deal with it. I can't shut the window down without clicking dismiss or protect more devices.

I cannot get the other report to attach. It is on the desktop and I can open it, but every time I try to add it, it gives me a strike out. I compressed it as a zip file, but then when I go to attach it it won't show up for me to choose. I have no idea why. It is showing up on my desktop, but when I try to attach, the compressed file won't show up---only the one that is strikethrough when it comes through shows up. I also tried downloading the zipfile version from my C drive and it does the same strikethrough.

I'm so sorry. I have no idea why it won't when the Addition scan is attaching fine. I ran the scan again and the same things is happening. I literally can see it on my desktop, but when I go to attach it, it won't attach. I will post the log (copy and paste) in the next post since I can't figure out why the compressed file (or the original file) report won't attach. I'm so sorry! I've tried everything I know how to do.

Scratch that. It won't let me copy and paste the information either.馃槴I have no idea how to get this to you in a format that will work. If you have any suggestions other than compressing to zip file---maybe it's because I didn't delete the old files/reports? But that didn't affect the ability for the addition scan to upload okay as a compressed file (zip file). But the other one won't load as a non-compressed or a compressed file. It doesn't even show up as a selection as a compressed file even though it's in a folder on my desktop in the same place as the stuff that is showing up. The compressed file shows up on both the C drive and the desktop, but when I try to attach, it's not coming up as a choice. And then I'm stuck only with the option to upload the one that won't upload. I'm so sorry. Please let me know how I can get the file to you other than the ways I've already tried (and your suggestion to compress them to a zip file worked the first time, but isn't working now for some reason.)

I'm attaching the file that actually shows up on the desktop, and what I see when I try to attach the file (it's not an option, clearly, and I have no idea why since this worked before). I found a way to find it, but it's saying the file does not have an allowed extension (in case this helps). Sorry for all the edits. I'm really trying to figure out what's going wrong so you will have what you need when you return. :) Also, I hope you had a good rest since hopefully you are sleeping right now (given our time difference). :)
 

Attachments

Registered
Joined
52 Posts
Discussion Starter · #23 ·
I still cannot get it to allow me to post the other part of the scan. I tried copying and pasting to here, and it won't let me post. So I copy and pasted it to a word document, which I've posted here, but some of the stuff you probably need isn't there because the margins aren't big enough. I'm also noticing my google browser icon is now showing a moving line underneath, which I have never noticed before, and my computer is going slow. I'm not sure if those are things I should be concerned about or not. At this point, I feel like I can't trust anything on my computer so I'll mention it. I also can't get to my Office 365 anymore unless I'm on my non-admin account, even though I was signed into Microsoft which also makes no sense. Not sure if that is related to anything we have going on here, but just in case.

....AND when I try to post it it says "the uploaded file does not have an allowed extension." I'm out of ideas on how to share the file at this point. Hopefully you can figure something out because it's clear I'm of little use or help here. :( But please know that I've spent the last couple of hours trying (literally). And I'm so sorry I failed.
 

Registered
Joined
52 Posts
Discussion Starter · #24 · (Edited)
And I got this pop up, which also really looks suspicious. I did NOT click it or hit any buttons. I let it sit there and it eventually disappeared. Not sure if that's part of what is preventing stuff from being uploaded properly, but just in case.

Also, I'm attaching what I'm seeing on my end when I try to attach the compressed file that is saved to the desktop, in case that is helpful in troubleshooting (sorry for all the edited posts)
 

Attachments

Trusted Advisor & Malware Specialist
Joined
3,915 Posts
Just to make it clear: I asked you to remove McAfee only if you didn't have a valid license. The following item in the logs made me wonder if the program is legally activated. Isn't possible to remember if you downloaded it on Sept 2nd? Was that day when you renewed the product? Is that the installer you downloaded?

2022-09-02 08:58 - 2022-09-02 08:58 - 083534280 _ (McAfee, LLC) C:\Users\19168\Downloads\McAfee_Installer_serial_y7Zwc6MW1JiLSKoEztODcw2_key_affid_1494_akey (1).exe

As to the red x, has to do with OneDrive, the Microsoft's cloud service. At this moment, you have it synced with your Desktop.

As to the FRST log, you can open it, select all its content and paste it here instead of attaching it.
 

Registered
Joined
52 Posts
Discussion Starter · #26 ·
No worries. I wanted to remove it just in case because I do KNOW I pay for it, but I'm concerned when I reset the computer and went on the internet, I inadvertently may have accidentally downloaded a bad copy or something. I had to go to Google to find the site to download, but when we put it back on, I'll go back through my account and have them tell me where to go to download it.

I do remember downloading it on September 2. I reset the computer after the remote access incident so I reset the computer to factor settings and had to reinstall a bunch of stuff. But I remember there was a serial number and when I had asked about it, they said that was not important---I did not have to write it down as it changed---which struck me as odd. I did not renew it in September. I am on auto-renewal, so it had renewed in May or June (I can't remember which). So I didn't download from a renew link or anything. When I had reset it the time before this (approximately four weeks prior) that is when I had talked to the CSR, but they also had the serial number thing and they verified I had a current subscription. Unfortunately, I don't know enough about this stuff, so although I DO Have a valid license (or should), I removed it out of a preponderance of caution. I figure I can reinstall it when you indicate it is safe to do so and we can run the logs again to see if there are issues. I installed it from a link on the Web, but it was a Google search, first page, nothing weird. And it looked like the official McAfee site.

But I still don't know how to find the key. In the old days, when I had a disc, the key was on the packaging and it never changed. Ditto with the credit card type purchases of software (the code was on the card). But with this computer, I just renewed from the link that was originally included as a trial on the computer, so I have never been given a key or information about same. I'm concerned about that since it seems I should have one? I also don't see it anywhere in my account (I can include redacted screenshots if those would help).

Is there a way for me not to synch one drive? I'd actually prefer to just save this stuff on my computer, not one drive anyway. I did try to copy and paste the information yesterday and got an error message from the site. But I'll try again right now. If it doesn't work, I'll screen shot the message so you can see it.

I appreciate your help and I'm sorry I'm so ignorant about computer stuff.
 

Trusted Advisor & Malware Specialist
Joined
3,915 Posts
Attach the zip file which is on your Desktop. Ignore the red X.

Let's first check the computer for malware and then come to the OneDrive sync.
 

Trusted Advisor & Malware Specialist
Joined
3,915 Posts
The computer has no sign of an active infection, however we are going to proceed to a further check later.

I doubt if you used Revo to uninstall McAfee, since the logs are full of McAfee items. Since you decided to remove it, I will include all these in my fix to get removed. However, if you are sure that you bought a valid license, you must contact McAfee to either cancel your subscription or know your product's serial number, in case you want to install it again.

1. Remove Chrome extensions

Open Chrome.
At the top right McAfee庐 WebAdvisor and McAfee庐 Web Boost, choose More (the three vertical dots) > More Tools > Extensions
Find them and remove them, clicking on Remove.
Confirm the action by clicking Remove once again.


2. Remove an app
  • Press the Windows Key + R.
  • Type appwiz.cpl in the Run box and click OK.
  • The Add/Remove Programs list will open. Locate the following program on the list:
Code:
McAfee庐 Personal Security
  • Select the above program and click Uninstall.
  • Restart the computer.

3. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system
  • Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.
Code:
Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {1F60FC59-AF2D-4383-8A98-39B037FCF952} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\DADUpdater.exe [4089168 2022-02-08] (McAfee, LLC -> McAfee, LLC)
Task: {4AFD487D-022E-4AC5-805A-C04A3303D674} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [926064 2022-02-18] (McAfee, LLC -> McAfee, LLC)
Task: {7900B297-8298-4D4F-A317-CFFECDB3C923} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [926064 2022-02-18] (McAfee, LLC -> McAfee, LLC)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Edge Extension: (McAfee庐 WebAdvisor) - C:\Users\19168\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdhgeoginicibhagdmblfikbgbkahibd [2022-09-02]
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [2022-07-22] (McAfee, LLC -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-09-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll [2022-07-22] (McAfee, LLC -> )
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=E211US1494G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR DefaultSuggestURL: Default -> hxxps://us.search.yahoo.com/sugg/gossip/gossip-us-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [klekeajafkkpokaofllcadenjdckhinm]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [klekeajafkkpokaofllcadenjdckhinm]
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_22_4\McApExe.exe [816696 2022-07-21] (McAfee, LLC -> McAfee, LLC)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\5.2.110.0\\McCSPServiceHost.exe [3380096 2022-07-11] (McAfee, LLC -> McAfee, LLC)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1220160 2022-04-11] (McAfee, Inc. -> McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1220160 2022-04-11] (McAfee, Inc. -> McAfee, LLC)
R3 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1220160 2022-04-11] (McAfee, Inc. -> McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1569432 2022-07-21] (McAfee, LLC -> McAfee, LLC)
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [4235968 2022-02-19] (McAfee, LLC -> McAfee, LLC)
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [75872 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [473192 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [347752 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [83920 2022-06-09] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, LLC)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [442984 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [916608 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
R3 mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [652920 2022-06-01] (Musarubra US LLC -> Trellix US LLC.)
S3 mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [114808 2022-06-01] (Musarubra US LLC -> Trellix US LLC.)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [110696 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [232552 2022-06-09] (Musarubra US LLC -> McAfee, LLC)
U3 aspnet_state; no ImagePath
2022-09-07 12:55 - 2022-09-07 12:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2022-09-02 21:09 - 2022-09-02 21:09 - 083534280 _____ (McAfee, LLC) C:\Users\19168\Downloads\McAfee_Installer_serial_y7Zwc6MW1JiLSKoEztODcw2_key_affid_1494_akey (2).exe
2022-09-02 20:17 - 2022-09-02 20:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-09-02 09:13 - 2022-09-02 09:13 - 000000000 ____D C:\Users\19168\AppData\Roaming\McAfee
2022-09-02 09:11 - 2022-09-02 09:11 - 000003332 _____ C:\WINDOWS\system32\Tasks\McAfeeLogon
2022-09-02 09:10 - 2022-09-07 13:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2022-09-02 09:09 - 2022-09-02 21:06 - 000003710 _____ C:\WINDOWS\system32\Tasks\McAfee Remediation (Prepare)
2022-09-02 09:09 - 2022-09-02 09:13 - 000000000 ____D C:\Program Files (x86)\McAfee
2022-09-02 09:09 - 2022-09-02 09:10 - 000000000 ____D C:\Program Files\McAfee.com
2022-09-02 09:09 - 2022-09-02 09:09 - 000000000 ____D C:\Program Files\Common Files\AV
2022-09-02 09:07 - 2022-04-11 14:33 - 001166560 _____ (McAfee, LLC) C:\WINDOWS\system32\mfevtps.exe
2022-09-02 08:58 - 2022-09-02 08:58 - 083534280 _____ (McAfee, LLC) C:\Users\19168\Downloads\McAfee_Installer_serial_y7Zwc6MW1JiLSKoEztODcw2_key_affid_1494_akey (1).exe
2022-09-02 08:53 - 2022-09-02 08:53 - 083534280 _____ (McAfee, LLC) C:\Users\19168\Downloads\McAfee_Installer_serial_y7Zwc6MW1JiLSKoEztODcw2_key_affid_1494_akey.exe
2022-09-07 13:40 - 2020-09-30 13:22 - 000000000 ____D C:\Program Files\McAfee
2022-09-07 13:35 - 2020-09-30 13:22 - 000000000 ____D C:\ProgramData\McAfee
AV: McAfee VirusScan (Disabled - Up to date) {FE987762-0FB6-6BB6-1BF1-73F8ED8566FA}
FW: McAfee Firewall (Disabled) {C6A3F647-45D9-6AEE-30AE-DACD13562181}
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} =>  -> No File
2020-05-29 12:09 - 2020-05-29 12:09 - 001165824 _____ () [File not signed] C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\e_sqlite3.dll
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service"
SearchScopes: HKLM -> {AFE50C65-DA1B-4AB4-9397-0AD358DAA661} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {AFE50C65-DA1B-4AB4-9397-0AD358DAA661} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
C:\Program Files\Common Files\McAfee
C:\WINDOWS\System32\drivers\cfwids.sys
C:\WINDOWS\System32\drivers\mfeaack.sys
C:\WINDOWS\System32\drivers\mfeavfk.sys
C:\WINDOWS\System32\drivers\mfeelamk.sys
C:\WINDOWS\System32\drivers\mfefirek.sys
C:\WINDOWS\System32\drivers\mfehidk.sys
C:\WINDOWS\system32\DRIVERS\mfencbdc.sys
C:\WINDOWS\system32\DRIVERS\mfencrk.sys
C:\WINDOWS\System32\drivers\mfeplk.sys
C:\WINDOWS\System32\drivers\mfewfpk.sys
EmptyTemp:
End::
  • Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
  • Press the Fix button once and wait.
  • FRST will process fixlist.txt
  • When finished, it will produce a log fixlog.txt on your Desktop.
  • Post the log in your next reply.

In your next reply please post:
  1. If uninstalling the McAfee extensions and app went fine
  2. The fixlog.txt
 

Registered
Joined
52 Posts
Discussion Starter · #35 ·
I KNOW I have a valid, paid subscription to McAfee. I originally downloaded it when the trial version ended in 2020 or 2021. I pay for it every year and recently had it renewed in April or May 2022. It is active through 2023. What I DON'T know is whether or not I accidentally downloaded a bad version when I reset the computer and tried to add it in. I remember I had a problem because the computer trial version kept telling me I had to pay again, which I didn't want to do because I had an active subscription. I don't even remember who I talked to, but I went to what I believed was the official McAfee site and tried to download. I didn't find a link in the account. so I went on the internet ---Google search---and a link came up that looked official on the first page. I downloaded from there. That is when the CSR wanted remote access, which is why I'm questioning whether it was the right site (and only questioning this in light of what you shared about the code). On the last one, I downloaded again from a Google site that looked legitimate. But I want to remove it since I'm not sure and I will go to my account again and contact McAfee and make sure I have the right one after we ensure there's nothing nefarious on my computer. I am paying for McAfee and I do want the legal version---I have been paying for that version since I had the computer. I know you don't know me and I know that people who do illegal things always deny they are doing such things, but please trust me when I say I did not willingly, nor intentionally, put a cracked version of McAfee (or anything else) on my computer. Nor would I ever. I would not even know how to access those programs. according to my sister. I do wonder if whatever person got remote access could have messed with things, though. Is that a possibility?

Also, I DID follow the directions for the Revo to uninstall McAfee. I went step-by-step and did it for both the WebBooster and the Total Protection, as instructed. I have no idea why it's looking like I didn't, or why things are still on there, but it's upsetting to me to feel like I'm doing my best, then being accused of doing illegal things, and then being told I'm not doing things I'm being asked to do when I am. I'm very thankful for the help, but it's not fair to be told I didn't do something (like uninstall McAfee using Revo). I may have done it wrong, but I definitely am trying to follow step by step what you are asking me to do. I am pretty computer inept, but I am an excellent reader. Unfortunately, I'm in my 50s and I don't have as much knowledge of computers, but I'm doing the best I can. I'm sure you didn't mean for it to come off like that, but it is how it felt to me. I am very anxious about the entire being hacked thing now and took yesterday off work and spent hours trying to do things to help, so please trust that I AM doing what I'm asked to do to the best of my ability. I'm highly motivated because I want my computer to be okay and ALSO because I know you are volunteering your time and your time is precious. I don't want to waste your time (or mine) so I will am doing what you ask me to do to the extent I'm able to do so, if that makes sense. I keep running into problems, which are probably simple to folks who know computer stuff, but not for me.

Again, please know that I appreciate the time and assistance you are providing. And I really appreciate the bit about calling McAfee and asking for the product's serial number. I do remember a serial number came up with the download, but they said I did not need to write it down because it was randomly generated and not assigned to me (which seemed odd; in fact, I have two of those written down from the last two resets (and can provide them if they would be helpful). But from what you are saying (and what makes more sense to me) is that I SHOULD have an assigned, unique number that does not change, similar to what I had when I installed Webroot on my last computer (which I purchased on a CD because that was years ago).

Thank you for offering all the steps to move McAfee. I want to remove it to make sure whatever version is actually installed here again is legit and what I pay for.

So, I removed the stuff from Chrome, as instructed and that appeared to go fine. However, when I went to remove the app (Windows Key + R) it is not showing McAfee Personal Security on the list. I took a screen shot so you'll know I'm doing what I'm being asked to do and so you can see exactly what I am seeing---it's attached. Also, I will follow your instructions and stop doing the rest until hear back from you since I'm not sure why the McAfee Personal Security is not showing up where it should be according to the instructions.

I'm very sorry I'm so computer inept. I'm very grateful for your time and assistance. Please know I appreciate all you are doing to help. I hope you have/had a great day and evening. :)
Rectangle Font Parallel Screenshot Number
Rectangle Font Parallel Screenshot Number
 

Trusted Advisor & Malware Specialist
Joined
3,915 Posts
Hi.

You can fix your McAfee issue with McAfee, when we finish from here. McAfee Customer Service 鈥 Official Site

To uninstall McAfee庐 Personal Security, try this: Click on the Start button > All apps > Look for McAfee Personal Security, right click and choose Uninstall. Let me know if it worked.

After that, please run the FRST fix, as instructed here (Step 3): In Progress - Unauthorized Remote Access
 

Registered
Joined
52 Posts
Discussion Starter · #37 ·
Thank you. I can't type in "all apps" from the start button because it just brings me to the app store. However, if I type in McAfee I get the following:

Font Screenshot Software Technology Multimedia


Should I go ahead and uninstall all three of those from there, and then run the FRST? I just want to make sure I'm doing this right since I couldn't access all apps as instructed. :)

I really appreciate your help. Thank you so much.
 

Trusted Advisor & Malware Specialist
Joined
3,915 Posts
Yes. Since you decided to uninstall it for now, go ahead and uninstall everything. Then, run the FRST fix.

Also, how can I verify I have a key with the subscription? Again, apologies for the stupidity of these questions. I know I'm not very tech savvy.
I don't know how McAfee subscriptions work, so I can't answer to your questions. Please contact the Official McAfee site (see my previous post) for that.
 

Registered
Joined
52 Posts
Discussion Starter · #39 ·
Ah, okay. That makes sense. Thank you for the link. I will definitely contact them once we determine everything potentially nefarious has been removed and it's safe to add again. :)

However, when I try to uninstall, by typing McAfee into the search bar and right clicking it brings me back to this page, and it doesn't list any McAfee programs:

Product Rectangle Computer Font Screenshot

And if I click "uninstall" from the right click on the apps page, it doesn't do anything. It's also showing a bunch of weird serial numbers and keys. Let me know if a screen shot of that bit would be helpful and I can put one here.
 

Registered
Joined
52 Posts
Discussion Starter · #40 ·
The serial numbers and keys are listed on the previous page, before uninstall, similar to what I screen shot in the previous post.

Computer Screenshot Operating system Font Software


Is this generating a bunch of keys on its own? I have no idea what these are or why they are here, but I can't seem to uninstall them.
 
21 - 40 of 83 Posts
Top