Advertisement

05.27.2008 at 08:10AM PDT, ID: 23435081
[x]
Attachment Details

How do I get rid of the BO:Writable -or- the BO:Heap virus alert

Asked by sla0610 in McAfee Anti-Virus Software, Anti-Virus, Enterprise Anti-Virus

Tags: Cannot get rid of the BO:Writable -or- the BO:Heap virus alert

Problem:  I have a desktop PC that has contacted the BO:Writable BO:Heap virus alert ... and I can't seem to get rid of it.  I have tried many things, but all to no avail.

Scenario:  1. When the user tries to use the internet (IE 6), they get the following virus alert from McAfee:
                         Name: C:\Program Files\Internet Explorer\iexplorer.exe:KERNEL32.GetProcAddress
                         Detected As:     BO:Writable     BO:Heap
                         State:                Blocked by Buffer Overflow Protection
                 2. All other software works perfectly fine ... .no issues/problems ... only IE6 is the problem.

Current State:  1. Currently we have McAfee's Enterprise Solution 8.5i as our virus protection.  The patch
                            version is 5; scan engine is 5200.2160; dat version is 5303.0000; created on 05/26/08;
                            buffer overflow and access protection dat version is 354.
                        2. We are a Microsoft shop, so using another browser is not an option.

What I have done:  1. I have run a McAfee virus scan and nothing was found.
                               2. I installed Spy Sweeper and it found spyware but did not rid the PC of the 2 alerts.
                               3. I downloaded BitDefender and ran it ... it too found stuff but did not rid the PC of
                                   the above 2 alerts.
                               4. I installed Symantec's Endpoint Protection ... and that froze on me while running.
                               5. I have investigated experts-exchange and so far, "it seems" that things I have tried
                                   experts-exchange has suggested.

Other things:  1. The PC is a corporate controlled PC, so I can't change the buffer overflow protection.
                       2. I don't want to re-format the hard drive, but if I have to ... I have to.  Since the users can
                          get to their data, I may just copy the data to a memory stick and put it back on when the
                          hard drive is re-formatted and all software is re-installed ... again, I don't want to, but if I
                          have to I will.
                      3. However, I find this a challenge and I want to understand how to remove this message
                          in case it happens again on another PC.
                      4. I have been to McAfee's website and they do acknowledge that the above 2 alerts have
                          been found by McAfee's anti-virus software; however unless I missed it, McAfee did not
                          give a solution to rid the PC of the 2 alerts.

Thanks for your help.  
Start Free Trial
 
 
[+][-]05.27.2008 at 02:18PM PDT, ID: 21655815

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.27.2008 at 05:08PM PDT, ID: 21656693

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.28.2008 at 08:07AM PDT, ID: 21661074

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.28.2008 at 09:26AM PDT, ID: 21661890

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.28.2008 at 05:27PM PDT, ID: 21665373

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.29.2008 at 11:58AM PDT, ID: 21672236

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.29.2008 at 04:57PM PDT, ID: 21674297

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.29.2008 at 07:33PM PDT, ID: 21674849

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]06.02.2008 at 01:17PM PDT, ID: 21695292

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]06.02.2008 at 02:55PM PDT, ID: 21696017

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]06.02.2008 at 03:01PM PDT, ID: 21696069

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]06.03.2008 at 04:53AM PDT, ID: 21699380

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]06.05.2008 at 02:01PM PDT, ID: 21723952

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]06.05.2008 at 04:15PM PDT, ID: 21724838

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: McAfee Anti-Virus Software, Anti-Virus, Enterprise Anti-Virus
Tags: Cannot get rid of the BO:Writable -or- the BO:Heap virus alert
Sign Up Now!
Solution Provided By: moh10ly
Participating Experts: 2
Solution Grade: A
 
 
[+][-]06.05.2008 at 07:48PM PDT, ID: 21725853

Assisted solutions are selected by the member who asked the question as a comment that contributed to their question's solution.

Start your 7-day free trial to view this Assisted Solution or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628