WindowXP SP2 Firewall and McAfee SecurityCenter

Hi,

I installed McAfee SecurityCenter and decided to uninstall it due to its annoying messages always trying to upgrade and update.  I have XP SP2 firewall enabled, as well as spybot search & destroy, so I figured that was good for now.

First I uninstalled through add/remove programs.  When that failed, I read on their website that all mcafee products must be uninstalled first.  Long story short, I manually deleted files, created registry files, edited the registry 3 different times with agents via chats, all to stop a windows firewall notification telling me, "An application named McAfee SecurityCenter Update Info (mcinfo.exe) has been blocked from accessing the network"

I'm irritated that I had to do all of this just to keep it from running in the background, using my resources, and feel a bit hoodwinked by mcafee.

My question is, was there truly a mcafee app attempting to run in the background despite my attempts to uninstall it, or is it just a problem with windows XP SP2 firewall?
galfreydayAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SheharyaarSaahilCommented:
Hello galfreyday =)

goto Start>Run>msconfig>Startup
adn untikc all entries which are related to Mcafee
and then in Services section, tick Hide Microsoft Services, and if u can see Mcafee services now, untick all of them also

Restart and now check if same problem ??
0
galfreydayAuthor Commented:
Arghhh! All that and still, the notification lives!

SheharyaarSaahil,

I will try your solution, but first, is it just going to keep the notification from appearing or will it kill this demon for good?
0
galfreydayAuthor Commented:
OK, there are no entries which blatently refer to mcafee in System Configuration.  There are several nonsensical entries whose item names, commands and locations don't appear to be related to mcafee, and 4 entries which have no item name.

Any thoughts?
0
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

SheharyaarSaahilCommented:
try this, search ur ahrd drive for this file >> mcinfo.exe
and delete all its traces,

then goto Start>Run>regedit, hit enter and now and click Edit>Find
search for this file(mcinfo.exe) and delete all its traces, restart and now check if same problem ??

Note: Its always recommended to backup ur registry first before making changes to it.
0
galfreydayAuthor Commented:
I previously deleted it from the registry, and it didn't show up when I searched my hard drive.
0
SheharyaarSaahilCommented:
when in msconfig, u tikc Hide Microsoft Services what are the rest of services u can see there listed ??
0
galfreydayAuthor Commented:
Sorry, what do you mean: " u tikc"
0
SheharyaarSaahilCommented:
sorry... i meant, when in msconfig you tick Hide Microsoft Services :)
0
galfreydayAuthor Commented:
I don't see an option titled "Hide Microsoft Services"...
0
SheharyaarSaahilCommented:
hmmmm you mean when i run msconfig, and goto Services tab, you dont see that check box... well its weird =\

anywayz,,,, u can still do one thing, in services tab, click on the Service column heading, it will sort all the services by name, look into services starting with M and check if anyone is for Mcafee ??

Also one more thing,,, when a Firewall alerts abt a process, this process "must" be running in background, is it running on ur machine when u will check it via task manager ??
0
galfreydayAuthor Commented:
Oh, sorry - I was not in the services tab.  There is a "hide Microsoft services" checkbox.

There are no services listed for Mcafee. There are some "unknown"s: ptssvc, machine debug manager, WAN miniport atw service.

There is a process called mcinfo.exe showing in task manager.
0
SheharyaarSaahilCommented:
>> There is a process called mcinfo.exe showing in task manager

and still u cannot find its "any" entry in regedit :-\
use this tool >> http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
and try to find the information on this mcinfo.exe !!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
galfreydayAuthor Commented:
"Mcafee SecurityCenter Update Info
Networks ASsociates Technology, Inc
Version: 4.02.0000.0024

Not sure what you mean by "any" entry in regedit.  There is a data value of "mcinfo.exe" in a file? of type "REG_SZ" in: My Computer: HKEY_USERS/S-1-5-21-3757435101-2243138800-4092590095-1005/Software/Microsoft/ACMru/5603

Little devil is still notifiying me. :O


0
galfreydayAuthor Commented:
I checked the "Kill this Process" in the Process Explorer dialog, then following the path it reported to the location of the culprit file, I deleted the entire folder.  Why a search of my hard drive didn't turn up its location, I don't understand.  

Anyway, thanks for taking so much time to help.  Hopefully it is gone for good.  :-)
0
SheharyaarSaahilCommented:
my pleasure galf... glad u got rid of it atlast :)
Cheers ^_^
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.