[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1739
  • Last Modified:

WindowXP SP2 Firewall and McAfee SecurityCenter

Hi,

I installed McAfee SecurityCenter and decided to uninstall it due to its annoying messages always trying to upgrade and update.  I have XP SP2 firewall enabled, as well as spybot search & destroy, so I figured that was good for now.

First I uninstalled through add/remove programs.  When that failed, I read on their website that all mcafee products must be uninstalled first.  Long story short, I manually deleted files, created registry files, edited the registry 3 different times with agents via chats, all to stop a windows firewall notification telling me, "An application named McAfee SecurityCenter Update Info (mcinfo.exe) has been blocked from accessing the network"

I'm irritated that I had to do all of this just to keep it from running in the background, using my resources, and feel a bit hoodwinked by mcafee.

My question is, was there truly a mcafee app attempting to run in the background despite my attempts to uninstall it, or is it just a problem with windows XP SP2 firewall?
0
galfreyday
Asked:
galfreyday
  • 8
  • 7
1 Solution
 
SheharyaarSaahilCommented:
Hello galfreyday =)

goto Start>Run>msconfig>Startup
adn untikc all entries which are related to Mcafee
and then in Services section, tick Hide Microsoft Services, and if u can see Mcafee services now, untick all of them also

Restart and now check if same problem ??
0
 
galfreydayAuthor Commented:
Arghhh! All that and still, the notification lives!

SheharyaarSaahil,

I will try your solution, but first, is it just going to keep the notification from appearing or will it kill this demon for good?
0
 
galfreydayAuthor Commented:
OK, there are no entries which blatently refer to mcafee in System Configuration.  There are several nonsensical entries whose item names, commands and locations don't appear to be related to mcafee, and 4 entries which have no item name.

Any thoughts?
0
Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

 
SheharyaarSaahilCommented:
try this, search ur ahrd drive for this file >> mcinfo.exe
and delete all its traces,

then goto Start>Run>regedit, hit enter and now and click Edit>Find
search for this file(mcinfo.exe) and delete all its traces, restart and now check if same problem ??

Note: Its always recommended to backup ur registry first before making changes to it.
0
 
galfreydayAuthor Commented:
I previously deleted it from the registry, and it didn't show up when I searched my hard drive.
0
 
SheharyaarSaahilCommented:
when in msconfig, u tikc Hide Microsoft Services what are the rest of services u can see there listed ??
0
 
galfreydayAuthor Commented:
Sorry, what do you mean: " u tikc"
0
 
SheharyaarSaahilCommented:
sorry... i meant, when in msconfig you tick Hide Microsoft Services :)
0
 
galfreydayAuthor Commented:
I don't see an option titled "Hide Microsoft Services"...
0
 
SheharyaarSaahilCommented:
hmmmm you mean when i run msconfig, and goto Services tab, you dont see that check box... well its weird =\

anywayz,,,, u can still do one thing, in services tab, click on the Service column heading, it will sort all the services by name, look into services starting with M and check if anyone is for Mcafee ??

Also one more thing,,, when a Firewall alerts abt a process, this process "must" be running in background, is it running on ur machine when u will check it via task manager ??
0
 
galfreydayAuthor Commented:
Oh, sorry - I was not in the services tab.  There is a "hide Microsoft services" checkbox.

There are no services listed for Mcafee. There are some "unknown"s: ptssvc, machine debug manager, WAN miniport atw service.

There is a process called mcinfo.exe showing in task manager.
0
 
SheharyaarSaahilCommented:
>> There is a process called mcinfo.exe showing in task manager

and still u cannot find its "any" entry in regedit :-\
use this tool >> http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
and try to find the information on this mcinfo.exe !!
0
 
galfreydayAuthor Commented:
"Mcafee SecurityCenter Update Info
Networks ASsociates Technology, Inc
Version: 4.02.0000.0024

Not sure what you mean by "any" entry in regedit.  There is a data value of "mcinfo.exe" in a file? of type "REG_SZ" in: My Computer: HKEY_USERS/S-1-5-21-3757435101-2243138800-4092590095-1005/Software/Microsoft/ACMru/5603

Little devil is still notifiying me. :O


0
 
galfreydayAuthor Commented:
I checked the "Kill this Process" in the Process Explorer dialog, then following the path it reported to the location of the culprit file, I deleted the entire folder.  Why a search of my hard drive didn't turn up its location, I don't understand.  

Anyway, thanks for taking so much time to help.  Hopefully it is gone for good.  :-)
0
 
SheharyaarSaahilCommented:
my pleasure galf... glad u got rid of it atlast :)
Cheers ^_^
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

  • 8
  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now