Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Troubleshooting
Research
Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

Could Mcafee Quick Clean or an infection be deleting my document files?

Avatar of Tony Simmons
Tony SimmonsFlag for United Kingdom of Great Britain and Northern Ireland asked on
Anti-Virus Apps
3 Comments1 Solution1080 ViewsLast Modified:
I have a DELL XPS M1530 with Vista Ultimate on which I'm having trouble with files being deleted overnight. It seems to be limited to the Documents folder although the first time it also affected the Videos and Pictures folders.

Some of the folders are renamed e.g. 'My Settings' becomes MYSETT~1.SH! and files within it are deleted. It happens between 0100 and about 0400 GMT, coincidentally when McAfee Quick Clean was scheduled to run. This has happened 3 times now, restoring the files using Vista's Previous Versions process.

I have carried out a full virus scan using McAfee SecurityCenter and spyware scan using SpySweeper - both report back clean and both are up-to-date.

I have created a HijackThis log that doesn't appear to have anything odd in it but I'm not an expert. I have run ComboFIx.exe a few times because the log didn't generate and there was an error message that it couldn't find the file whitedir01 on one occasion. The log fom the last run doesn't appear suspicious to my untrained eye.

The only potential adware file I've found is CSAUIE1.OCX which I believe is a coupon printer kindly provided to me by Nescafe but that was after the original problem first happened and I don't think is linked to this.

I've searched, scanned, recovered files, deliberately avoided posting any logs but can't find anything that relates to this issue (not helped by having trouble getting a search of ".SH!" as a file extension to work as I want it to).

I'm getting pretty stuck now and have no idea whether I've had an infection, cured it or whether it will happen again overnight tonight when I restore the files.

Any help will be greatly appreciated. Thanks in advance

Tony



ASKER CERTIFIED SOLUTION
Avatar of wulf01
wulf01

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Commented:
This problem has been solved!
Unlock 1 Answer and 3 Comments.
See Answers