McAfee shows "on" status

[Zylstra]

In my Security Center of Windows Vista, it shows McAfee VirusScan as running. When I first got my laptop from Dell, they decided to be part of the Wonder Twin team, and went right ahead installing bunches of trial software for me...

Anyways, now, when I go into Security Center, and check Malware, I see:

And when I click the link to show me the scanners running, I see:


Its not causing a problem, but is an annoyance. If avast! found itself disabled, and didnt warn me itself, I would never know.

[Broni]

Can't you uninstall McAfee from Add/Remove?

[Zylstra]

Can't you uninstall McAfee from Add/Remove?

Last I checked, it wasnt there. But, I will check again
(Result: Windows Explorer has stopped working)
Lets try again...
(Windows at its best)
(While I am waiting:)
There are no services loaded or processes that start with an M that have to do with McAfee.
McAfee Site Advisor* is the only name on my PC with McAfee in it right now.

*Advisor is how McAfee spells it. They made a typo in their product
It should be Adviser

[Broni]

Did you try "Autoruns" to see, if it's hiding somewhere?
Check through HJT, too.

[Zylstra]

Did you try "Autoruns" to see, if it's hiding somewhere?
Check through HJT, too.

Its not under Startup (viewing in MSCONFIG)
Ill scan my registry (sometimes, I wish companies would STOP using the registry!)
Edit: Forgot to add: Didnt find anything that had to do with McAfee VirusScan

If I really must, I can try HijackThis. (But not today)

[Broni]

Registry is probably your best shot, however sometimes, finding something there may be dificult.
HJT may show something. You may just post it, and I'll take a look.
services.msc would be worth to check, as well.

[Zylstra]

http://pastebin.com/m13a7564e

Feel free to list other things I should remove
Thanks for looking, I trash my computer with software.
(Tags marked as <name> contain my real name, and I have removed them to protect my identity online)

[Broni]

I trash my computer with software.

Don't worry about it. I do same thing...LOL

First of all, I can't see anything related to McAfee (in services, as well), so your best bet must be painful registry search.
Secondly, you're using 1.99.1 ver. of HJT. With Vista, you may want to go with ver. 2.0.2.

Now, couple of items, you can "fix" (mostly cosmetic):

- O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

- O9 - Extra button: Trend Micro Security Services - {D5E1CDC8-64B9-4f8c-8155-FC3B6D6749F7} - http://tmss.trendmicro.com/dashboard/dashboard.aspx?JAGFGDJIDIHCJBJDCHBABIGDJCII CEBAHIHHF (file missing)

- O9 - Extra 'Tools' menuitem: Trend Micro Security Services - {D5E1CDC8-64B9-4f8c-8155-FC3B6D6749F7} - http://tmss.trendmicro.com/dashboard/dashboard.aspx?JAGFGDJIDIHCJBJDCHBABIGDJCII CEBAHIHHF (file missing)

- O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - (no file)

Then, I can see couple of entries, which you may reconsider as startups:

- O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime

- O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
   
- O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe

- O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
(use Adobe Reader SpeedUp: http://www.softpedia.com/get/Office-tools/PDF/Adobe-Reader-SpeedUp.shtml, which you use just once, instead of running your application as a startup, or switch to FoxIt: http://www.foxitsoftware.com/pdf/rd_intro.php, which is much more slimmer, then Adobe)

- O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
(needed as a startup only if you overclock your card)

- O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
(System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties)

- O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
(if you use "hot keys" for changing setting on Nvidia graphics)

- O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
(if you want to access Windows Messenger from within Windows Media Center Edition)

And I wonder:
- O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
I was using this thing for a while, but I really didn't see any significant difference, so I got rid of it.

You have also several services (O23) with "(file missing)". They are all legit Vista services, so I assume, you played a little with services, and you disabled some of them???

[Zylstra]

For the most part of a time, I am using a High Speed Fiber Internet connection (100MBPS)
Google Web Accelerator does greatly speed up sites on slower connections then mine.

http://pastebin.com/m5754ea84
New HJT program log (some of the stuff you recommended above is still there)

[patio]

I'm not questioning what you're saying but with that connection there isn't an accelerator out there that will improve things...

[Zylstra]

I'm not questioning what you're saying but with that connection there isn't an accelerator out there that will improve things...

Google caches data from sites, and since Google is faster than most sites out there (server speed, and connection) it ends up on my machine faster (physical distance makes a difference as well)
Thus, allowing it to go faster. It wont accelerate sites that don't need to be, and it will not accelerate downloads.

[patio]

Even with google cacheing sites... how long does it take to find the cache file and load it as opposed to the page loading by itself ? ?
I'm not buyin it. There are still server issues, distance and indexing all taking place faster than a page can load ? ?

[Zylstra]

Even with google cacheing sites... how long does it take to find the cache file and load it as opposed to the page loading by itself ? ?
I'm not buyin it. There are still server issues, distance and indexing all taking place faster than a page can load ? ?

I dont know the backend working of Google Web Accelerator, but I have noticed significant speed increase on some servers. I have not noticed any decreases. It really depends on what sort of connection you have...

[Broni]

some of the stuff you recommended above is still there

You didn't want to disable them, or...?

[Zylstra]

some of the stuff you recommended above is still there

You didn't want to disable them, or...?

Couldent find them the second time I ran HJT, actually