This took me by surprise this morning.
Last night I upgraded from Adobe Flash Player 10 to version 11, which gave the option to also install McAfee Security Scan Plus. I opted to install McAfee and everything worked fine.
Upon loading my computer this morning, McAfee popped up with a cryptic message about updating so I let it continue.
Within a matter of time, AVG then popped up saying the following.
I have checked online and the McAfee Security Scan Plus is a safe program.
However, as the initial details state “Unknown” under Threat name, to play safe, I moved the file to the vault, and it was only after I did this that AVG stated it was the McAfee Security Scan Plus that had been deleted. It can easily be restored by reinstalling Adobe, but AVG tends to have a too frequent habit of detecting safe programs and safe sites as being dangerous.
Even after the above, McAfee reappeared, despite the deletion, offering to allow me a Scan. However, McAfee Web Protection is not found and there is the option to install it. This must have been in the program but AVG deleted this part of it. Again, this can easily be reinstalled.
It offers to install McAfee Site Advisor, an equivalent to Comodo’s Web Inspector.
! Threat detected
File name: C:\WINDOWS\TEMP\NSZBF45.TMP\SECURITYSCAN_INNER.EXE
Threat name: Unknown
Severity level: 4
Description: Not available
Move to Vault (Recommended)
Will safely quarantine the infected file to Virus Vault until further decision.
Allow
Will leave the file as it is now.
?
AVG 2012 Help
Identity Protection alert
This dialog informs you that a potential threat has been detected by the Identity Protection component. The dialog displays a name and full path to the suspicious file, name of the detected threat, its severity level and a short description.
AVG Identity Protection
! Threat removal completed
File name: C:\WINDOWS\TEMP\NSZBF45.TMP\SECURITYSCAN_INNER.EXE
Security level: 4
Summary: 8 processes terminated
8 files deleted
1 registry key deleted
AVG Details
Details of threat that was determined to be malware
SECURITYSCAN_INNER.EXE
Time of creation: 30/01/2013, 07:54:54
Full path: C:\WINDOWS\TEMP\NSZBF45.TMP\SECURITYSCAN_INNER.EXE
Details:
8 processses terminated
8 files deleted
1 registry key deleted
Process terminated:
McCHSvc.exe
Process ID: 5492
Full path: C:\Program Files\McAfee Security Scan\3.0.313\McCHSvc.exe
All registry keys deleted:
hkey_local_machine\software\microsoft\windows\currentversion\uninstall\mcafee security scan