Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
McAfee
Mcafee has taken over my pc and locked me out.
Message
<blockquote data-quote="ForgottenSeer 89360" data-source="post: 923927"><p>The alert in question only appears on McAfee Total Protection and McAfee LiveSafe.</p><p>It is normally displayed when something attempts to manipulate legitimate processes. This can be a script registered in scheduled task/run sections or it may be some cross process injection.</p><p>Something similar to the fileless Tesla will cause such alert.</p><p></p><p>Unfortunately, McAfee doesn't save anything in the security history (home products) and it's very difficult to investigate. It is not an intrusion detection (something like Heap Spraying, etc.), as these have a different alert and are then saved in the logs.</p><p></p><p>Of course it can also be a software conflict, specially if another AV with behavioural blocking user-mode hook is installed.</p></blockquote><p></p>
[QUOTE="ForgottenSeer 89360, post: 923927"] The alert in question only appears on McAfee Total Protection and McAfee LiveSafe. It is normally displayed when something attempts to manipulate legitimate processes. This can be a script registered in scheduled task/run sections or it may be some cross process injection. Something similar to the fileless Tesla will cause such alert. Unfortunately, McAfee doesn't save anything in the security history (home products) and it's very difficult to investigate. It is not an intrusion detection (something like Heap Spraying, etc.), as these have a different alert and are then saved in the logs. Of course it can also be a software conflict, specially if another AV with behavioural blocking user-mode hook is installed. [/QUOTE]
Insert quotes…
Verification
Post reply
Top
