Exploit-Mime.gen.c

[Greg Hoch]

I have a machine with XP Professional on it that seems to be infected
with Exploit-Mime.gen.c. I have updated McAfee online and scanned the
computer. It finds 39 "Potentially unwanted programs" in the Temporary
Internet Setting\Content.IE5... folder. I delete them through McAfee
and run the scan again and they are back. I have run this in Safe Mode,
Regular mode etc. It says the files have the above virus. The files
have a .tmp extension. All the McAfee website tells me is to get an
update at Microsoft for IE 5.x but I'm using IE 6 and the update from
Microsoft doesn't install.

If anyone has any suggestions I would appreciate it...

Greg

 

[David H. Lipman]

Very strange:

That's a Generic MIME Exploit indication. Is it a false Positive ?

Assuming the command line scanner is in the path...otherwise the command line scanner is
located in --
C:\Program Files\Common Files\Network Associates\VirusScan Engine\4.0.xx
or
C:\Program Files\Common Files\Network Associates\Engine

Execute the following command line...{beware of line-wrapping}

scan c: /program /sub /mime /unzip /clean /del /html "C:\ScanReport.HTML"

A scan log in HTML format will be generated: C:\ScanReport.HTML
Report back results.


Dave

| I have a machine with XP Professional on it that seems to be infected
| with Exploit-Mime.gen.c. I have updated McAfee online and scanned the
| computer. It finds 39 "Potentially unwanted programs" in the Temporary
| Internet Setting\Content.IE5... folder. I delete them through McAfee
| and run the scan again and they are back. I have run this in Safe Mode,
| Regular mode etc. It says the files have the above virus. The files
| have a .tmp extension. All the McAfee website tells me is to get an
| update at Microsoft for IE 5.x but I'm using IE 6 and the update from
| Microsoft doesn't install.
|
| If anyone has any suggestions I would appreciate it...
|
| Greg

 

[Greg Hoch]

I appreciate the reply Dave but I found a fix. It appears that McAfee
online would report that it had deleted the files but actually was not
getting them deleted. I quarantined the file then went to Manage
Quarantined Files and deleted them. I then ran another scan and they
were gone. Thanks again for the help though I will file that command
line command you sent for future use...

Greg