Prev: MS Security Essentials versus Windows Defender
Next: Malware clears IP address
From: PA Bear [MS MVP] on 21 Apr 2010 17:35
McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
DAT file
http://community.mcafee.com/docs/DOC-1374
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

From: David H. Lipman on 21 Apr 2010 18:19
From: "PA Bear [MS MVP]" <PABearMVP(a)gmail.com>

| McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
| http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

| McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
| https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

| EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
| DAT file
| http://community.mcafee.com/docs/DOC-1374



http://www.us-cert.gov/current/index.html#mcafee_dat_5958_issues

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: Peter Foldes on 21 Apr 2010 23:49
http://blogs.zdnet.com/Bott/?p=2003&tag=nl.e589

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"PA Bear [MS MVP]" <PABearMVP(a)gmail.com> wrote in message
news:%23vakYqZ4KHA.4016(a)TK2MSFTNGP05.phx.gbl...
> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>
> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>
> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958 DAT
> file
> http://community.mcafee.com/docs/DOC-1374
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002

From: MEB on 22 Apr 2010 17:49
On 04/21/2010 05:35 PM, PA Bear [MS MVP] wrote:
> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>
> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>
> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the
> 5958 DAT file
> http://community.mcafee.com/docs/DOC-1374


There is/are (a) work-around/fix for those affected by this flaw:


False positive detection of w32/wecorl.a in 5958 DAT (for
Corporate/Business users) - VirusScan Enterprise
Corporate KnowledgeBase ID: KB68780
Published: April 22, 2010

http://vil.nai.com/vil/5958_false.htm

Make sure to follow the applicable fix EXACTLY.

HOME USERS:

ALERT: 5958 DAT Update Issue (For Home Users Only)
http://service.mcafee.com/faqdocument.aspx?id=TS100969

--
MEB
http://peoplescounsel.org/ref/windows-main.htm
Windows Info, Diagnostics, Security, Networking
http://peoplescounsel.org
The "real world" of Law, Justice, and Government
___---
From: MEB on 22 Apr 2010 18:01
On 04/22/2010 05:49 PM, MEB wrote:

Addendum
Oops, forgot the Home User How To:

> On 04/21/2010 05:35 PM, PA Bear [MS MVP] wrote:
>> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
>> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>>
>> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
>> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>>
>> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the
>> 5958 DAT file
>> http://community.mcafee.com/docs/DOC-1374
>
>
> There is/are (a) work-around/fix for those affected by this flaw:
>
>
> False positive detection of w32/wecorl.a in 5958 DAT (for
> Corporate/Business users) - VirusScan Enterprise
> Corporate KnowledgeBase ID: KB68780
> Published: April 22, 2010
>
> http://vil.nai.com/vil/5958_false.htm
>
> Make sure to follow the applicable fix EXACTLY.
>
> HOME USERS:
>
> ALERT: 5958 DAT Update Issue (For Home Users Only)
> http://service.mcafee.com/faqdocument.aspx?id=TS100969
>

Restoring SVCHOST.EXE on computers affected by DAT 5958
http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970

--
MEB
http://peoplescounsel.org/ref/windows-main.htm
Windows Info, Diagnostics, Security, Networking
http://peoplescounsel.org
The "real world" of Law, Justice, and Government
___---
 |  Next  |  Last
Pages: 1 2
Prev: MS Security Essentials versus Windows Defender
Next: Malware clears IP address