W32.Wecorl.a (or Variant) Infection across enterprise
in [Anti-Virus]
|
Prev: Recovering from the Flawed McAfee Update
Next: McAfee IDs standard Windows file as a virus. Affects thousands of corporate clients
From: David H. Lipman on 21 Apr 2010 18:05 From: "FromTheRafters" <erratic(a)nomail.afraid.org> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message | news:hqnndj02tt9(a)news3.newsguy.com... >> From: "wperry1" <wperry1(a)gmail.com> >> | My company has just been hit with what seems to be a massive >> infection >> | of a new variant of the W32.wecorl.a virus. It has spread and >> infected >> | a large number of systems in our HQ office and for our remote users. >> | Users boot up and log in then they get a notice from McAfee that an >> | infection was detected and the system shuts down and reboots. >> | Systems are primarily WinXP with up-to-date patches and running >> McAfee >> | VirusScan Enterprise with updated Defs (at least to yesterday) >> | Is anyone else dealing with this? Any ideas on effective widespread >> | removal techniques? >> McAfee f**ked this one up ! >> The 5959 dat files have been released early due to a DAT Issue >> Emergency with the 5958 DAT >> Files. >> The reason for this DAT Issue Emergency is a 'W32/Wecorl.a' False >> Positive in 5958 DAT. >> The various 5959 dat file packages can be found at >> http://www.mcafee.com/apps/downloads/security_updates/dat.asp >> http://www.us-cert.gov/current/index.html#mcafee_dat_5958_issues | Yet another DoS made possible by security software. :o) Bwahahahahahahahahahaha :-) -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: Duh_OZ on 21 Apr 2010 21:28
Reminds me something that happened back in floppies days. McAfee was giving a false positive on an install disk (and yes, it was a false positive) and when I went on vacation a field engineer came in to do maintenance work, put the floppy in, got the virus warning and promptly wiped out the hard drive (as the corporate office told him to do). I had all the files backed up, so I just had to install a few programs and copy the files back. Still a brain dead anti- virus + brain dead F.E. = not a good thing. On a side note, no idea if the work place started rolling out McAfee yet. Still have Trend on the computers by me. |