: McAfee Glitch: False + Wecorla.a virus


Roland of Gilead
2010-04-21, 08:56 PM
Anyone have a problem today with that bad DAT file? I did but only that it wouldn't scan for viruses then it would reboot? Sounds like some computers were in continual reboot mode.

Tezster
2010-04-21, 10:03 PM
Had this problem with some of our machines at work - we've withdrawn the DAT file for the time being.

Larry
2010-04-21, 10:43 PM
This problem had me knocked out most of the day at work. Got the new .DAT file distributed to my machine at 11:48 and a few minutes later I was hosed.

Case of the medicine being as bad as the disease. Don't they test before distributing to the world? Makes you wonder sometimes.

MarcP
2010-04-22, 08:13 AM
Reminds me of the huge BitDefender fiasco of a few weeks ago where it suddenly started quarantining Windows and even itself. Rendering countless of computer unbootable around the world (http://news.zdnet.com/2100-9595_22-406208.html?tag=content;col1). Huge lesson to learn for all AV makers.

hugh
2010-04-22, 09:07 AM
From what I read yesterday this likely affected hundreds of thousands of computers and was nasty because it couldn't be fixed remotely.

Can you adjust McAfee to wait 24 hours before updating the latest virus signatures? I realize this could compromise your machine but I think the risk might be worth the wait!

Roland of Gilead
2010-04-22, 10:12 AM
From what I read yesterday this likely affected hundreds of thousands of computers and was nasty because it couldn't be fixed remotely.

Can you adjust McAfee to wait 24 hours before updating the latest virus signatures? I realize this could compromise your machine but I think the risk might be worth the wait!
Yes you can manually download or be prompted to install the file that has been downloaded but not installed.
From what I have read there doesn't seem to be much mention of home users being affected or maybe we are small potatoes. The only reason I noticed a problem was because I was manually running a viruscan and the machine rebooted after coming across the affected file, svchost.exe.
There was a rather complicated fix involved and they were supposed to be working on a automatic fix, I restored my computer to the day before and this seems to have solved the problem.

Actually there is a fix available now for home users:

http://service.mcafee.com/FAQDocument.aspx?id=TS100969&lc=&pf=1

sleemo
2010-04-23, 07:26 AM
We have McAfee at work, 500+ PCs. They pull their DATs off our ePO server, not from McAfee directly. I set it to be about a day behind so we didn't get hit with this problem (thank God!). When I checked yesterday how many of our PCs were running the bad DAT, only 2 of 500+ were. For some reason, those two must have gotten their own DATs from McAfee. I'll wait and see if they call our help desk. :D