McAfee 5958 DAT update may cause WinXP continuous reboots

Discussion in 'Computer Security' started by PA Bear [MS MVP], Apr 21, 2010.

  1. McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
    http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

    McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
    https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

    EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
    DAT file
    http://community.mcafee.com/docs/DOC-1374
     
    PA Bear [MS MVP], Apr 21, 2010
    #1
    1. Advertisements

  2. From: "PA Bear [MS MVP]" <>

    | McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
    | http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

    | McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
    | https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

    | EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
    | DAT file
    | http://community.mcafee.com/docs/DOC-1374



    http://www.us-cert.gov/current/index.html#mcafee_dat_5958_issues
     
    David H. Lipman, Apr 21, 2010
    #2
    1. Advertisements

  3. PA Bear [MS MVP]

    Peter Foldes Guest

    http://blogs.zdnet.com/Bott/?p=2003&tag=nl.e589
     
    Peter Foldes, Apr 22, 2010
    #3
  4. PA Bear [MS MVP]

    MEB Guest


    There is/are (a) work-around/fix for those affected by this flaw:


    False positive detection of w32/wecorl.a in 5958 DAT (for
    Corporate/Business users) - VirusScan Enterprise
    Corporate KnowledgeBase ID: KB68780
    Published: April 22, 2010

    http://vil.nai.com/vil/5958_false.htm

    Make sure to follow the applicable fix EXACTLY.

    HOME USERS:

    ALERT: 5958 DAT Update Issue (For Home Users Only)
    http://service.mcafee.com/faqdocument.aspx?id=TS100969

    --
    MEB
    http://peoplescounsel.org/ref/windows-main.htm
    Windows Info, Diagnostics, Security, Networking
    http://peoplescounsel.org
    The "real world" of Law, Justice, and Government
    ___---
     
    MEB, Apr 22, 2010
    #4
  5. PA Bear [MS MVP]

    MEB Guest

    On 04/22/2010 05:49 PM, MEB wrote:

    Addendum
    Oops, forgot the Home User How To:
    Restoring SVCHOST.EXE on computers affected by DAT 5958
    http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970

    --
    MEB
    http://peoplescounsel.org/ref/windows-main.htm
    Windows Info, Diagnostics, Security, Networking
    http://peoplescounsel.org
    The "real world" of Law, Justice, and Government
    ___---
     
    MEB, Apr 22, 2010
    #5
  6. From: "MEB" <>




    | Restoring SVCHOST.EXE on computers affected by DAT 5958
    | http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970

    in short...

    copy %windir%\system32\dllcache\svchost.exe %windir%\system32
     
    David H. Lipman, Apr 22, 2010
    #6
  7. PA Bear [MS MVP]

    MEB Guest

    UPDATE:

    McAfee Offers Solution For Home or Home Office Consumers Affected By
    Faulty Update to Security Software
    http://us.mcafee.com/en-us/landingpages/np5959.asp?cid=77220

    The deal?
    Either a couple of fixes [*free phone help*, download a fix, or a
    delivered CD to fix the computer(s)], or potentially reimbursement of
    costs for repairs should that have occurred.

    AND:
    "Additionally, because we value our loyal customers, home or home office
    users whose PCs were rendered inoperable or severely impaired as a
    result of the security update will receive a free two-year extension of
    their current McAfee subscription product at no charge."




    --
    MEB
    http://peoplescounsel.org/ref/windows-main.htm
    Windows Info, Diagnostics, Security, Networking
    http://peoplescounsel.org
    The "real world" of Law, Justice, and Government
    ___---
     
    MEB, Apr 27, 2010
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.