Results 1 to 6 of 6

Thread: Buggy McAfee Update Causing Windows XP Machines to Shut Down

  1. #1
    Corrine's Avatar
    Corrine is offline Gold Member
    Join Date
    Jan 2009
    Location
    Upstate NY
    Posts
    961

    Exclamation Buggy McAfee Update Causing Windows XP Machines to Shut Down

    Fortunate for Windows Vista & Windows 7 folks, this only affected Windows XP PCs:


    Early reports attributed the widespread problems to a routine McAfee update that caused computers with Microsoft's Service Pack 3 installed to incorrectly identify a legitimate operating system component as containing a virus.



    A McAfee representative confirmed the problem to CNET, and said the buggy update code had been removed from the company's servers and that a fixed version would be made available shortly.

    "McAfee is aware that a number of customers have incurred a false-positive error due to incorrect malware alerts on Wednesday, April 21. The problem occurs with the 5958 virus definition file (DAT) that was released on April 21" at 6 a.m. PT, the company said in a statement.
    Buggy McAfee update slams Windows XP PCs | Security - CNET News

    ICS reported that it was a false positive which identifies a regular Windows binary, "svchost.exe", as "W32/Wecorl.a", a virus.

    Recovery information at ICS: McAfee DAT 5958 Update Issues

  2. #2
    HappyAndyK's Avatar
    HappyAndyK is offline Site Administrator
    Join Date
    Jun 2008
    Posts
    7,559

    Default

    Microsoft has issued an Alert:

    What is the purpose of this alert?

    Microsoft has been made aware of an issue with a McAfee DAT file update - released Wednesday, April 21, 2010 - that has been causing stability issues on Windows XP client systems. The symptom is caused by a false-positive detection on a core Windows file (svchost.exe). Once the file is quarantined by McAfee, the system may encounter one of the following symptoms:

    The computer shuts down when a DCOM error or a RPC error occurs
    The computer continues to run without network connectivity.
    The computer triggers a Bugcheck (Blue Screen).

    The DAT file version that that caused the problem is McAfee DAT 5958. This file was propagated to client machines that conduct automatic updates of definition files. McAfee updated the DAT file soon after the problem was identified with a new version that does not cause the problem.

    Resolution Steps
    Please review the following KB Articles for specific steps to resolve the issue on systems that are affected.

    McAfee KB Article:
    https://kc.mcafee.com/corporate/inde...ent&id=KB68780

    Microsoft KB Article:

    McAfee delivers a false positive detection of the W32/wecorl.a virus when McAfee uses a 5958 DAT file

    Recommendations
    We recommend customers affected by this symptom first review the McAfee KB Article referenced above. For further assistance, customers should contact McAfee. Customers who are unable to resolve the issue through these means can contact Microsoft for technical support using resources found on this Web page: Microsoft Support.

    Regarding Information Consistency
    We strive to provide you with accurate information in static (this mail) and dynamic (Web-based) content. Microsoft’s security content posted to the Web is occasionally updated to reflect late-breaking information. If this results in an inconsistency between the information here and the information in Microsoft’s Web-based security content, the information in Microsoft’s Web-based security content is authoritative.

  3. #3
    riteshtechie's Avatar
    riteshtechie is offline Software Developer
    Join Date
    Mar 2009
    Posts
    880

    Default

    Yeah got the mail from MS today.

    Fortunately I don't use XP anymore nor Mcafee

  4. #4
    Corrine's Avatar
    Corrine is offline Gold Member
    Join Date
    Jan 2009
    Location
    Upstate NY
    Posts
    961

    Default

    McAfee has a lot of Enterprise customers and I'll bet a good number of them are still using Windows XP.

  5. #5
    HappyAndyK's Avatar
    HappyAndyK is offline Site Administrator
    Join Date
    Jun 2008
    Posts
    7,559

    Default

    ^ True.

    Looks like McAfee plans to reimburse people who have spent money getting their computers fixed after they were damaged by last week's security update an also is offering a two-year extension to subscribers whose PCs were messed by the update

    Antivirus, AntiSpam, Anti-Spyware Software For Your PC | McAfee

  6. #6
    Digerati's Avatar
    Digerati is offline Windows Enthusiast
    Join Date
    Apr 2010
    Location
    Nebraska, USA
    Posts
    95

    Default

    They are going to have to do something if they want to keep folks as clients. I note there were several government and educational institutions affected too.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22