McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
DAT file
http://community.mcafee.com/docs/DOC-1374
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
| McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
| http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
| McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
| https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
| EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
| DAT file
| http://community.mcafee.com/docs/DOC-1374
http://www.us-cert.gov/current/index.html#mcafee_dat_5958_issues
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23vakYqZ...@TK2MSFTNGP05.phx.gbl...
There is/are (a) work-around/fix for those affected by this flaw:
False positive detection of w32/wecorl.a in 5958 DAT (for
Corporate/Business users) - VirusScan Enterprise
Corporate KnowledgeBase ID: KB68780
Published: April 22, 2010
http://vil.nai.com/vil/5958_false.htm
Make sure to follow the applicable fix EXACTLY.
HOME USERS:
ALERT: 5958 DAT Update Issue (For Home Users Only)
http://service.mcafee.com/faqdocument.aspx?id=TS100969
--
MEB
http://peoplescounsel.org/ref/windows-main.htm
Windows Info, Diagnostics, Security, Networking
http://peoplescounsel.org
The "real world" of Law, Justice, and Government
___---
Addendum
Oops, forgot the Home User How To:
> On 04/21/2010 05:35 PM, PA Bear [MS MVP] wrote:
>> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
>> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>>
>> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
>> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>>
>> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the
>> 5958 DAT file
>> http://community.mcafee.com/docs/DOC-1374
>
>
> There is/are (a) work-around/fix for those affected by this flaw:
>
>
> False positive detection of w32/wecorl.a in 5958 DAT (for
> Corporate/Business users) - VirusScan Enterprise
> Corporate KnowledgeBase ID: KB68780
> Published: April 22, 2010
>
> http://vil.nai.com/vil/5958_false.htm
>
> Make sure to follow the applicable fix EXACTLY.
>
> HOME USERS:
>
> ALERT: 5958 DAT Update Issue (For Home Users Only)
> http://service.mcafee.com/faqdocument.aspx?id=TS100969
>
Restoring SVCHOST.EXE on computers affected by DAT 5958
http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970
| Restoring SVCHOST.EXE on computers affected by DAT 5958
| http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970
in short...
copy %windir%\system32\dllcache\svchost.exe %windir%\system32
McAfee Offers Solution For Home or Home Office Consumers Affected By
Faulty Update to Security Software
http://us.mcafee.com/en-us/landingpages/np5959.asp?cid=77220
The deal?
Either a couple of fixes [*free phone help*, download a fix, or a
delivered CD to fix the computer(s)], or potentially reimbursement of
costs for repairs should that have occurred.
AND:
"Additionally, because we value our loyal customers, home or home office
users whose PCs were rendered inoperable or severely impaired as a
result of the security update will receive a free two-year extension of
their current McAfee subscription product at no charge."