Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

McAfee 5958 DAT update may cause WinXP continuous reboots

1 view
Skip to first unread message

PA Bear [MS MVP]

unread,
Apr 21, 2010, 5:35:29 PM4/21/10
to
McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
DAT file
http://community.mcafee.com/docs/DOC-1374
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

David H. Lipman

unread,
Apr 21, 2010, 6:19:07 PM4/21/10
to
From: "PA Bear [MS MVP]" <PABe...@gmail.com>

| McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
| http://tools.cisco.com/security/center/viewAlert.x?alertId=20375

| McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
| https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780

| EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the 5958
| DAT file
| http://community.mcafee.com/docs/DOC-1374

http://www.us-cert.gov/current/index.html#mcafee_dat_5958_issues

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


Peter Foldes

unread,
Apr 21, 2010, 11:49:18 PM4/21/10
to
http://blogs.zdnet.com/Bott/?p=2003&tag=nl.e589

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23vakYqZ...@TK2MSFTNGP05.phx.gbl...

MEB

unread,
Apr 22, 2010, 5:49:09 PM4/22/10
to
On 04/21/2010 05:35 PM, PA Bear [MS MVP] wrote:
> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>
> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>
> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the
> 5958 DAT file
> http://community.mcafee.com/docs/DOC-1374


There is/are (a) work-around/fix for those affected by this flaw:


False positive detection of w32/wecorl.a in 5958 DAT (for
Corporate/Business users) - VirusScan Enterprise
Corporate KnowledgeBase ID: KB68780
Published: April 22, 2010

http://vil.nai.com/vil/5958_false.htm

Make sure to follow the applicable fix EXACTLY.

HOME USERS:

ALERT: 5958 DAT Update Issue (For Home Users Only)
http://service.mcafee.com/faqdocument.aspx?id=TS100969

--
MEB
http://peoplescounsel.org/ref/windows-main.htm
Windows Info, Diagnostics, Security, Networking
http://peoplescounsel.org
The "real world" of Law, Justice, and Government
___---

MEB

unread,
Apr 22, 2010, 6:01:09 PM4/22/10
to
On 04/22/2010 05:49 PM, MEB wrote:

Addendum
Oops, forgot the Home User How To:

> On 04/21/2010 05:35 PM, PA Bear [MS MVP] wrote:
>> McAfee VirusScan DAT Update May Cause Microsoft Windows System Failure
>> http://tools.cisco.com/security/center/viewAlert.x?alertId=20375
>>
>> McAfee KnowledgeBase - False positive detection of w32/wecorl.a in 5958 DAT
>> https://kc.mcafee.com:443/corporate/index?page=content&id=KB68780
>>
>> EXTRA.DAT to suppress detection of w32/wecorl.a false positive with the
>> 5958 DAT file
>> http://community.mcafee.com/docs/DOC-1374
>
>
> There is/are (a) work-around/fix for those affected by this flaw:
>
>
> False positive detection of w32/wecorl.a in 5958 DAT (for
> Corporate/Business users) - VirusScan Enterprise
> Corporate KnowledgeBase ID: KB68780
> Published: April 22, 2010
>
> http://vil.nai.com/vil/5958_false.htm
>
> Make sure to follow the applicable fix EXACTLY.
>
> HOME USERS:
>
> ALERT: 5958 DAT Update Issue (For Home Users Only)
> http://service.mcafee.com/faqdocument.aspx?id=TS100969
>

Restoring SVCHOST.EXE on computers affected by DAT 5958
http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970

David H. Lipman

unread,
Apr 22, 2010, 6:28:29 PM4/22/10
to
From: "MEB" <MEB-no...@hotmail.com>


| Restoring SVCHOST.EXE on computers affected by DAT 5958
| http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100970

in short...

copy %windir%\system32\dllcache\svchost.exe %windir%\system32

MEB

unread,
Apr 26, 2010, 8:27:10 PM4/26/10
to

UPDATE:

McAfee Offers Solution For Home or Home Office Consumers Affected By
Faulty Update to Security Software
http://us.mcafee.com/en-us/landingpages/np5959.asp?cid=77220

The deal?
Either a couple of fixes [*free phone help*, download a fix, or a
delivered CD to fix the computer(s)], or potentially reimbursement of
costs for repairs should that have occurred.

AND:
"Additionally, because we value our loyal customers, home or home office
users whose PCs were rendered inoperable or severely impaired as a
result of the security update will receive a free two-year extension of
their current McAfee subscription product at no charge."

0 new messages