Re: Botched McAfee update shutting corporate XP machines worldwide

[John Jones <chianime@xxxxxxxxx>]

Fix is available.  From McAfee:

Emergency DAT 5959 has been posted and is available at
http://www.mcafee.com/apps/downloads/security_updates/dat.asp<http://www.mcafee.com/apps/downloads/security_updates/dat.asp?elq_mid=2363&elq_cid=50456>.
This file is available in English and is replicating in other languages. For
MORE information, go to the 5958 DAT Report on
http://vil.nai.com/vil/5958_false.htm<http://vil.nai.com/vil/5958_false.htm?elq_mid=2363&elq_cid=50456>.


*
================================
UPDATE (12:47pm US/CDT)*

McAfee is aware that a number of corporate customers have incurred a false
positive error due to incorrect malware alerts. Our initial investigation
indicates that the error can result in moderate to significant performance
issues on systems running Windows XP Service Pack 3.

The 5958 DAT has been removed from McAfee download servers, preventing any
further impact to corporate customers. McAfee teams are working with the
highest priority to support impacted customers and plan to provide an update
virus definition file shortly. You can view information at
https://kc.mcafee.com/corporate/index?elq_mid=2363&elq_cid=50456&page=content&id=KB68780
(NOTE:
system is currently slow) or the McAfee Community at
http://community.mcafee.com/docs/DOC-1374/<http://community.mcafee.com/docs/DOC-1374/?elq_mid=2363&elq_cid=50456>
**

We will notify you of an emergency update when available, or in 90 minutes.

*================================**
ORIGINAL EMAIL (11:06am US/CDT)*

McAfee is aware of a w32/wecorl.a false positive with the 5958 DAT file
April 21 at  2:00pm (GMT +1). McAfee advises NOT to download this DAT.
Please disable pull tasks and update tasks.



Information updates will be sent every 90 minutes to keep you advised.


On Wed, Apr 21, 2010 at 7:41 PM, Norm Dennis <nhdennis@xxxxxxxxxxx> wrote:

> Ouch, how messy is that!
> Was there no QA done?
>
>
> Norm Dennis
>
> -----Original Message-----
> From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx] On
> Behalf Of sjl
> Sent: Thursday, 22 April 2010 7:19 AM
> To: pctech@xxxxxxxxxxxx
> Subject: [PCTECH] Botched McAfee update shutting corporate XP machines
> worldwide
>
>
> http://www.engadget.com/2010/04/21/mcafee-update--shutting-down-xp-machines/
>
> ?icid=main|aim|dl6|link5|http://www.engadget.com/2010/04/21/mcafee-update--s
> hutting-down-xp-machines/<http://www.engadget.com/2010/04/21/mcafee-update--shutting-down-xp-machines/%0A?icid=main%7Caim%7Cdl6%7Clink5%7Chttp://www.engadget.com/2010/04/21/mcafee-update--s%0Ahutting-down-xp-machines/>
>
> http://preview.tinyurl.com/2ew9he8
>
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 9.0.814 / Virus Database: 271.1.1/2826 - Release Date: 04/21/10
> 19:09:00
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.