McAfee Antivirus Update Halts Corporate PCs

Talk about "WhatEVER !"..
Post Reply
Message
Author
GomJabbar
Moderator
Moderator
Posts: 9765
Joined: Tue Jun 07, 2005 6:57 am

McAfee Antivirus Update Halts Corporate PCs

#1 Post by GomJabbar » Thu Apr 22, 2010 12:36 am

McAfee Antivirus Update Halts Corporate PCs

Recovering from the Flawed McAfee Update
PC World wrote:Nothing ruins an IT administrator's day faster than a software update from a security vendor wreaking havoc on the computer systems it is intended to protect. That is exactly the predicament faced by many IT administrators today when a flawed McAfee update rendered Windows XP PC's essentially useless.
DKB

A31
Senior Member
Senior Member
Posts: 845
Joined: Mon Dec 21, 2009 11:33 am
Location: Norwich, UK

Re: McAfee Antivirus Update Halts Corporate PCs

#2 Post by A31 » Thu Apr 22, 2010 1:01 am

I don't like McAffee - I use Kaspersky Internet Security 2010 on the desktop and AVG Free 9.0 on the A31.

When I first got the A31, it had McAffee on it and it so slow I just re-installed Windows and installed AVG and it ran fine!
Lenovo ThinkPad L540 | Core i5 4200M | 8GB 1600MHz RAM | 1920x1080 Display | UltraNav with Fingerprint Reader | Seagate SSHD 1TB | 720p Webcam | 6 Cell 56Wh Battery | Windows 8.1 Pro x64

Past: IBM ThinkPad A31, R40

My custom-built desktop - see pics!

GomJabbar
Moderator
Moderator
Posts: 9765
Joined: Tue Jun 07, 2005 6:57 am

Re: McAfee Antivirus Update Halts Corporate PCs

#3 Post by GomJabbar » Thu Apr 22, 2010 6:18 am

I am not really a fan of McAfee either, but Comcast (my ISP) offers McAfee free for their customers. Because of this I have McAfee installed on my desktop PC (which I don't use much). We all primarily use our laptops in my household. Hopefully this PC was shutdown or the version of McAfee on it is the older version when the problem update was sent out by McAfee. I am currently out of town on business, so that is why I don't know the status of this desktop PC with Windows XP SP3.

Note that Windows 7 and Vista machines are not affected.
DKB

neenee
Freshman Member
Posts: 104
Joined: Tue Aug 05, 2008 3:16 pm
Location: Gelderland, Netherlands

Re: McAfee Antivirus Update Halts Corporate PCs

#4 Post by neenee » Thu Apr 22, 2010 6:40 am

It's always good practice to give program updates some time and any admin should hold off updating until they need the new features/fixes.

RealBlackStuff
Admin
Admin
Posts: 17512
Joined: Mon Sep 18, 2006 5:17 am
Location: Mt. Cobb, PA USA
Contact:

Re: McAfee Antivirus Update Halts Corporate PCs

#5 Post by RealBlackStuff » Thu Apr 22, 2010 6:53 am

This one was for corporate McAfee versions only, and is 'pushed' automatically.
Apparently this 'update' deleted Windows\System32\svchost.exe, making all internet access impossible.
Great job, McAfee!!!
Lovely day for a Guinness! (The Real Black Stuff)

Check out The Boardroom for Parts, Mods and Other Services.

Marin85
Senior ThinkPadder
Senior ThinkPadder
Posts: 2975
Joined: Sat May 12, 2007 10:54 am
Location: Munich, Germany

Re: McAfee Antivirus Update Halts Corporate PCs

#6 Post by Marin85 » Thu Apr 22, 2010 9:47 am

RealBlackStuff wrote:...this 'update' deleted Windows\System32\svchost.exe...
LoL...

Windows 7 and Vista are not affected probably because they are better at protecting system files (especially Windows 7) :?:
IBM Lenovo Z61p | 15.4'' WUXGA | Intel Core 2 Duo T7400 2x 2.16GHz | 4 GB Kingston HyperX | Hitachi 7K500 500 GB + WD 1TB (USB) | ATI Mobility FireGL V5200 | ThinkPad Atheros a/b/g | Analog Devices AD1981HD | Win 7 x86 + ArchLinux 2009.08 x64 (number crunching)

BillMorrow
*Senior* Admin
*Senior* Admin
Posts: 7154
Joined: Tue Apr 13, 2004 9:40 pm
Location: San Francisco -> Florida -> Georgia
Contact:

Re: McAfee Antivirus Update Halts Corporate PCs

#7 Post by BillMorrow » Wed Apr 28, 2010 3:20 am

should you all be saying "Symantec-McAfee" rather than merely "McAfee"..?

i never likes symantec..
all the good products they buy seem to languish and become less effective over time..
Bill Morrow, kept by parrots :parrot: & cockatoos
Sysop - forum.thinkpads.com

*
She was not what you would call refined,
She was not what you would call unrefined,
She was the type of person who kept a parrot.
~~~Mark Twain~~~

Marin85
Senior ThinkPadder
Senior ThinkPadder
Posts: 2975
Joined: Sat May 12, 2007 10:54 am
Location: Munich, Germany

Re: McAfee Antivirus Update Halts Corporate PCs

#8 Post by Marin85 » Wed Apr 28, 2010 6:07 am

Oh, I didn´t know that Symantec bought McAfee... That probably explains a lot... The only thing I ever liked about Symantec was the GUI of their AV :jhem:
IBM Lenovo Z61p | 15.4'' WUXGA | Intel Core 2 Duo T7400 2x 2.16GHz | 4 GB Kingston HyperX | Hitachi 7K500 500 GB + WD 1TB (USB) | ATI Mobility FireGL V5200 | ThinkPad Atheros a/b/g | Analog Devices AD1981HD | Win 7 x86 + ArchLinux 2009.08 x64 (number crunching)

RealBlackStuff
Admin
Admin
Posts: 17512
Joined: Mon Sep 18, 2006 5:17 am
Location: Mt. Cobb, PA USA
Contact:

Re: McAfee Antivirus Update Halts Corporate PCs

#9 Post by RealBlackStuff » Wed Apr 28, 2010 7:00 am

So far they are still competing with one another.

Among others, Symantec has bought up and destroyed: Peter Norton (Norton Utilities), Sygate (Firewalls), Powerquest (Drive Image and Partition Magic), PC Tools (still independent, but slowly going to the dogs), and others I can't remember right now.

On McAfee (from wikipedia):
On April 21, 2010, beginning approximately at 2 PM GMT, millions of computers worldwide running Windows XP Service Pack 3 were affected by an erroneous virus definition file update by McAfee, resulting in the removal of a Windows system file (svchost.exe) on those machines, causing machines to lose network access and, in some cases, enter a reboot loop.
Mcafee rectified this by removing and replacing the faulty DAT file, version 5958, with an emergency DAT file, version 5959 and has posted a fix for the affected machines in their consumer knowledge base.
The damage was widespread: the University of Michigan's medical school reported that 8,000 of its 25,000 computers crashed. Police in Lexington, Ky., resorted to hand-writing reports and turned off their patrol car terminals as a precaution. Some jails canceled visitation, and Rhode Island hospitals turned away non-trauma patients at emergency rooms and postponed some elective surgeries. Australian supermarket behemoth Coles reported that 10 percent (1,100) of its point-of-sales terminals were affected and was forced to shut down stores in both western and southern parts of the country.

Now who in their right mind would buy products of any of these klutzes?
Not me, ever!
Lovely day for a Guinness! (The Real Black Stuff)

Check out The Boardroom for Parts, Mods and Other Services.

A31
Senior Member
Senior Member
Posts: 845
Joined: Mon Dec 21, 2009 11:33 am
Location: Norwich, UK

Re: McAfee Antivirus Update Halts Corporate PCs

#10 Post by A31 » Fri Apr 30, 2010 2:34 pm

Kaspersky Internet Security 2010 all the way!!!! Never McAfee.

But the update probably deleted the file in System32 that makes an Internet connection possible because McAffee thought that if you didn't have any internet access than you can't get any viruses, malware, spyware, trojans etc!! :lol:
Lenovo ThinkPad L540 | Core i5 4200M | 8GB 1600MHz RAM | 1920x1080 Display | UltraNav with Fingerprint Reader | Seagate SSHD 1TB | 720p Webcam | 6 Cell 56Wh Battery | Windows 8.1 Pro x64

Past: IBM ThinkPad A31, R40

My custom-built desktop - see pics!

Marin85
Senior ThinkPadder
Senior ThinkPadder
Posts: 2975
Joined: Sat May 12, 2007 10:54 am
Location: Munich, Germany

Re: McAfee Antivirus Update Halts Corporate PCs

#11 Post by Marin85 » Fri Apr 30, 2010 5:37 pm

A31 wrote:But the update probably deleted the file in System32 that makes an Internet connection possible because McAffee thought that if you didn't have any internet access than you can't get any viruses, malware, spyware, trojans etc!! :lol:
:lol: Right, save the user from himself!
IBM Lenovo Z61p | 15.4'' WUXGA | Intel Core 2 Duo T7400 2x 2.16GHz | 4 GB Kingston HyperX | Hitachi 7K500 500 GB + WD 1TB (USB) | ATI Mobility FireGL V5200 | ThinkPad Atheros a/b/g | Analog Devices AD1981HD | Win 7 x86 + ArchLinux 2009.08 x64 (number crunching)

Post Reply
  • Similar Topics
    Replies
    Views
    Last post

Return to “Off-Topic Stuff”

Who is online

Users browsing this forum: No registered users and 2 guests