Thanks to all for bringing this to light. Because of this list, we avoided a possible disaster.
Kudos! Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu...@prufoxroach.com <mailto:don.gu...@prufoxroach.com> From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, April 21, 2010 1:09 PM To: NT System Admin Issues Subject: RE: McAfee DAT problems McAfee has an EXTRA.DAT file out now that will fix it. This is the process: To apply the extra.DAT locally: 1. Click Start, Run, type services.msc and click OK. 2. Right-click the McAfee McShield service and select Stop. 3. Copy the extra.DAT file to the following location: <installation drive>\Program Files\Common Files\McAfee\Engine 4. In the Services window, right-click McAfee McShield and select Start. We're writing a batch file and putting this on USB to expedite this (remember this kills network connectivity). From: Ziots, Edward [mailto:ezi...@lifespan.org] Sent: Wednesday, April 21, 2010 12:01 PM To: NT System Admin Issues Subject: RE: McAfee DAT problems Confirmed, this is causing widespread issues, XP and Windows 2000, We are disabling all Mcafee Services, by setting the registry keys start type to 0x4, and uninstalling Mcafee, and removing the the dat from the repository. Z Edward Ziots CISSP,MCSA,MCP+I,Security +,Network +,CCA Network Engineer Lifespan Organization 401-639-3505 ezi...@lifespan.org From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, April 21, 2010 12:33 PM To: NT System Admin Issues Subject: RE: McAfee DAT problems This is nasty. It's putting the svchost.exe in quarantine and causing the system to bomb. When the system comes back up the taskbar is missing, no network connectivity, half the services aren't running and can't be started. You can't even do a system restore point. Right now we've removed the latest DAT, un-quarantined the file, un-installed McCrappy, and go back to a restore point and that seems to be working. We're trying to find a way to streamline it. From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, April 21, 2010 11:13 AM To: NT System Admin Issues Subject: RE: McAfee DAT problems I've only heard through the grapevine, colleagues supporting clients other than mine had to leave a conference call due to DAT issues with 5958, I don't know if it was shutdowns or reboots, and/or different for servers and EUCs ... which is why I asked. Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time event ! ' From: Don Guyer [mailto:don.gu...@prufoxroach.com] Sent: Wednesday, April 21, 2010 11:51 AM To: NT System Admin Issues Subject: RE: McAfee DAT problems My clients are just starting to update, a handful already have it, no complaints yet. What are you seeing? Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 don.gu...@prufoxroach.com From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, April 21, 2010 11:48 AM To: NT System Admin Issues Subject: McAfee DAT problems Anyone else heard of problems with the latest McAfee DAT (5958) ??? Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time event ! ' ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
