McAfee DAT 5958 Update Issues

 McAfee DAT 5958

Updated

Resolving the recent update issues with McAfee Consumer Products

https://us.mcafee.com/root/ProductUpdate.asp?cid=35172


 

Today at a client I heard of this Issue and wanted to make sure other got a chance to fix it. 

The following information was found on this link http://isc.sans.org/diary.html?storyid=8656

We have received several reports indicating some issues with McAfee DAT 5958 causing Windows XP SP3 clients to be locked out. It is affecting svchost.exe. Here is an example of the message:

The file C:WINDOWSsystem32svchost.exe contains the W32/Wecorl.a Virus. Undetermined clean error, OAS denied access and continued. Detected using Scan engine version 5400.1158 DAT version 5958.0000.

 

McAfee has posted additional information here.

Anyone else affected by this? How are you affected? Please contact us via our contact page.

 

Update 1

Symptoms are: reboot loops and networking down. Trying to roll back to last version is difficult.

 

Early analysis leads us to believe the false positive only occurs on WinXP workstations with SP3 installed.

 

Dennis indicated that for him it appears to only affect systems connected to the internet and/or non-domain members. Workstations on the domain with the bad DAT appear do not appear to be affected.

 

Other Sources You Can Use To stay Updated:

If You have any other solutions or experiences feel free to share. 

Blog Listing