McAfee glitch causes havoc for IT admins

 

VirusScan update generates false positives.

A recent VirusScan update from McAfee caused mayhem for some IT administrators over the weekend, after it falsely reported that a range of critical system files were infected with a trojan.

The problem became apparent when users began posting to the company's forums, complaining of false positives and even some cases of the dreaded 'blue screen of death'.

The issue seems to affect only those users running an outdated version of the VirusScan engine, but some running the latest version also reported false positives, although not with critical system files.

McAfee has acknowledged a problem, and has released another update which corrects it. However, it appears that machines affected by the glitch will have to be repaired manually, as the quarantined files cannot easily be returned to their original locations.

"Last Friday, McAfee was made aware of some incorrect identification when using no longer supported versions of the software," explained a McAfee spokesman.

"Customers reporting this issue have been confirmed to be running VirusScan Enterprise 7.1 or 8.0i specifically with the 5100 scanning engine that has not been supported for 18 months.

"Customers running 5200 or a newer scanning engine version have not been impacted. Current versions are VSE8.7 and scanning engine 5301. The incorrect identification was resolved in the daily release on Friday July 3rd."

The company has created an entry in its KnowledgeBase detailing the issue and offering potential fixes for those affected.

Copyright ©v3.co.uk


McAfee glitch causes havoc for IT admins
"dlondon wrote: I love that this article doesn't talk about how some company's consultant showed up to find the customers sitting there twiddling their thumbs. I note the article doesn't ..."
By Slatts
 
 
 
Comments: 2
dlondon
Jul 7, 2009 10:35 AM
The ONLY customers impacted are people using the older engines. I haven't heard or found a single instance of anyone using the currently supported product versions, or the current engine. I love that this article doesn't talk about how some company's consultant showed up to find the customers sitting there twiddling their thumbs. Personally, I would have fired that consultant for not making sure the company was using the latest version, engine, etc.
Slatts
Jul 7, 2009 12:03 PM
dlondon wrote:
I love that this article doesn't talk about how some company's consultant showed up to find the customers sitting there twiddling their thumbs.

I note the article doesn't mention the users being attacked by dingos on the beach either.
Did you just pull that out of your head dlondon, or do you have a link or anecdote you'd like to share?
Comments have been disabled for this article.
 
 
 
Top Stories
Telstra shifts BigPond email to Windows Live
All data to be migrated to Microsoft cloud.
 
Windows 8: Under the hood
Part One of iTnews' enterprise guide to Windows 8.
 
iTnews on tour: The Executive Summit Series
Join us in Sydney and Melbourne to meet Australia's tech leaders.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Would you be concerned about your business' email data being hosted offshore?

   |   View results
Yes
  88%
 
No
  12%
TOTAL VOTES: 100

Vote