US-CERT Current Activity

[admin]

US-CERT Current Activity

McAfee DAT 5958 Issues

Original release date: April 21, 2010 at 3:04 pm
Last revised: April 21, 2010 at 3:04 pm


US-CERT is aware of public reports indicating that McAfee DAT release
5958 is incorrectly identifying the valid system file,
C:\Windows\system32\svchost.exe, as containing malicious code. Reports
indicate that a false positive detection occurs on Windows XP Service
Pack 3 systems. Symptoms include a denial-of-service condition when
the McAfee software attempts to clean the file.

McAfee has released an extra DAT file to rectify the detection of the
false positive. US-CERT encourages users and administrators to review
the McAfee Virus Profile: W32/Wecorl.a and apply the extra DAT file as
necessary to mitigate this issue.

Relevant Url(s):
<http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=265240#none>

====
This entry is available at
http://www.us-cert.gov/current/index.ht ... 958_issues