Curse

Inde · Jul 06, 2009, 02:59 PM // 14:59

McAfee false-positive glitch fells PCs worldwide
Posted in Security, 3rd July 2009 22:48 GMT

IT admins across the globe are letting out a collective groan after servers and PCs running McAfee VirusScan were brought down when the anti-virus program attacked their core system files. In some cases, this caused the machines to display the dreaded blue screen of death.

Details are still coming in, but forums here and here show that it's affecting McAfee customers in Germany, Italy, and elsewhere. A UK-based Reg reader, who asked to remain anonymous because he was not authorized by his employer to speak to the press, said the glitch simultaneously leveled half of a customer's 140 machines after they updated to the latest virus signature file.

"Literally half of the machines were down with this McAfee anti-virus message IDing valid programs as having this trojan," the IT consultant said. "Literally half the office switched off their PCs and were just twiddling their thumbs."

When the consultant returned to his office he was relieved that his own laptop, which also uses VirusScan, was working normally. Then, suddenly, when it installed the latest McAfee DAT file, his computer was also smitten. The anti-virus program identified winvnc.exe and several other legitimate files as malware and attempted to quarantine them. With several core system files out of commission, the machine was rendered an expensive paperweight.

A McAfee representative in the US didn't immediately respond to phone calls seeking comment. Friday is a holiday for many US employees in observance of Saturday's Independence Day.

Based on anecdotes, the glitch appears to be caused when older VirusScan engines install DAT 5664, which McAfee seems to have pushed out in the past 24 hours. Affected systems then begin identifying a wide variety of legitimate - and frequently crucial - system files as malware. Files belonging to Microsoft Internet Explorer, drivers for Compaq computers, and even the McAfee-associated McScript.exe were being identified as a trojan called PWS!hv.aq, according to the posts and interviews.

We're still trying to determine how widespread this false-positive glitch is being felt and whether people have found any reliable fixes.

http://www.theregister.co.uk/2009/07...sitive_glitch/

jiggles · Jul 06, 2009, 04:28 PM // 16:28

Ahahahahahahahahahahahahahahahahahaha. Amazing.

Shayne Hawke · Jul 06, 2009, 05:04 PM // 17:04

Quote:

Originally Posted by Inde

and even the McAfee-associated McScript.exe were being identified as a trojan called PWS!hv.aq, according to the posts and interviews.

An anti-virus program that identifies itself as a virus? Fabulous.

[Morkai] · Jul 06, 2009, 05:05 PM // 17:05

Oh the irony. Thanks Inde.

Bristlebane · Jul 06, 2009, 05:35 PM // 17:35

Only affected European countries?
It's a conspiracy, I tell you! Conspiracy!

Elder III · Jul 06, 2009, 05:57 PM // 17:57

Maybe now peeps will listen when I say to avoid McAfee..... (Norton too btw!!!)

Dakka Dakka · Jul 06, 2009, 06:03 PM // 18:03

Huh, no problems here. Must be because I live in America.

Ariena Najea · Jul 06, 2009, 06:09 PM // 18:09

Quote:

Originally Posted by Inde

Files belonging to Microsoft Internet Explorer, drivers for Compaq computers, and even the McAfee-associated McScript.exe were being identified as a trojan called PWS!hv.aq, according to the posts and interviews.

That is just hilarious.

It's too bad Kaspersky costs so much =(

Brawn Over Brains · Jul 06, 2009, 06:10 PM // 18:10

Yeah.. these shop bought ones seem to suck ass.
I just use Avast. <3

The Air Revenger · Jul 06, 2009, 06:15 PM // 18:15

DAAAAAAAAAAM i was wondering what was going on with McAfee my Laptop is all RED ENGINE GORED ENGINE GORED ENGINE GORED ENGINE GOed up

MisterT69 · Jul 06, 2009, 06:17 PM // 18:17

a program that destroys the computer that it worked so hard to protect. Oh this is just madness...

The Air Revenger · Jul 06, 2009, 06:25 PM // 18:25

anyone know any good free Anti virus - spyware programs i should use after i try to fix my laptop?

Ec]-[oMaN · Jul 06, 2009, 06:35 PM // 18:35

Quote:

Originally Posted by Ariena Najea

It's too bad Kaspersky costs so much =(

Look for it on sale or something. I picked up Kaspersky Internet Security 09 for 20$ 3 users...

refer · Jul 06, 2009, 06:37 PM // 18:37

This isn't that rare. I've heard of NOD32 doing this one but not on this scale. Usually these things are fixed fast but still cause a mess. I do hate McAfee though and always will. Slow, clunky software with options not in easy to find places, not that resource or detection rate good. I wish they'd just die. In 2000 they had a Spyware finder but it really just found everything BUT Spyware and tried to shred it.

Targren · Jul 06, 2009, 07:06 PM // 19:06

Quote:

Originally Posted by The Air Revenger

anyone know any good free Anti virus - spyware programs i should use after i try to fix my laptop?

I use Avast! + spybot S&D. Both free for personal use.

master of puppets · Jul 06, 2009, 07:09 PM // 19:09

owch unlucky i myself use McAfee so im gunna take real care or change anti-virus
lol yeah its a conspiricy sounds like terminator like skynet its become self awear and will launch lots of robots 2 kill ppl :P lol its madness....or maybe ive just been watching too many films