| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 109040 | 2010-04-21 19:58:00 | McAfee ALERT; | kjaada (253) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 878908 | 2010-04-21 19:58:00 | There appears to be a codeing error in the latest McAfee update. See here news.yahoo.com |
kjaada (253) | ||
| 878909 | 2010-04-21 20:56:00 | A restart in safe mode with networking followed by a shutdown -a to stop the forced shutdown should give you time to get in and fix the problem. From the comments here www.neowin.net |
Barnabas (4562) | ||
| 878910 | 2010-04-21 21:34:00 | wow must be big, first item on 8.30 news | nedkelly (9059) | ||
| 878911 | 2010-04-21 21:52:00 | Thousands of people who have XP & McAfee are getting hit with it. :groan: Doesn't affect W7 Typical crap AV anyway. Looks like there is a fix though - from neowin link Barnabas posted: The McAfee 5958 Dat is causing the SVCHost.exe (a critical Windows system file) to be classed as a Virus. Cleansing action against this file is then undertaken making some critical elements of Windows cease to function. Most critically systems are coming back up without any network functionality which makes remote resolution of the issue difficult. Only Windows XP systems seem to be affected at this stage, although we have Windows XP machines with the 5958 update that are not affected. We have a number of clients affected by this issue and have put some resolution steps together to resolve the problem. Our recommendations are below: Option 1 : Manual recovery Boot Windows in to Safe Mode Log on and get to a command prompt Copy the contents of the McAfee OldEngine folder to the parent "Engine" folder. On most machines this will mean copying: "c:\program files\common files\mcafee\engine\oldengine\*.*" to "c:\program files\common files\mcafee\engine" Then copy svchost.exe from the DLLCache to SYS32. Again, on most machines, this will mean copying "c:\windows\system32\dllcache\svchost.exe" to "c:\windows\system32" Reboot your machine Go in to McAfee Console and prevent any automatic updates until you are confident it is safe to re-enable them. Guess the batch file someone posted will be used a lot :D cls Copy /y c:\progra~1\common~1\mcafee\engine\oldengine\*.* c:\progra~1\common~1\mcafee\engine\ copy /y c:\windows\system32\dllcache\svchost.exe c:\windows\system32\ |
wainuitech (129) | ||
| 878912 | 2010-04-21 22:06:00 | I don't understand why people still use McCrappy :X | inphinity (7274) | ||
| 878913 | 2010-04-21 23:28:00 | I don't understand why people still use McCrappy :X Most of the people who use it do not have much choice;They get it for nothing with a box from a dealer who is paid to put it on by McAfee then do not know how to quit it and get out. I have just had a friend who had a problem and called the supplier of his box,the supplier said the problem was MSSE conflicting with his supplied NOD32. So he took MSSE off and all is OK.He now thinks the suppliers techi is some sort of genius. |
kjaada (253) | ||
| 878914 | 2010-04-21 23:35:00 | I have just had a friend who had a problem and called the supplier of his box,the supplier said the problem was MSSE conflicting with his supplied NOD32. So he took MSSE off and all is OK.He now thinks the suppliers techi is some sort of genius. Supplier must at least be half-decent for supplying NOD32! |
inphinity (7274) | ||
| 878915 | 2010-04-22 21:42:00 | Helped a friend with this one. He got stumped on the instruction to copy svchost.exe from the dllcache directory - wasn't there. Checked an XP m/c here and it didn't have it, either. Told him to copy it from the system32\servicepackprograms\i386 directory. Haven't heard back so hope it worked! Pretty hard to believe this escaped even a cursory test. Pity the companies with thousands of machines to fix. |
linw (53) | ||
| 878916 | 2010-04-22 22:27:00 | [QUOTE=kjaada;900368]Most of the people who use it do not have much choice;They get it for nothing with a box from a dealer who is paid to put it on by McAfee then do not know how to quit it and get out.QUOTE] Actually, most of those affected are using the corporate edition products rather than home users, and as such, their IT departments have consciously chosen to install this product on high volumes of machines. |
inphinity (7274) | ||
| 878917 | 2010-04-23 01:40:00 | [QUOTE=kjaada;900368]Most of the people who use it do not have much choice;They get it for nothing with a box from a dealer who is paid to put it on by McAfee then do not know how to quit it and get out.QUOTE] Actually, most of those affected are using the corporate edition products rather than home users, and as such, their IT departments have consciously chosen to install this product on high volumes of machines. Try telling that to my friends and others that have been affected and do not have a clue,other than to get a $60+ per hr techi in to get them back on line. |
kjaada (253) | ||
| 1 | |||||