So who got hit with McAfee issues this morning

[Pegun]

McAfee messed up big time this time. Their newest Entrprise ePO 5958 update found svchost.exe to be virus and sent computers into constant restart loops. Who's companies got hit?

Link
Angry Users are Angry

 

[LikeLinus]

McAfee messed up big time this time. Their newest Entrprise ePO 5958 update found svchost.exe to be virus and sent computers into constant restart loops. Who's companies got hit?

Link
Angry Users are Angry

Do most enterprises automatically roll out antivirus updates without holding off to see if they will cause issues?

 

[Phoenix86]

Do most enterprises automatically roll out antivirus updates without holding off to see if they will cause issues?

Yes.

edit: dat file updates, not actual upgrades, which often aren't fully tested either.

 

[geno]

Whose.

 

[bruceb]

I and our company, no longer use that junk. At work, we are now on Symantec Endpoint Security (not my choice, but it seems ok so far)

 

[Pantlegz]

We're using Symantic End point protection as well. It's not too bad...

 

[daishi5]

We almost bought this. I am so glad we dodged this bullet.

 

[NesuD]

University of Michigan hospital in Ann Arbor is dead in the water right now because of this I am told.

 

[zinfamous]

Ouch.

 

[zinfamous]

University of Michigan hospital in Ann Arbor is dead in the water right now because of this I am told.

Double ouch.

 

[apac]

Cisco got the update, there is a workaround FYI. My coworker just sent this out

It looks like the new virus definitions pushed out by Mcafee today are detecting a false positive of "W32/Wecorl.a" in svchost.exe (http://community.mcafee.com/message/125600#125600) . When it kills this process Windows forces a reboot after one minute, displaying a countdown timer. Here's how to work around this issue:

1. Log in to Windows before the reboot is triggered.
2. Once you get the reboot countdown timer, pull up a command prompt and enter "shutdown /a" to abort the reboot
3. Open "start->program files->mcafee->virus scan console". From the "tools" menu, select "Rollback DAT" to downgrade to the previous virus definitions.

edit: my macbook pro did not get the update

 

[TuxDave]

Everyone here at work got killed by it.... except those of us who showed up late to work and didn't get to install the update. >_>

 

[TheNinja]

Everyone here at work got killed by it.... except those of us who showed up late to work and didn't get to install the update. >_>

lol - ya us too. you can tell which people woke up early and logged into their laptops

 

[gaidensensei]

Well, be happy if you're not in the corporate IT dept. It's free day off, what are you complaining about!?

 

[TuxDave]

lol - ya us too. you can tell which people woke up early and logged into their laptops

And conversely, the bright green "online" status on the Corporate IM is now a list of "people who should get fired for oversleeping". Too bad the people who can do the firing probably has their laptop fubared. WIN!

 

[TallBill]

And conversely, the bright green "online" status on the Corporate IM is now a list of "people who should get fired for oversleeping". Too bad the people who can do the firing probably has their laptop fubared. WIN!

:awe:

 

[Booty]

Wow... I don't know how, but we dodged this bullet somehow. Could have been a *really* bad day.

 

[mrCide]

Thankfully we already know what a pos McAfee stuff is and we use Endpoint, although probably not much better.

 

[Gibson486]

Thankfully we already know what a pos McAfee stuff is and we use Endpoint, although probably not much better.

We have McAfee, but nothing happened to us. Our IT dept was pretty surprised and our local IT person has no idea why we were not effected.

 

[Dirigible]

I'm getting nothing done today because of this crap. I've received like three workarounds. None of them work for me. Sucks big time.

 

[James Bond]

<3

 

[Pegun]

I'm getting nothing done today because of this crap. I've received like three workarounds. None of them work for me. Sucks big time.

Write a vbs to kill the old dat, install 5957 and replace svchost. Our users don't have shutdown command rights so we couldn't fix this any way but techy office visits. Caught it only hours before the entire university went down. Hopefully mcafee thinks long and hard about how this happened because lawsuits may start

 

[Dirigible]

Write a vbs to kill the old dat, install 5957 and replace svchost. Our users don't have shutdown command rights so we couldn't fix this any way but techy office visits. Caught it only hours before the entire university went down. Hopefully mcafee thinks long and hard about how this happened because lawsuits may start

Thanks, but I'm by no means a computer guy so don't really know what a lot of that means.

I'm fiddling around. Managed to do some stuff to mcafee, found where a copy of svchost is so can copy it, don't know if I can get the older virus definitions thingy going...

IT is going to hate me when I finally do get this computer to them...

Edit: I managed to disable mcafee and replace svchost. Computer is finally working. WHOOOOO!!!

 

[SpunkyJones]

We got hit by this earlier today, caused chaos and mayhem for awhile.

 

[theprodigalrebel]

We use McAfee too but I don't work Wednesdays/Thursdays. Dammit, missed the mayhem.