+ Post New Thread
Results 1 to 5 of 5
Windows Thread, Mcafee dat #5664 triggers false positives on 5100 engine in Technical; Spotted on El Reg at lunchtime: McAfee false-positive glitch fells PCs worldwide ? The Register It _appears_ to just affect ...
  1. #1


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,649
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224

    Mcafee dat #5664 triggers false positives on 5100 engine

    Spotted on El Reg at lunchtime:

    McAfee false-positive glitch fells PCs worldwide ? The Register

    It _appears_ to just affect machines on mcafee engine 5100 (we're on 53** here) and testing on a spare XP vm* does cause issues if you're on 5100 and use the aforementioned dat file. Nothing happens on 5200 or 5300 when I tested, but I disclaim all responsibilty for anyone acting on the info .

    *snapshots are awesome.

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    I don't use McAfee but this could create big problems for some businesses, especially if BSODs are appearing on workstations and servers. Not quite sure how this'll get fixed, because even if you repaired Windows (which would restore the missing files) McAfee would still remove it when the system's back up

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Last time I dealt with McAfee support I actually found myself having to explain the very concept of a false positive to them. The guy I spoke to insisted that if it was being detected, it must be a virus.

    I uninstalled later that day. McAfee posted their alert over the false positive about two hours after that.

  4. #4


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,649
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224
    We get Mcafee paid for by the LEA / top-sliced. It's..... adequate and while there are better products out there, they all suck in their own ways. Going from free > x thousand a year would involve a fair amount of persuading of the SMT.

    It's worth noting that the 5100 and the 5200 engine are unsupported by Mcafee, so anyone using them needs a kick up the arse. Not that Mcafee aren't complete numptys for not testing thoroughly - the PR fallout alone would make it worthwhile.

  5. #5
    User3204's Avatar
    Join Date
    Aug 2006
    Location
    Wirral
    Posts
    769
    Thank Post
    55
    Thanked 66 Times in 62 Posts
    Rep Power
    34
    We use Mcafee, because it's fairly cheap, but mostly because it was here when I started...

    I hav jus checked a machine with an old version of Mcafee (v 8.0 ) it's running engine 5300 ! so that would mean 5100, is at least two years old.

    Anyone still running that.. really.. deserves anything they get...

SHARE:
+ Post New Thread

Similar Threads

  1. BSF positives - anyone??
    By znova in forum BSF
    Replies: 8
    Last Post: 3rd July 2009, 01:00 PM
  2. clamAV false posittive?
    By RabbieBurns in forum *nix
    Replies: 2
    Last Post: 18th May 2009, 11:08 AM
  3. Replies: 0
    Last Post: 16th March 2009, 12:48 PM
  4. Sophos false positives
    By IanB in forum Windows
    Replies: 5
    Last Post: 17th January 2008, 08:13 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •