Forbidden Web

Apr 21, 2010 McAfee DAT 5958 Issues
US-CERT is aware of public reports indicating that McAfee DAT release 5958 is incorrectly identifying the valid system file, C:Windowssystem32svchost.exe, as containing malicious code. Reports indicate that a false positive detection occurs on Windows XP Service Pack 3 systems. Symptoms include a denial-of-service condition when the McAfee software attempts to clean the file.

McAfee has released an extra DAT file to rectify the detection of the false positive. US-CERT encourages users and administrators to review the McAfee Virus Profile: W32/Wecorl.a and apply the extra DAT file as necessary to mitigate this issue.