New McAfee virus update can freeze some computers

From...

by Joris Evers

(IDG) -- The latest virus definition update for Network Associates' McAfee VirusScan can freeze computer systems, Network Associates has confirmed.

"It can cause the CPU utilization of the machine to go to 100%, effectively freezing the system for an extended period of time," said Simon Leech, an Amsterdam security engineer for Network Associates.

The problem occurs when virus definition file 4102, which was released on Nov. 1, is installed on a machine running VirusScan engine Version 4.0.02. The scan engine and the definition file are incompatible.

MORE COMPUTING INTELLIGENCE

IDG.net home page

Network World Fusion home page

Buying security

Experts predict more mutating viruses

IDG.net's networking page

Reviews & in-depth info at IDG.net

E-BusinessWorld

TechInformer

Questions about computers? Let IDG.net's editors help you

Subscribe to IDG.net's free daily newsletter for network experts

Search IDG.net in 12 languages

News Radio

Fusion audio primers

Computerworld Minute

"We update our engine roughly every three months. Unfortunately we have discovered this definition file doesn't work with this engine," Leech said. The current scan engine version is 4.0.70.

When the computer is restarted the incompatibility causes the system to freeze. On servers running Windows NT the administrator can stop the antivirus service remotely from another machine using the server manager, or use a tool from the resource kit to remotely kill the service, Leech suggested. On desktop computers the user can start Windows in Safe Mode and disable VirusScan.

After getting access to the system the scan engine will have to be updated manually. "Updates of the scan engine are free," Leech said.

"Version 4.0.02 is a more than 2-year-old version of our engine. We generally do not test new definition files with engines over 2 years old," Leech said to explain the cause of the problems. "With all the hype around viruses lately we were hoping our customers would have already updated their scan engines."

Leech couldn't say how many customers were affected by the incompatibility. "Some companies, large as well as small and around the world, have had the problem. We are still assessing the exact number," Leech said.

Computer users who have not updated their antivirus engines for several years, however, may be in for a nasty surprise, Leech said. "Those customers have a false sense of security. Their systems could be infected with all kinds of viruses like Melissa and Love Letter." New versions of the scan engines are made to detect newer viruses. "Love Letter and Melissa required an engine update," Leech said.

Company scans for viruses targeting PDAs, WAP devices
November 3, 2000
Debate erupts over disclosure of software security holes
July 31, 2000
Microsoft scrambling to fix new Outlook security hole
July 21, 2000
Software glitch delays London flights
June 22, 2000
Flaw found in PGP 5.0
May 29, 2000

Company prepares for PDA, WAP viruses
(IT World)
Experts predict more mutating viruses
(NW Fusion)
Buying security
(NW Fusion)
Windows Me demands app upgrades
(PC World)
Network Associates unveils more wireless security
(IDG.net)
McAfee ships cookie-cleaning software
(IDG.net)

Network Associates

Note: Pages will open in a new browser window

External sites are not endorsed by CNN Interactive.