False positives create issues for McAfee users

The ultimate nightmare for an Antivirus vendor. A false positive is crippling computers from customers.

McAfee’s “DAT” file version 5958 is causing widespread problems with Windows XP SP3. The affected systems will enter a reboot loop and loose all network access. The problem is a false positive which identifies a regular Windows binary, “svchost.exe”, as “W32/Wecorl.a”, a virus. See http://isc.sans.org/diary.html?storyid=8656 for more details.

It’s not only McAfee. False positives happen to all vendors every now and then, but in this case it is causing a serious problem for enterprise customers. And the press is all over it.

Hitman Pro contains a large white list of standard installations of Windows 2000 to Windows 7 (32-bit and 64-bit), Office 2000 to 2007 and all updates and services packs. This will reduce the chance of system-crippling false positives.

Comments are closed.

%d bloggers like this: