bugtraq - Re: Virus scan attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 22 Jun 2004 09:09:11 +0200 (MEST)
From: "Joe Fubar" <fubar1@....net>
To: bugtraq@...urityfocus.com
Cc: diehl@....inpe.br
Subject: Re: Virus scan attack

Please check McAfees site if you are running an outdated engine,

The 4.1.60 Engine is Out of Date and No Longer Supported
The notice below addresses two separate issues tracked and brought to
resolution by McAfee AVERT and Support as they pertain to the 4.1.60 and
4.3.20 Engines
Scenario 1
The 4.1.60 Engine was officially EOL (End of Life) at the end of August 2003
and is no longer supported. With the release of the 4367 DATs, on Wednesday
June 16, 2004, customers began to notify AVERT and Network Associates
Support of machines failing to initialize after installing or updating to
the 4367/4.1.60 configuration. The two components are not compatible and the
4.1.60 engine needs to be removed and an update needs to take place to the
4.3.20 engine.

This has been documented and you can get more information by reading our
Primus Articles listed below. 

NAI37284  NNT45 HFR Error Messages 
NAI37282  Command Line Scanner Error Messages 
NAI37288  VSC451SP1 Error Messages 
NAI37289  VTC 6.1 Error Messages 
NAI37294  GSE 5.0/5.2 Error Messages 

-----Original Message-----
From: Joao B. Diehl [mailto:diehl@....inpe.br] 
Sent: Saturday, June 19, 2004 16:26
To: Nate Nord
Cc: visitbipin@...mail.com; bugtraq@...urityfocus.com
Subject: Re: Virus scan attack

We had this same problem with the DAT 4367. Returning to
DAT 4366 it worked again.

Nate Nord wrote:
> Just wondering if anyone else has seen this come through their mail 
> portal. Something has caused our McAfee Webshield SMTP to seriously 
> eat processor time... to the point that it will no longer forward 
> scanned mail.  I've had to temporarily bypass it until I figure out 
> what it's choking on.  I saw several other posts that said this sent 
> processors into some kind of loop and this is exactly what appears to 
> be happening with our portal.
> 

-- 
"Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info