Forum Moderators: phranque

Message Too Old, No Replies

McAfee Update Breaks Hundreds Of Apps

         

pageoneresults

1:22 am on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



[informationweek.com...]

For over five hours Friday, McAfee's anti-virus software erroneously flagged hundreds of legitimate executables as a malicious virus, leading some customers to quarantine or delete the offending files and render applications such as Microsoft Excel inoperative.

There was one byte off in a signature, and there was a hole in our testing process.

Was that the straw that broke the camels back? Whatever market share they had their fingers into probably just dwindled considerably. I've never used McAfee.

Visit Thailand

7:11 am on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I have always used NIS / NAV.

What worries me most though is how much we trust some of these companies. But because they promote themselves to be focussed and have only our (and the net population's) best interests at heart then we download all their updates without questioning.

I am sure we will hear a lot more about this as the day goes on.

bcolflesh

2:36 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



For those jumping ship - AVG Free:

[free.grisoft.com...]

lgn1

2:43 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Guess what our IT department was doing yesterday.

McAfee has worked great for us for years, but this was a real snafu.

The real problem, is that McAfee didn't have a network aware program to unQuaratine all these files, and if you choose to delete suspected files instead of Quarantine them, you were really toast, relying on system backups and system restore.

McAfee did come out with a micky mouse program to unQuarantine files, but you had to run around to every machine to fix the problem.

After updating 70 computers, its gets kind of tedious.

MatthewHSE

2:53 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



What an embarrassing mistake. But I wouldn't expect it to make much of a dent in their marketshare. I've found that most people are very forgiving toward big companies that they trust. I'd say the biggest hit will be from corporate users where the IT department decides to switch to something else.

Jack_Hughes

3:12 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



A customer rang yesterday accusing us of having a virus in our product... this probably explains why. suffice it to say they haven't rung to appologise ;)

hannamyluv

3:19 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I use McAfee and ran a virus scan on Friday. Fortunatly, I thought it odd that it was flagging things like an excel .exe file as a virus so I checked it out before letting it finish it's scan and clean up. It could have really screwed up my computer and I wondered how many people just let it blindly finish.

pageoneresults

3:32 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



It could have really screwed up my computer and I wondered how many people just let it blindly finish.

Probably quite a few. It appears that McAfee's target audience is mostly new users and based on my experience with new users, they are going to follow the instructions on the screen if they understand them. :(

I guess we'll know more as the week progresses as many are most likely recovering from the issue and getting things in order. For some, they may still be down.

Matt Probert

3:39 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Over the years I have experienced similar with other AV software. A classic example was Norton Anti-Virus, which many years ago suddenly reported that a file Nat West bank (one of Britain's major banks) had been sending to its customers for years was infected!

It was, of course, a false positive.

Matt

Liane

3:49 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Actually, I can see this costing the company big time. I wouldn't be surprised if there were lots of little claims against them for messing up people's computers and programmes I would imagine!

Chico_Loco

4:15 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I wouldn't be surprised if there were lots of little claims against them for messing up people's computers and programmes I would imagine!

Needless to say, there's got to be some disclaimer for them in place limiting their liability on this issue. Of course, that doesn't mean people won't try anyway! More likely is large corporations that were down / lost work because of this taking a go at litigation.

JerryOdom

4:24 pm on Mar 14, 2006 (gmt 0)

10+ Year Member



In doing development I've seen McAfee screw up like this before. I'm glad they finally did it big enough to make news.

celgins

4:32 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Amazing that they either did not do enough testing, or didn't do proper testing to catch that glitch.

You would think that during the testing processes, a PC with Microsoft Office products installed, would be a common test ground.

I guess not.

LifeinAsia

4:36 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Flagging a Microsoft product as a malicious virus? Gee, how come no other products did it sooner? :)

lgn1

4:51 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



McAfee's target audience is mostly new users

Wrong. We use McAfee Enterprized Edition, and my day job is with a major department of the Government of Canada, which has standarized on McAfee.

pageoneresults

4:53 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Wrong

The keyword in that sentence is "mostly". I realize there are corporate users of McAfee too. ;)

stef25

7:08 pm on Mar 14, 2006 (gmt 0)

10+ Year Member



AVG free all the way for me, havent had a virus in years

had to spend a few minutes convincing father in law that this "free 6 month subscription" to mcafee he got with his new dell was really not worth

2by4

10:37 pm on Mar 14, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I worked with McAfee corporate edition in a large organization. One of my main jobs turned out to be cleaning off viruses that McAfee had allowed. Some machines had upwards of 100 pieces of malware on them. Slowed to a crawl, barely could connect to the network or web because the trojans were so busy dialing to home base. I am not exagerating.

I have never seen a worse product than McAfee, although Norton is definetely right up there. I'm not clear on why they call themselves 'anti' virus, since every norton or mcafee 'protected' machine I've ever looked at has had many viruses installed, plus trojans, etc.

This observation has been confirmed to me by others who know better than me. Virus authors have little or no respect for either product, for good reason.

I used avg + antivir to clean the machines off, that's what IT department unofficially used as their main infection cleaning agents.

However, I'm finding that GNU/Linux is quite affective at this point, far better than anything else I've tried.

On windows I use either avg or antivir for free stuff, nod32 for paid.

Voxman

7:40 pm on Mar 15, 2006 (gmt 0)

10+ Year Member



I don't see any mention of this in the media at all. Why not? Has anyone else seen a story on this anywhere?

2by4

9:22 pm on Mar 15, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



which 'media'? which 'this'?

I've seen many articles on the failed mcafee update this week in many different media outlets. Did it make usatoday? or der spiegel? or the observer? I have no idea.

Robert Charlton

5:50 am on Mar 16, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I have a client that had a problem about a month ago when Norton Anti-Virus identified one of their files as a virus. Symantec was virtually impossible to contact, they discovered.

There's an article on the McAfee incident and some of the problems it highlights here [computerworld.com] at Computerworld....

The McAfee incident highlights the need for companies to configure their antivirus software so that it just quarantines suspicious software instead of deleting it outright, Ullrich said. It also underscores the need for companies to have good backup and restore policies in place to deal with such accidental losses of data, he said.

"Having your [antivirus] software go bad is just one of the ways by which you can lose data," he said.

McAfee isn’t the first company to run into a problem with its antivirus software. Earlier this year, Microsoft Corp.’s antispyware beta software mistakenly flagged Symantec Corp. Norton antivirus product as a Trojan program. And last year, a Trend Micro Inc. software update caused CPU usage to increase dramatically on machines on which it was installed.

Automan Empire

11:56 pm on Mar 17, 2006 (gmt 0)

10+ Year Member



It appears that McAfee's target audience is mostly new users

It came bundled on a "refurbished, de-branded" machine I got a good deal on. I have long been annoyed by the pop-up "Time to upgrade McAfee" announcement; now I have good reason to make time to uninstall it! Man am I glad I did not "Upgrade."
Norton will have to go too- what a resource hog! I will look into some of the suggested alternatives now.
Friday!
-Automan

Voxman

8:55 pm on Mar 18, 2006 (gmt 0)

10+ Year Member



2by4
which 'media'? which 'this'?

I meant mainstream media mentioning this not industry mags etc. You'd think this would be fairly big news of interest to a lot of people. Guess not

2by4

10:10 pm on Mar 18, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Oh, ok. No, computer stuff isn't nearly as interesting to non-computer types as we might like to think.

Plus, this was a single update, it was pulled immediately I assume, fixed, and then rereleased, so it really only affected a very small number, relatively, of users.

But it's a great example of just how bad these companies are, norton is the same, they've had similar issues with their internet 'security' suite, and their system admin garbage, exactly the same stuff.

Now that I haven't used any norton or mcaffee products for over a year on any system I'm taking care of, and all my friends are now off norton/mcaffee, I find that all the systems are much more stable, virus free, and give almost no headaches.

Why anyone uses this garbage is beyond me, it doesn't work, it's bloated, it slows your system down, and at times kills it. That's a constant, so it's not really news.

In a way, norton/mcaffee and windows are really made for each other, about the same quality level in each. Luckily there's good alternatives to use, although they don't get the public awareness in computer circles they should. AVG for example is at least as good as norton, same with antivir, and they are much better programmed, not as intrusive, don't bog down your system.

What's funny is that nod32 is about the same price as norton, but it's radically superior in every way, and renewals are I think cheaper in blocks than norton, so why anyone uses norton/mcafee just has to come down to not knowing any better and inertia.