Bugtraq mailing list archives

Re: Virus scan attack


From: "Joe Fubar" <fubar1 () gmx net>
Date: Tue, 22 Jun 2004 09:09:11 +0200 (MEST)

Please check McAfees site if you are running an outdated engine,

The 4.1.60 Engine is Out of Date and No Longer Supported
The notice below addresses two separate issues tracked and brought to
resolution by McAfee AVERT and Support as they pertain to the 4.1.60 and
4.3.20 Engines
Scenario 1
The 4.1.60 Engine was officially EOL (End of Life) at the end of August 2003
and is no longer supported. With the release of the 4367 DATs, on Wednesday
June 16, 2004, customers began to notify AVERT and Network Associates
Support of machines failing to initialize after installing or updating to
the 4367/4.1.60 configuration. The two components are not compatible and the
4.1.60 engine needs to be removed and an update needs to take place to the
4.3.20 engine.

This has been documented and you can get more information by reading our
Primus Articles listed below. 

NAI37284 – NNT45 HFR Error Messages 
NAI37282 – Command Line Scanner Error Messages 
NAI37288 – VSC451SP1 Error Messages 
NAI37289 – VTC 6.1 Error Messages 
NAI37294 – GSE 5.0/5.2 Error Messages 

-----Original Message-----
From: Joao B. Diehl [mailto:diehl () dpi inpe br] 
Sent: Saturday, June 19, 2004 16:26
To: Nate Nord
Cc: visitbipin () hotmail com; bugtraq () securityfocus com
Subject: Re: Virus scan attack

We had this same problem with the DAT 4367. Returning to
DAT 4366 it worked again.


Nate Nord wrote:
Just wondering if anyone else has seen this come through their mail 
portal. Something has caused our McAfee Webshield SMTP to seriously 
eat processor time... to the point that it will no longer forward 
scanned mail.  I've had to temporarily bypass it until I figure out 
what it's choking on.  I saw several other posts that said this sent 
processors into some kind of loop and this is exactly what appears to 
be happening with our portal.


-- 
"Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info


Current thread: