Re: Oops: McAfee Update Exterminates Excel

["<...>" <massimo () grandmedia si>]

anybody thinking about that NOT being  a genuine McAfee release?

----- Original Message ----- 
From: "Fergie" <fergdawg () netzero net>
To: <Blanchard_Michael () emc com>
Cc: <funsec () linuxbox org>
Sent: Monday, March 13, 2006 8:11 PM
Subject: RE: [funsec] Oops: McAfee Update Exterminates Excel


> Right, but I've already heard a few jokes, re: "McAfee's .dat
> update did far more damage than the BlackWorm/Kama Sutra worm
> could ever possibly have done"... or something to that effect. ;-)
>
> - ferg
>
> -- Blanchard_Michael () emc com wrote:
>
> Here's the list of all files that it false positived on....  I saw 
> naprdmgr.exe and updateUI.exe in there... Two of McAfee's own files!
>  How was this not detected in their DAT testing?
>
> http://vil.nai.com/images/CTX_file_list.pdf
>
>
> Could have been worse tho, and this is prolly the worse thing that's 
> happened with DATs in the past 5 or so years....  I guess everyone is 
> allowed one SNAFU a decade... The next 5 years should be a cake walk :-)
>
> [snip]
>
> --
> "Fergie", a.k.a. Paul Ferguson
> Engineering Architecture for the Internet
> fergdawg () netzero net or fergdawg () sbcglobal net
> ferg's tech blog: http://fergdawg.blogspot.com/
>
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.