McAfee detect False Positive Wecorl.A Virus


Today McAfee releases a bugged DAT (5958) that generate a critical situation in Windows XP Service Pack 3.

Antivirus delete the svchost file, causing many key Windows services to fail to start. The Windows file is being mistakenly detected as W32/wecorl.a. Failure to start svchost.exe causes Windows to automatically reboot.

To fix it
1 - Boot the system into safe mode
2 - Copy extra.dat in c:\program files\common files\mcafee\engine
3 - Reboot in normal mode and abort automatic shutdown typing “shutdown /a” in start -> run

For more information see here: http://vil.nai.com/vil/5958_false.htm

Tags: ,

About author

Vittorio Pavesi