Thursday, April 22, 2010

echo f | xcopy.exe {server}netlogonextra.dat VIRUS

McAfee's DAT file version 5958 is causing widespread problems with Windows XP SP3. The affected systems will enter a reboot loop and loose all network access. We have individual reports of other versions of Windows being affected as well. However, only particular configurations of these versions appear affected. The bad DAT file may infect individual workstations as well as workstations connected to a domain. The use of ePolicyOrchestrator, which is used to update virus definitions across a network, appears to have lead to a faster spread of the bad DAT file. The ePolicyOrchestrator is used to update DAT files throughout enterprises. It can not be used to undo this bad signature because affected system will lose network.