W32/Autorun.worm.aaeb-h has the ability to infect removable media devices and mounted network shares. It can also copy itself into .zip and .rar archive files.
The infection starts either with manual execution of an infected file or by navigating to a folder that contains infected files. This threat has the ability to download other malware or updates to itself as directed by a Command-and-Control (C&C) server.
McAfee has released an Extra.DAT to detect and clean this threat. A new version of Stinger will be available later. McAfee will send another SNS notice when the Stinger is available.
To download the Extra.DAT and Stinger (when available), see KB76807:
For more information on McAfee product coverage and mitigation for this threat, see PD24169 – Threat Advisory: W32/Autorun.worm.aaeb:
*** UPDATE 21:35 ***
Download the latest stinger tool which can detect and remove this worm here:
How to install an extra.dat file:
To apply the ExtraDAT locally:
Click Start, Run, type services.msc, and click OK.
Right-click the McAfee McShield service and select Stop.
Copy the ExtraDAT file to the following location:
32-bit installations <installation drive>Program FilesCommon FilesMcAfeeEngine 64-bit installations <installation drive>Program Files (x86)Common FilesMcAfeeEngine
In the Services window, right-click McAfee McShield and select Start.
The new detections in ExtraDAT will take effect after the McShield service has started.
Microsoft released the public beta of the stand alone system sweeper tool.
Microsoft Standalone System Sweeper Beta, a recovery tool that can help you start an infected PC and perform an offline can to help identify and remove rootkits and other advanced malware. In addition, Microsoft Standalone System Sweeper Beta can be used if you cannot install or start an antivirus solution on your PC, or if the installed solution can’t detect or Continue reading “Microsoft stand alone system sweeper beta”
On January 21 is definitely the new version of McAfee VirusScan Enterprise released. The main developments in this version are focused on performance improvements. Since this version the speed of the Windows system will facilitate this important update for many users.
Continue reading “McAfee VirusScan 8.8 released”
In the week of November 29 2010 the 3rd beta of McAfee ePolicy Orchestrator is available for download.
Remember to register so you are able to download the beta.
Have fun and enjoy.
I’ll keep you posted with the new features of this new product.
McAfee has caused multiple systems to crash after a DAT update to 5958. It causes to falsly identify svchost.exe as virus W32/Wecorl. McAfee has tackeld this problem and released update 5959 to prevent this from happening. Here’s McAfee’s own statement about this false positive: Continue reading “McAfee DAT update causes windows to crash (UPDATE NEW DAT FILE)”
If you use Microsoft security essentials at home you can use it for free. Downloads are available for Windows XP (32bit), Windows 7 (32bit 64 bit). Click here for downloads.
Even for the Windows XP Mode in Windows 7 this software is compatible and useable.
McAfee has released a new notification for the W32/Zimuse virus. Find more information about this virus here.