Skip to content
Urgent Announcement

McAfee is receiving multiple reports of modified Petya ransomware variants. McAfee Labs is receiving various samples which are in analysis, and can confirm that McAfee Global Threat Intelligence (GTI) is protecting against current known samples at the low setting.

  • Extensions currently known as being affected are:  .3ds, .7z, .accdb, .ai, .asp, .aspx, .avhd, .back, .bak, .c, .cfg, .conf, .cpp, .cs, .ctl, .dbf, .disk, .djvu, .doc, .docx, .dwg, .eml, .fdb, .gz, .h, .hdd, .kdbx, .mail, .mdb, .msg, .nrg, .ora, .ost, .ova, .ovf, .pdf, .php, .pmf, .ppt, .pptx, .pst, .pvi, .py, .pyc, .rar, .rtf, .sln, .sql, .tar, .vbox, .vbs, .vcb, .vdi, .vfd, .vmc, .vmdk, .vmsd, .vmx, .vsdx, .vsv, .work, .xls, .xlsx, .xvd, .zip
  • We have confirmed with the samples that SMB is being used as a propogation method, and are aware of reports that RDP may also be used but have yet to confirm this.
  • After encryption, impacted systems may show a ransom screen and suggest a system reboot after which the system will not be accessible.

McAfee has released an Extra.DAT to include coverage for this threat — it is attached to KB89540.


Continuing Information

McAfee will continue to post more information in Knowledge Base article KB89540 (https://kc.mcafee.com/corporate/index?page=content&id=KB89540) as available.

To receive information about McAfee product updates, sign up for the Support Notification Service (SNS) at https://sns.secure.mcafee.com/signup_login

Knowledge Center

Begin your search by entering a search term or a product. Entering both may provide more relevant search results. Search Tips
Reset|Share This Search
Search Results Feedback »

All Results (63040)

Knowledge Base (11564)

Content Source
Technical Articles
Content Type
Getting Started (228)
Plugins And Components
Sort By:
A to Z
Tools And Utilities
Last Modified Date

Communities (51342)


Videos & Podcasts (134)


Collapse Pane
Sort By:
Sort By:
Technical Article
McAfee Drive Encryption (DE) 7.1 McAfee Drive Encryption GO (DEGO) 7.1.x McAfee Endpoint Encryption for PC (EEPC) 7.0.x McAfee Endpoint Encryption GO (EEGO) 1.x For details of DE 7.1.x supported environments, see KB79422 . For details of EEPC 7
Last Modified Date:4/28/2015
Technical Article
McAfee Network Security Platform (NSP) 8.x. For more information about GTI, see the following articles: KB84374 - Important changes to all McAfee products using Global Threat Intelligence KB79640 - How to obtain a list of current Global Threat
Last Modified Date:4/6/2017
Technical Article
McAfee VirusScan for Mac (VSMac) 9.8, 9.7, 9.6. See also: To determine the version of McAfee Agent installed on a Mac, see KB68746 . For supported environments for McAfee Agent, see KB51573 . For product lifecycle details, see the McAfee Product
Last Modified Date:5/10/2017
Technical Article
You have not configured DAM or DVM to use a proxy. In most deployments, your server will not have direct access to the Internet. You must configure a proxy to receive updates automatically from the console.. McAfee Database Activity Monitoring (DAM)
Last Modified Date:6/22/2017
Technical Article
McAfee SIEM Event Receiver 9.x. The McAfee Linux Event Collector allows you to add a local agent to your system that can 'push' several types of data to the McAfee Event Receiver. The table below shows the supported versions of the Linux Event
Last Modified Date:4/11/2014
Technical Article
McAfee Firewall for Linux 8.0. KB85429 - Supported Platforms, Environments, and Operating Systems for Firewall for Linux 8.0 KB83745 - Firewall for Linux 8.0 Known Issues KB85412 - Differences between Firewall for Linux 8.0 and Host IPS for
Last Modified Date:11/28/2016
Technical Article
McAfee Open Data Exchange Layer (OpenDXL) Python Client SDK. The OpenDXL Python Client SDK is available for download from the following locations: Product Downloads site (behind appropriate grant numbers) McAfee product software, upgrades,
Last Modified Date:11/3/2016
Technical Article
McAfee File and Removable Media Protection (FRP) 5.0.x NOTES: File and Removable Media Protection is the new name for Endpoint Encryption for Files and Folders (EEFF). Removable Media Protection (offsite access options) was formerly known as Endpoint
Last Modified Date:6/12/2017
Technical Article
McAfee Endpoint Security for Mac (ENSM) 10.0.0 - 10.1.0 McAfee Endpoint Protection for Mac (EPM) 2.0 - 2.3 McAfee VirusScan for Mac (VSMac) 9.5 - 9.8 McAfee ePolicy Orchestrator (ePO ) 5.x.x, 4.6.x Apple Mac OS X 10.7.x - 10.11.x For supported
Last Modified Date:4/6/2017
Technical Article
McAfee Endpoint Security for Mac (ENSM) Firewall 10.2.2 Hotfix 1191059, 10.2.2, 10.2.1 Hotfix 1159589, 10.2.1, 10.2.0, 10.1.1, 10.1.0 McAfee ENSM Threat Prevention 10.2.2 Hotfix 1191059, 10.2.2, 10.2.1 Hotfix 1159589, 10.2.1, 10.2.0, 10.1.1, 10.1.0
Last Modified Date:6/15/2017
Page 1 of 23Next Page
Results: 1 - 10 of 228|
Per Page