Skip to content
Urgent Announcement

McAfee is receiving multiple reports of modified Petya ransomware variants. McAfee Labs is receiving various samples which are in analysis, and can confirm that McAfee Global Threat Intelligence (GTI) is protecting against current known samples at the low setting.

  • Extensions currently known as being affected are:  .3ds, .7z, .accdb, .ai, .asp, .aspx, .avhd, .back, .bak, .c, .cfg, .conf, .cpp, .cs, .ctl, .dbf, .disk, .djvu, .doc, .docx, .dwg, .eml, .fdb, .gz, .h, .hdd, .kdbx, .mail, .mdb, .msg, .nrg, .ora, .ost, .ova, .ovf, .pdf, .php, .pmf, .ppt, .pptx, .pst, .pvi, .py, .pyc, .rar, .rtf, .sln, .sql, .tar, .vbox, .vbs, .vcb, .vdi, .vfd, .vmc, .vmdk, .vmsd, .vmx, .vsdx, .vsv, .work, .xls, .xlsx, .xvd, .zip
  • We have confirmed with the samples that SMB is being used as a propogation method, and are aware of reports that RDP may also be used but have yet to confirm this.
  • After encryption, impacted systems may show a ransom screen and suggest a system reboot after which the system will not be accessible.

McAfee has released an Extra.DAT to include coverage for this threat — it is attached to KB89540.


Continuing Information

McAfee will continue to post more information in Knowledge Base article KB89540 (https://kc.mcafee.com/corporate/index?page=content&id=KB89540) as available.

To receive information about McAfee product updates, sign up for the Support Notification Service (SNS) at https://sns.secure.mcafee.com/signup_login

Knowledge Center

Begin your search by entering a search term or a product. Entering both may provide more relevant search results. Search Tips
Reset|Share This Search
Search Results Feedback »

All Results (2987)

Knowledge Base (1620)

Content Source
Technical Articles (662)
Content Type
Plugins And Components
Sort By:
A to Z
Tools And Utilities
Last Modified Date

Communities (1366)


Videos & Podcasts (1)


Collapse Pane
Sort By:
Sort By:
Technical Article
McAfee VirusScan Enterprise 8..x. The full error is as follows: McAfee Common Framework returned error fffff??? @ ? Failed to initialize common updater subsystem Make sure the McAfee Framework service is running Errors are displayed when
Last Modified Date:11/3/2016
Technical Article
line option to output the location by typing: find -iname smb.conf. This article explains how to obtain the configuration file for the Samba Server, which is required when troubleshooting and reproducing an issue for escalation.
Last Modified Date:2/1/2016
Technical Article
to gain more autonomy on troubleshooting TLS issues when other troubleshooting solutions have failed. If you need assistance, refer to the main troubleshooting article, KB74886 .
Last Modified Date:4/18/2017
Technical Article
McAfee Enterprise Security Manager NitroSecurity ESM 9.x. NitroSecurity ID: 15094-117. Use the following steps to boot to runlevel 1: During boot, press any key to pause the system boot at the NitroSecurity Grub Splash screen. Use the arrow
Last Modified Date:1/31/2013
Technical Article
There are different causes for each of the 5xx codes: 530:Must issue a STARTTLS command first. The appliance receives this message if the onward mail server enforces usage of Transport Layer Security (TLS) but the appliance does not use it. 550:
Last Modified Date:4/18/2017
Technical Article
This random sync timeout issue occurs when the vCenter server and ePO server are unable communicate. This issue can occur in the following circumstances: When using a domain account because of the additional time required for connections to
Last Modified Date:7/28/2016
Technical Article
McAfee\ePolicy Orchestrator\Server\bin . Rename Winauth.dll to Winauth.bak . Restart the ePO server. NOTE: When you next open the Server Settings page, a Windows Authentication option displays.. Troubleshooting Windows Authentication
Last Modified Date:11/16/2016
Technical Article
the appliance System Health status is bad : Reboot to the Backup Disk. Log in to the ATD Web Console. Select Manage , Troubleshooting . Click Support Bundle and enter a ticket number. The .bin file will download.
Last Modified Date:4/6/2017
Technical Article
McAfee SaaS Endpoint Protection 6.x, 5.x For SaaS Endpoint Protection supported environments, see KB60533 .. Error Cause Solution A file needed to install the software
Last Modified Date:5/16/2014
Technical Article
If you can reproduce the issue, try to do so after each troubleshooting step in this article. If the problem no longer occurs after a specific step, you have located the source of the issue. CAUTION: Run the following instructions at your own risk.
Last Modified Date:7/28/2016
Page 1 of 67Next Page
Results: 1 - 10 of 662|
Per Page