Skip to content
Urgent Announcement

McAfee is receiving multiple reports of modified Petya ransomware variants. McAfee Labs is receiving various samples which are in analysis, and can confirm that McAfee Global Threat Intelligence (GTI) is protecting against current known samples at the low setting.

  • Extensions currently known as being affected are:  .3ds, .7z, .accdb, .ai, .asp, .aspx, .avhd, .back, .bak, .c, .cfg, .conf, .cpp, .cs, .ctl, .dbf, .disk, .djvu, .doc, .docx, .dwg, .eml, .fdb, .gz, .h, .hdd, .kdbx, .mail, .mdb, .msg, .nrg, .ora, .ost, .ova, .ovf, .pdf, .php, .pmf, .ppt, .pptx, .pst, .pvi, .py, .pyc, .rar, .rtf, .sln, .sql, .tar, .vbox, .vbs, .vcb, .vdi, .vfd, .vmc, .vmdk, .vmsd, .vmx, .vsdx, .vsv, .work, .xls, .xlsx, .xvd, .zip
  • We have confirmed with the samples that SMB is being used as a propogation method, and are aware of reports that RDP may also be used but have yet to confirm this.
  • After encryption, impacted systems may show a ransom screen and suggest a system reboot after which the system will not be accessible.

McAfee has released an Extra.DAT to include coverage for this threat — it is attached to KB89540.


Continuing Information

McAfee will continue to post more information in Knowledge Base article KB89540 (https://kc.mcafee.com/corporate/index?page=content&id=KB89540) as available.

To receive information about McAfee product updates, sign up for the Support Notification Service (SNS) at https://sns.secure.mcafee.com/signup_login

Knowledge Center

Begin your search by entering a search term or a product. Entering both may provide more relevant search results. Search Tips
Reset|Share This Search
Search Results Feedback »
Collapse Pane
Sort By:
Sort By:
Technical Article
McAfee VirusScan Enterprise (VSE) 8.8. During a DAT update task, an On-Demand Scan (ODS) is terminated. The VSE OAS log contains the following entry: 8/17/2016 10:30:22 PM Scan Terminated Test\user (managed) Servers OnDemandScan The Windows
Last Modified Date:9/21/2016
Technical Article
The use of multiple scan threads versus a single scan thread.. Installation of VSE 8.8 Patch 5 or 6.. McAfee VirusScan Enterprise (VSE) 8.8 Patch 5 or 6. After upgrading an endpoint to VSE 8.8 Patch 5 or 6, the system becomes slow or unresponsive
Last Modified Date:7/25/2016
Technical Article
This issue occurs because Access Protection/Self Protection is enabled in VirusScan Enterprise 8.x. When Msconfig.exe is used to change settings on the local system, it also makes copies of certain McAfee registry keys for querying purposes and then
Last Modified Date:11/3/2016
Technical Article
McAfee VirusScan Enterprise 8.x McAfee VirusScan Enterprise for SAP 1.x.x McAfee VirusScan Enterprise for Storage 1.x.x McAfee VirusScan Enterprise for Offline Virtual Images 2.x, 1.x. McAfee virus scanning products have two options for On-Demand
Last Modified Date:6/13/2016
Technical Article
A data structure used for scanning is able to be updated by multiple threads, without having the requisite guards in place to guarantee the state of the data. The failure occurs when a thread uses the data and the content is unexpected.. Either of
Last Modified Date:6/23/2016
Technical Article
This issue exists only when too much privilege has been granted to an account that is used to retrieve McAfee product updates from UNC shares and other update sites.. McAfee Agent 5.x, 4.x McAfee ePolicy Orchestrator 5.x McAfee VirusScan Enterprise
Last Modified Date:4/7/2017
Technical Article
McAfee DAT files (V2) McAfee VirusScan Enterprise 8.x. Explanation of files that may be downloaded during VirusScan Enterprise (VSE) updates: SiteStat.xml
Last Modified Date:11/10/2016
Technical Article
McAfee VirusScan Enterprise 8.x. CAUTION: This article contains information about opening or modifying the registry. The following information is intended for System Administrators. Registry modifications are irreversible and could cause system
Last Modified Date:3/8/2017
Technical Article
VSE 8.x Access Protection blocks the following executables from being installed properly: en_visual_c_pp_2010_sp1_redistributable_package_x86_651767.exe en_visual_c_pp_2010_sp1_redistributable_package_x64_651767.exe. McAfee Data Loss Prevention
Last Modified Date:11/21/2016
Technical Article
McAfee VirusScan Enterprise (VSE) 8.x McAfee VirusScan Enterprise Quarantine Manager. VSE 8.x creates backup files when files affected by a threat are removed by VSE. When dealing with these backup, or .BUP, files the following scenarios apply:
Last Modified Date:11/3/2016
Page 1 of 79Next Page
Results: 1 - 10 of 790|
Per Page