Loading...
Skip to content
 
Urgent Announcement

McAfee is receiving multiple reports of modified Petya ransomware variants. McAfee Labs is receiving various samples which are in analysis, and can confirm that McAfee Global Threat Intelligence (GTI) is protecting against current known samples at the low setting.

  • Extensions currently known as being affected are:  .3ds, .7z, .accdb, .ai, .asp, .aspx, .avhd, .back, .bak, .c, .cfg, .conf, .cpp, .cs, .ctl, .dbf, .disk, .djvu, .doc, .docx, .dwg, .eml, .fdb, .gz, .h, .hdd, .kdbx, .mail, .mdb, .msg, .nrg, .ora, .ost, .ova, .ovf, .pdf, .php, .pmf, .ppt, .pptx, .pst, .pvi, .py, .pyc, .rar, .rtf, .sln, .sql, .tar, .vbox, .vbs, .vcb, .vdi, .vfd, .vmc, .vmdk, .vmsd, .vmx, .vsdx, .vsv, .work, .xls, .xlsx, .xvd, .zip
  • We have confirmed with the samples that SMB is being used as a propogation method, and are aware of reports that RDP may also be used but have yet to confirm this.
  • After encryption, impacted systems may show a ransom screen and suggest a system reboot after which the system will not be accessible.

McAfee has released an Extra.DAT to include coverage for this threat — it is attached to KB89540.

 

Continuing Information

McAfee will continue to post more information in Knowledge Base article KB89540 (https://kc.mcafee.com/corporate/index?page=content&id=KB89540) as available.

To receive information about McAfee product updates, sign up for the Support Notification Service (SNS) at https://sns.secure.mcafee.com/signup_login

Tools

Tools: Overview

McAfee provides a number of free repair, diagnostic, and sample submission tools to our customers:

System Repair and Diagnostic Tools
 

  • McAfee Virtual Technician. McAfee Virtual Technician (MVT) is a diagnostic tool which can find and resolve many of the most common issues with McAfee products. After scanning your computer, you will be offered the ability to automatically resolve any detected issue. The scan results will also be passed to McAfee Technical Support should you open a Service Request
  • ePO-MVT. This is an ePO deployable version of McAfee Virtual Technician.
  • WebMER. WebMER automatically detects and collects information for McAfee Technical Support to troubleshoot your issue or escalate your Service Request. This includes product and event logs, as well as other system information.
  • ePO-MER. This is an ePO deployable version of WebMER.
  • McAfee Profiler. McAfee Profiler captures top processes and files that are accessed by the VirusScan Enterprise (VSE) On-Access Scanner (OAS). Based on the data collected, an administrator can choose files or processes to exclude from scanning to lessen the impact on the system.

Other Tools and Resources
 

Staying in Touch