Skip to content
Urgent Announcement

McAfee is receiving multiple reports of modified Petya ransomware variants. McAfee Labs is receiving various samples which are in analysis, and can confirm that McAfee Global Threat Intelligence (GTI) is protecting against current known samples at the low setting.

  • Extensions currently known as being affected are:  .3ds, .7z, .accdb, .ai, .asp, .aspx, .avhd, .back, .bak, .c, .cfg, .conf, .cpp, .cs, .ctl, .dbf, .disk, .djvu, .doc, .docx, .dwg, .eml, .fdb, .gz, .h, .hdd, .kdbx, .mail, .mdb, .msg, .nrg, .ora, .ost, .ova, .ovf, .pdf, .php, .pmf, .ppt, .pptx, .pst, .pvi, .py, .pyc, .rar, .rtf, .sln, .sql, .tar, .vbox, .vbs, .vcb, .vdi, .vfd, .vmc, .vmdk, .vmsd, .vmx, .vsdx, .vsv, .work, .xls, .xlsx, .xvd, .zip
  • We have confirmed with the samples that SMB is being used as a propogation method, and are aware of reports that RDP may also be used but have yet to confirm this.
  • After encryption, impacted systems may show a ransom screen and suggest a system reboot after which the system will not be accessible.

McAfee has released an Extra.DAT to include coverage for this threat — it is attached to KB89540.


Continuing Information

McAfee will continue to post more information in Knowledge Base article KB89540 (https://kc.mcafee.com/corporate/index?page=content&id=KB89540) as available.

To receive information about McAfee product updates, sign up for the Support Notification Service (SNS) at https://sns.secure.mcafee.com/signup_login


McAfee Support Notification Service (SNS)

The McAfee Support Notification Service (SNS) is a proactive notification service that allows McAfee to communicate critical information in a timely manner. Subscribing to SNS ensures that you have the most up-to-date information on product upgrades, releases and End-of-Life notices. Additionally, SNS is a vital information link during critical incidents, providing you with the updates you need to ensure that your systems and organization are protected.

Subscribe to SNS

The SNS Subscription Center provides SSL security for data input and transmission and secure access for returning subscribers. Go to the Subscription Center to submit your personal preferences.

Benefits of Subscribing

  • Maximizes the functionality and protection capabilities of your McAfee security products
  • Manage your environments more proactively and with greater scheduling flexibility
  • Enables rapid response during critical events
  • Boosts the value of your security investment



"This is exactly the kind of bulletin that I have been waiting for. Please extend my gratitude to those who put it together. Thanks for all you do.”

 —    IT Senior Manager
Semiconductor Company







Information Types & Frequency

Alerts — critical and information requiring immediate customer action, such as vulnerabilities, false positives, virus outbreaks, or critical remediation updates. Alerts are determined by severity and urgency and sent only if immediate customer action is required. Sent by email and text-message (if cell-phone listed).

Notices — standard product news, such as releases, signature updates, or end of life announcements.

Weekly Roundup — all notices or alerts across all categories for the last seven days.

ProTips — short product-specific emails offering best practices, troubleshooting, and how-to information with links to in-depth Knowledge Base resources (up to one or two per week)..

SNS Digest — a monthly newsletter providing product news, release notes, EOL information, ProTip listings and other product resources. See past issues here.

Distribution Options

  • Notices and Alerts
  • Weekly RoundUps
  • SNS Digest
  • ProTips
  • DAT Delays

Product Category Selections

  • Advanced Threat Defense
  • Application & Change Control
  • Data Loss Prevention (DLP)
  • Database Security
  • Email and Web Protection
  • Endpoint Encryption
  • Endpoint Security
  • ePolicy Orchestrator (ePO)
  • ePO Cloud
  • Intrusion Prevention
  • Network Security Platform
  • Policy Auditor and Risk Advisor
  • SIEM
  • Site Advisor Enterprise
  • VIrusScan/MOVE
  • Vulnerability Manager


“Just wanted to pass on some feedback – we really appreciate the extra effort going into the SNS emails. Keep up the good work.”

 —    Security Director
National Mortgage Corporation



For more information, view McAfee KnowledgeBase article KB67828.