Try our new Certificate Revocation List Check Tool
CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.

Category: Mcafee/Trellix

Mcafee DLP 9.3 missing option Removable Storage Protection in Agent Configuration

Mcafee DLP 9.3 missing option Removable Storage Protection in Agent Configuration.   Problem: You are unable to choose “Removable Storage Protection” as 4th option in Agent Configuration on the new DLP9.3 Migration from: Existing EPO 4.6 and 9.1 Under Agent Configuration i can choose “Removable Storage Protection” as 4th option NEW EPO 5.11 and 9.3.400.23 […]

VMWARE / VDI malware Protection Symantec, Trend and Mcafee

Symantec Endpoint Protection still has no Agentless Virus scan version like Trend or Mcafee with Move. Those use VSHIELD API from VMware and need no direct Software running in the VM. (http://www.vmware.com/pdf/vshield_55_admin.pdf) BUT test have shown that even with the Agent in the VM/VDI Symantec SEP 12.X is faster in daily tracking, stable status, scanning […]

Exchange: Anti Virus Software on Exchange 2010/2013 Servers – Mcafee

File and Process Exclusion for Anti Virus Software for Exchange 2010 / 2013 http://technet.microsoft.com/en-us/library/bb332342(v=exchg.150).aspx Cdb.exe Microsoft.Exchange.Pop3service.exe MSExchangeRepl.exe Cidaemon.exe,Microsoft.Exchange.ProtectedServiceHost.exe MSExchangeSubmission.exe Clussvc.exe, Microsoft.Exchange.RPCClientAccess.Service.exe MSExchangeTransport.exe Dsamain.exe Microsoft.Exchange.Search.Service.exe MSExchangeTransportLogSearch.exe EdgeCredentialSvc.exe Microsoft.Exchange.Servicehost.exe MSExchangeThrottling.exe EdgeTransport.exe Microsoft.Exchange.Store.Service.exe Msftefd.exe ExFBA.exe Microsoft.Exchange.Store.Worker.exe Msftesql.exe hostcontrollerservice.exe Microsoft.Exchange.TransportSyncManagerSvc.exe OleConverter.exe Inetinfo.exe Microsoft.Exchange.UM.CallRouter.exe Powershell.exe Microsoft.Exchange.AntispamUpdateSvc.exe MSExchangeDagMgmt.exe ScanEngineTest.exe Microsoft.Exchange.ContentFilter.Wrapper.exe MSExchangeDelivery.exe ScanningProcess.exe Microsoft.Exchange.Diagnostics.Service.exe MSExchangeFrontendTransport.exe TranscodingService.exe Microsoft.Exchange.Directory.TopologyService.exe MSExchangeHMHost.exe UmService.exe Microsoft.Exchange.EdgeSyncSvc.exe MSExchangeHMWorker.exe UmWorkerProcess.exe […]

Behebung Fehler Mcafee VSE 8.8 SP2 TRUST beim Scannen und Event 516 crypt32.dll

Dieses Dokument beschreibt wie man Mcafee Event516 oder Untrusted Fehlermeldung beheben kann. Fehlermeldung: scan32.exe – Ungültiges Bildscan64.exe – Ungueltiges Bild Versionen:   * Client Windows 7 64BIT SP1, German Language * Mcafee VSE 8.8 P2 with HF Post SP2 (8.8.0.975 BUILD 14.08.2012) * DAT 7180.0000 * Framework 4.8.0.887 * EPO 4.6   Der Fehler tritt […]

Massive Spam Reply wave in Switzerland 08.08.2013 – Federal E-Mail domain admin.ch involved

Subject Range: RE: [#SMV-xxxxxxxxxxxxxxxxxxxx]: Transfer – Ueberweisung   Since today 08.08.2013 starting around 17:10 O’clock CET we see a large amount of “Reply – Delete me also” spam running through all kind devices and also large enterprise Spam filters. We even have a reply from Swiss federal E-Mail domain @admin.ch which hosts all or most […]

W32/Autorun.worm.aaeb-h

Subject: *URGENT* McAfee SNS ALERT: *UPDATE* Reports of W32/autorun.worm.aaeb-h infections   **Update to original message: Stinger tool now available. See Mitigation section below** McAfee has received multiple reports of customers who are severely affected by variants of W32/autorun.worm.aaeb-h. ImpactW32/Autorun.worm.aaeb-h has the ability to infect removable media devices and mounted network shares. It can also copy itself […]

MCAFEE: Hotfix VSE88HF793640 per EPO verteilen

www.butsch.ch Diese Anleitung beschreibt wie man einen HOTFIX auf einem MCAFEE EPO Server 4.5/4.6 integriert und alle Systeme oder eine bestimmte Gruppe verteilt. Als Beispiel den Patch/Hotfix vom 21.08.2012 für Mcafee VSE 8.8. https://kc.mcafee.com/corporate/index?page=content&id=KB76004 DAT 6807/6808 Causing Issues with VSE 8.8.x   Inhalt Hotfix Paket einchecken    1 Distribute/Update an alle Endpoints im Netz    2 Distribute/Update PRO Untergruppe […]

Windows XP Sp3, Event 516, mfehdik, SLL-API, memory Leak, crypt32.dll

Windows XP Sp3, Event 516, mfehdik, SLL-API, memory Leak, crypt32.dll Memory leak in MFEVTPS.EXE Recent Microsoft security updates for Windows XP SP3 and Server 2003R2 introduce a memory leak for the VirusScan Enterprise process MFEVTPS.EXE. The leak is actually from a Windows binary, Crypt32.dll, that MFEVTPS.EXE utilizes. A fix for this issue is available from Microsoft. […]

Mcafee Framework 4.6 and EPO Migrarion from SRV 2003R2 to 2008R2

Mcafee Framework 4.6 is out Please check the 4 important Hotfixes which may seem important if you have “MS Malicious Software Removal Tool” installed. https://kc.mcafee.com/corporate/index?page=content&id=KB72202 1 Install/deploy Framework 4.62 Install HF660014 3 Install HF660568  Migration from Server 2003R2 32BIt to Windows Server R2008 R2 64bit (Same Server Name a must) Mcafee KB66616 (OS=OS) und KB71078 (OS !=OS). Sollte […]

SAP with Mcafee Alert FALSE/POSITIV KB71739 DAT 6329 Generic.DX!yxk

SAP fun withMcafee Alert FALSE/POSITIV KB71739 DAT 6329 Generic.DX!yxk Ich habe soeben einen SMS Alert von Mcafee bekommen. Mcafee Alert KB71739 DAT 6329 Generic.DX!yxk > In dem Moment war die KB von mcafee Offline. Passender Moment!  https://kc.mcafee.com/corporate/index?page=content&id=KB71739&actp=LIST_RECENT  Corporate KnowledgeBase False Positive Detection Generic.dx!yxk in DAT 6329 Corporate KnowledgeBase ID:   KB71739 Last Modified:   April […]