McAfee shoots itself in the enterprise foot

In McAfee's case, however, that reputation took a pretty big hit today thanks to a major false positive. As you've probably read elsewhere by now, the updated .dat file wrongly placed svchost.exe in the crosshairs and pulled the trigger -- rendering tens of thousands of corporate machines dead in the water.
Yes, McAfee has released a fix -- but it's one that has be applied hands-on at each affected computer. That's going to create serious pains-in-the-ass for loads of admins and technicians around the globe -- and pissed off admins are never averse to switching software when it decides to create a titanic load of extra work for them.
So what will the aftermath be? Does this gaffe put McAfee's corporate product in the same boat as their consumer product?
If you're an admin who was affected by the update, have you decided it's time to look for a replacement?












Comments
18
Subscribe to commentsSteven EslerApr 21st 2010 4:21PM
Our corporate network relies heavily on an unfortunately outdated OS (XP) but does (did) have relatively good security... until now.
We are now in the situation were hundreds of rebuilds, using ghost, will be necessary.. simply because it saves time not because we dont know how..
McAfee WILL NOT SURVIVE this latest in a long list of major cock-ups.. bye bye mcafee, you will not be missed
Gilbert PalauApr 21st 2010 4:35PM
Any serious and competent IT Dept KNOWS that McAffee is not for Enterprise. You want Enterprise, go to Symantec. We use Endpoint Symantec 11, and we never have had an issue.
Drew GreenApr 21st 2010 5:24PM
Funny this should come out today. I just deployed NOD32 Business Edition in my office and am starting to see a nasty effect on Windows 7 machines. We use a proprietary accounting application (paperless office program) where users have to check documents in and out. The program isn't supported by Windows 7, but we've made it work for the past few months. Now, with NOD32 installed, randomly when checking documents IN to the system, the user's entire workstation will lock up and the only fix is to pull the power. Friday I will be upgrading the application on the server and everyone's machine to hopefully mitigate this severe issue.
blasztaApr 21st 2010 10:41PM
Some advice: test your new AV program before you deploy it to real environment. And do it several times.
SilverWaveApr 21st 2010 6:13PM
I would really like to see the explanation of how this got past QA.
Of course you should have this update being tested on a pool of test boxes _before_ hitting the whole enterprise... but it help does show the men from the boys.
Real GamblerApr 21st 2010 10:28PM
So you do test every .dat file on a pool of test PCs before releasing it in your enterprise? You're lucky. Most enterprises don't have enough IT staff to check AntiVirus updates and have to concentrate only on more important issues.
SilverWaveApr 21st 2010 10:37PM
I would at least advise running them on your machine before the CTO's :-)
blasztaApr 21st 2010 10:42PM
Same with me, our IT PCs is our test machine :)
bolgwradApr 21st 2010 6:30PM
And the difference between this and a virus attack would be..? Oh yes, you pay for MacAfee.
DanOApr 21st 2010 7:17PM
Sophos Anti-Virus is worth a look. Works on all Linux, Windows and mac and updates more often than McAffee/Norton.
Paul TarnowskiApr 21st 2010 10:39PM
I realized McAfee's corporate product was less than up to snuff when I had a client who picked up something nasty off a network share running it - where both Avast and Security Essentials picked it up. Client of course, not knowing any better, got scared. Spent more time talking him down from red alert than I did finding out what went on.
JohnApr 21st 2010 10:31PM
Yes, I am looking at other solutions as soon as this fubar is fixed... This is beyond stupidity on McAfee's part.
Bryan PriceApr 21st 2010 10:58PM
McAfee has just made it to my "avoid at all costs" list.
enerGIApr 22nd 2010 5:24AM
Our company uses Sophos and it gives us no problems at all. Stuff McAfee, its shit.
djangelicApr 22nd 2010 4:08PM
I do IT for a tiny company (less than 20 people in the office) and they were using Vipre until i started working there. I had the company switch to security essentials and it has worked perfectly. Never liked mcafee as it has a huge impact on system resources (or it did when I used it). Security essentials is light, and picks up almost anything we can throw at it. :)
TemplinkApr 22nd 2010 8:42PM
Security essentials is not licensed for business use. Read the terms.
Lee MathewsApr 22nd 2010 8:43PM
It's usable in _some_ business settings...I think 3-5 pcs or something like that.
Lee MathewsApr 22nd 2010 8:44PM
"You may install and use any number of copies of the software on your devices in your household for use by people who reside there or for use in your home-based small business."
So if you have an office in your home and an employee or two who works out of it with you, you're all ok. Other than that, you should be using Forefront if you're running an MS antivirus app.