Cyberfail- McAfee DAT file update kills Windows XP #pauto #fail #cybersecurity

April 23, 2010

Wednesday night, many computer users got an unwelcome surprise from McAfee. People who had automatic update enabled received a corrupted antivirus DAT file that, upon reboot, corrupted and killed Windows XP Service Pack 3. The fix was to re-install SP3, a feat that took even competent IT professionals hours.

It is not yet known how many process control computers were affected. The total number of machines that may be affected isn't going to be known for several days, or even weeks, since the update only takes hold if the computer reboots.

Wednesday night, many computer users got an unwelcome surprise from McAfee. People who had automatic update enabled received a corrupted antivirus DAT file that, upon reboot, corrupted and killed Windows XP Service Pack 3. The fix was to re-install SP3, a feat that took even competent IT professionals hours.

It is not yet known how many process control computers were affected. The total number of machines that may be affected isn't going to be known for several days, or even weeks, since the update only takes hold if the computer reboots.

McAfee scrambled yesterday to get a revised DAT file pushed out to the autoupdate-enabled users and according to most reports, if the new DAT file is on a machine, McAfee antivirus software is designed to look for the newest dated DAT file, and will not use the corrupted file.

This could have been a very serious issue in process control and factory automation, and is another valid reason why nobody in the automation space wants auto-update turned on for anything.