McAfee VirusScan False Positive Detection of Virus W32/Wecorl.a

If you are using McAfee VirusScan, please be aware of the false positive detection of virus W32/Wecorl.a on a system file svchost.exe. [More information]

The affected DAT version is 5958.

If your computer has updated to DAT 5958 but still running properly, and you can still control your computer, you are strongly advised to rollback the DAT back to 5957 immediately. Once the rollback is finished, McAfee Framework will automatically skip updating from DAT 5958 in future. For instructions of rolling back to previous backed up DAT, see this.

If the current DAT is anything earlier than 5958, you are advised the following actions:
1. manually update DAT it to 5958;
2. after the update process has finished, immediately manually rollback to 5957 ( for steps see this).
McAfee Framework should be skipping DAT 5958 in future updates processes.

If your computer would be forced to shutdown because of DCOM error, that means your computer is one of the affected. Follow steps below:

1. On another healthy computer, go to McAfee Downloads and download SuperDAT 5957.
2. Put the downloaded SDAT5957.exe file on an USB drive.
3. Start the affected computer. When seeing computer to be shutdown message, click [Start] -> [Run] enter shutdown -a and press [Enter]
4. Shutdown process should be stopped.
5. Execute the SDAT5957.exe file with parameter /F which will force downgrading the DAT back to previuos version. (for example, if the file is stored on root of drive E, then your command should be E:\SDAT5957.exe /F)
6. Restart your computer. If the problem was fixed, you are advised to finish the manual update and then rollback steps listed above.