Try our free Certificate Revocation List Check Tool
CRLcheck.exe a free tool to verify digital signatures of executable files. It collects files from known paths on your client,
checks their signature, and checks CRL and OCSP download.

Category: SECURITY

Ransomware: How to integrate the WannaCry EXTRADAT in EPO or McAfee ENS client

12.05.2017 Urgent Release FRIDAY, Wana Decrypt0r | Wana Decryptor | WanaDecryptor@.exe https://kc.mcafee.com/corporate/index?page=content&id=KB89335 EXTRADAT: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/890 00/KB89335/en_US/EXTRA.zip EXTRA.zip   McAfee is aware that several customers are impacted by a new ransomware. Ransom-WannaCry (also known as WannaCry, WCry, WanaCrypt and WanaCrypt0r) is encrypting files with the .wnry, .wcry, .wncry, and .wncryt extensions. Encryption is occurring on the local […]

Mcafee Security for Exchange 8.5 Patch 1 Update fails on 2010 SP3 CAS with HUB roll

Problem: Mcafee Security for Exchange 8.5 Patch 1 Update fails on 2010 SP3 CAS with HUB roll Product: McAfee Security for Microsoft Exchange — Error 1920.Service MSExchangeIS (MSExchangeIS) failed to start. Verify that you have sufficient privileges to start system services. Migration Groupshield Mcafee Security for Exchange 8.6 to Patch 1 We first thought this was related […]

Mcafee DLP, Microsoft September 2015 update disables Mcafee-DLP

5 Microsoft Patches take out Mcafee DLP copy handler function. Device control (USB) black is not affected. Environment McAfee Data Loss Prevention Endpoint (DLP Endpoint) software earlier than 9.3.425 (DLP Endpoint 9.3 Patch 4 HF25) Microsoft Windows 7 64-bit (32-bit is not affected.) Problem Several applications fail to start after you install Microsoft Patch MS15-038 or […]

Mcafee EPO prevent exe RUNNING FROM %appdata%

Mcafee EPO prevent exe RUNNING FROM %appdata% folders with an Access protection Policy How to protect from most 0day Flash Exploits and malware like Ransom Cryptowall in summer 2015. You simply can’t keep up with patching even with deployment or Management solutions in place. Now you should have an IPS Filter like Fortigate with Fortiguard. […]

Mcafee GETSUSP (Stinger V2) free Virus Scan / HIPS

http://www.mcafee.com/us/downloads/free-tools/getsusp.aspx http://www.mcafee.com/us/downloads/free-tools/index.aspx http://www.mcafee.com/uk/downloads/free-tools/how-to-use-getsusp.aspx Bei Virenbefall würde ich auf einzelnen Clients ab sofort das Tool mcafee GETSUSP laufen lassen. Dies zusätzlich zum VSE. GETSUSP Macht Scan auf GTI-basis (Cloud DB von Mcafee Online) (Manuell kann man auch Binaries uploaden um diese zu analysieren) Aktiviert (Nicht installiert) eine HIPS (IPS) Firewall welche den Netzwerk traffic überwacht wenn […]

Mcafee DLP 9.3 missing option Removable Storage Protection in Agent Configuration

Mcafee DLP 9.3 missing option Removable Storage Protection in Agent Configuration.   Problem: You are unable to choose “Removable Storage Protection” as 4th option in Agent Configuration on the new DLP9.3 Migration from: Existing EPO 4.6 and 9.1 Under Agent Configuration i can choose “Removable Storage Protection” as 4th option NEW EPO 5.11 and 9.3.400.23 […]

MS Systernals includes VirusTOTAL check with just one click

https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx Mark Russinovich and Bryce Cogswell have released a new Version of their Autoruns tool. You can now check every Executable that resides in services, Autostart, RUNOCNE and other registry keys automatic with just one mouseclick on Virustotal. The Executable is then checked against a total of 50 virus search engines. This is asbolute great […]

Exchange 2010 Public Folder Migration: Replicas stay on 2007 with Load Balancer Setup

Special: Load Balancer Setup with CAS-Array, Hardware Load Balancer like KEMP. Gateway both CAS are going to KEMP backside. But Static Routes on both CAS to Backup Server, DC’s, Acronis Servers, old Exchange. Split DNS. We mostly see this with customer having Internal: customer.ch (LAN) and External: customer.ch (Wan) which is the correct way after […]

Exchange: Anti Virus Software on Exchange 2010/2013 Servers – Mcafee

File and Process Exclusion for Anti Virus Software for Exchange 2010 / 2013 http://technet.microsoft.com/en-us/library/bb332342(v=exchg.150).aspx Cdb.exe Microsoft.Exchange.Pop3service.exe MSExchangeRepl.exe Cidaemon.exe,Microsoft.Exchange.ProtectedServiceHost.exe MSExchangeSubmission.exe Clussvc.exe, Microsoft.Exchange.RPCClientAccess.Service.exe MSExchangeTransport.exe Dsamain.exe Microsoft.Exchange.Search.Service.exe MSExchangeTransportLogSearch.exe EdgeCredentialSvc.exe Microsoft.Exchange.Servicehost.exe MSExchangeThrottling.exe EdgeTransport.exe Microsoft.Exchange.Store.Service.exe Msftefd.exe ExFBA.exe Microsoft.Exchange.Store.Worker.exe Msftesql.exe hostcontrollerservice.exe Microsoft.Exchange.TransportSyncManagerSvc.exe OleConverter.exe Inetinfo.exe Microsoft.Exchange.UM.CallRouter.exe Powershell.exe Microsoft.Exchange.AntispamUpdateSvc.exe MSExchangeDagMgmt.exe ScanEngineTest.exe Microsoft.Exchange.ContentFilter.Wrapper.exe MSExchangeDelivery.exe ScanningProcess.exe Microsoft.Exchange.Diagnostics.Service.exe MSExchangeFrontendTransport.exe TranscodingService.exe Microsoft.Exchange.Directory.TopologyService.exe MSExchangeHMHost.exe UmService.exe Microsoft.Exchange.EdgeSyncSvc.exe MSExchangeHMWorker.exe UmWorkerProcess.exe […]