|
|
| |
| The default NAI/McAfee Viruscan configuration does not include .VBS in the list of program file extensions, thereby skipping VBS files when scanning. The VBS/Freelink virus and possible other viruses could go undetected. |
| |
Credit:
The information was provided by: Bram Kerkhof.
|
| |
Vulnerable versions:
- McAfee Viruscan NT Engine 4.0.3a
- McAfee Viruscan 9x Engine 4.0.3
- McAfee Netshield Engine 4.0.3
- McAfee Groupshield for Notes Engine 4.50
- McAfee Groupshield for Exchange Server 4.50
It is possible for a user protected by the McAfee Antivirus to get infected by the VBS\Freelink virus. This is due to the fact that "only program files" are scanned, and the .VBS extension is not included in the default list of program extensions. Therefore, VBS files are skipped during scans. The only way to update this is by adding the VBS extension manually to the list of extensions in the client.
Workaround:
Two possible solutions:
1) Add the .VBS extension to the list of program file extensions in the on-access monitor, and the viruscan program. Keep in mind that different viruscan programs have their own lists!
2) Select "Scan All Files"
|
|
|
