Alert - McAfee Update Causing Windows XP Machines to Shut Down

Microsoft has been made aware of an issue with a McAfee DAT file update - released Wednesday, April 21, 2010 - that has been causing stability issues on Windows XP client systems. The symptom is caused by a false-positive detection on a core Windows file (svchost.exe). Once the file is quarantined by McAfee, the system may encounter one of the following symptoms:

  • The computer shuts down when a DCOM error or a RPC error occurs
  • The computer continues to run without network connectivity.
  • The computer triggers a Bugcheck (Blue Screen). 

The DAT file version that that caused the problem is McAfee DAT 5958. This file was propagated to client machines that conduct automatic updates of definition files. McAfee updated the DAT file soon after the problem was identified with a new version that does not cause the problem.

Resolution Steps

Please review the following KB Articles for specific steps to resolve the issue on systems that are affected.

McAfee KB Article:

https://kc.mcafee.com/corporate/index?page=content&id=KB68780

Microsoft KB Article:

http://support.microsoft.com/kb/2025695

Recommendations

Microsoft recommends customers affected by this symptom first review the McAfee KB Article referenced above. For further assistance, customers should contact McAfee. Customers who are unable to resolve the issue through these means can contact Microsoft for technical support using resources found on this Web page: http://support.microsoft.com/.