Application and Change Control - Windows End Point 7.0.1 version 354 is now available. This release includes new features, fixes, and enhancements including:

• Updater privileges are erroneously not revoked from a script file when it executed by an interpreter. (1154252)
• When enabling Application Control using reboot-free activation, the scsrvc service crashes. (1161869)
• On a protected system running the 7.0.0-666 build, high CPU usage and performance degradation is observed. (1151097)
• Updater privileges are not taken away if scripts is executed via WOW64 interpreter on window 7 x64 (1152767)
• Powershell remains updater when an updater script is executed using – noexit parameter on Win10 (1161842)

See the Release Notes for a full list of new features, fixes and enhancements.

To download version 7.0.1-354, go to the Product Downloads site at:
http://www.mcafee.com/us/downloads/downloads.aspx.   

For a full list of changes, see the Release Notes:
https://kc.mcafee.com/corporate/index?page=content&id=PD26906.

For a list of Known Issues McAfee Application Control, see:
https://kc.mcafee.com/corporate/index?page=content&id=KB87447.

For a list of Known Issues McAfee Change Control, see:
https://kc.mcafee.com/corporate/index?page=content&id=KB87446

McAfee Agent 5.0.4 Hotfix 1179191 is now available. This release includes new features, fixes, and enhancements including:

• Bug fixes - See the Release Notes for details
• Rollup of fixes from previous McAfee Agent 5.0.4 hotfixes

To download McAfee Agent 5.0.4 Hotfix 1179191, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.   

For a full list of changes, see the Release Notes in PD26893:
https://kc.mcafee.com/corporate/index?page=content&id=PD26893

For a list of Known Issues, see KB83895:
https://kc.mcafee.com/corporate/index?page=content&id=KB83895

The McAfee Anti-Malware Engine, a core component of the McAfee Endpoint and Gateway products, analyzes potentially malicious code to detect and block Trojans, viruses, worms, adware, spyware, and other threats.

The 5900 Anti-Malware Engine Release Candidate and VirusScan Command Line 6.1.0 Release Candidate is now available.

The release schedule is as follows:

• 5900 Engine (Elective download) GA for corporate products (except ENS) and VirusScan Command Line 6.1.0 products GA - Late February 2017
• 5900 Engine (AutoUpdate) GA for corporate products (except ENS) - Late April 2017

New features in the 5900 Anti-Malware Engine
The 5900 Anti-Malware Engine is a yearly Engine release that will succeed the current 5800 Engine and includes the following improvements:

Detection and Performance Enhancements:

• Enhanced support of JavaScript to detect more threats
• Improved support for Microsoft Office (OLE) file format
• Improved unpacking of Dotfuscator and MPRESS packed files
• Enhancements to DAT content to improve predictability of content processing

Platform Enhancements:

• New Platform Support
• Windows 10 Anniversary Update
• Windows Server 2016

Where are the Packages available?
   
They are available from the Engines area of the McAfee Enterprise Beta site:
http://www.mcafee.com/us/beta/public-betas/engines/5900-anti-malware-engine.aspx

For complete information about the 5900 Anti-Malware Engine, see KB66741:
https://kc.mcafee.com/corporate/index?page=content&id=KB66741

A new Advanced Threat Defense (ATD) detection package for version 3.8.0 and 3.10.0 is now available. This release includes new detection enhancements including:

• Behavioral Rules (Yara): This detection package includes an additional 10 detection rules.
• Family Classification Updates:

Trojan.Win32.Berbew.A Trojan.Win32.Totbrick.A
Trojan.Win32.Crituck.A Trojan.Win32.Mupad.A
Trojan.Win32.Gamarue.U Trojan.Win32.Gamarue.V
Trojan.Win32.Gamarue.W Trojan.Win32.Swrort.A
Trojan.Win32.Cyrpt.Blowfish

Physical Appliances (ATD 3.8.0)
The new 3.8.0.17011802.59148 detection package will be automatically downloaded to your appliance and available for install through the Web UI: Manage > Image & Software > Content Update > Detection Pkg.

Virtual Appliances (ATD 3.10.0)
You will need to use your support entitlement to download the content update 3.10.0.170202.59264

McAfee Labs has released an updated Threat Advisory for Ransomware-SAMAS.

Ransomware-SAMAS is a detection for a family of ransomware that, on execution, encrypts certain file types present in the user’s system. The compromised user has to pay the attacker with a ransom to get the files decrypted.

For details, see Knowledge Base document PD26873 at: https://kc.mcafee.com/corporate/index?page=content&id=PD26873
​