0 Replies Latest reply on May 12, 2017 4:10 PM by bretzeli

    WANNACRY: How to integrate the EXTRA.DAT in ENS or EPO (German GUI)


      For all of you who are unsure how to handle this we made a short manual on how to deploy the EXTRA.DAT with EPO Server against the WannCry Ransomware.


      Butsch.ch | Ransomware: How to integrate the WannaCry EXTRADAT in EPO or McAfee ENS client






      McAfee is aware that several customers are impacted by a new ransomware. Ransom-WannaCry
      (also known as WannaCry, WCry, WanaCrypt and WanaCrypt0r) is encrypting files
      with the .wnry, .wcry, .wncry, and .wncryt extensions. Encryption is occurring
      on the local host and across open SMB shares. Impacted systems might also show a
      blue screen upon system reboot.




      McAfee Client ENS 10.5.1 how to include the EXTRA.DAT (Extradat.zip) against the WannaCry Ransomware

      Unpack the EXTRA.ZIP to EXTRA.DAT



      McAfee EPO:

      How to the DEPLOY the EXTRADAT in a GERMAN or ENGLISH EPO Server 5.X

      MENU >
      Master Repository

      You have to UNPACK the EXTRADAT.ZIP to File EXTRA.DAT

      Now from now IF you have GLOBAL UPDATE active it should deploy to all clients. IF you want be sure do it manual.


      Make sure you check GLOBAL UPDATE. Above mentioned steps with UPDATE NOW do
      the same. Choose both ways to be 100% sure it done!

      Hope this helps ;-)


      Greetings from Switzerland