3 Replies Latest reply on Dec 1, 2010 12:45 AM by vinoo

    McAfee GetSusp


      A placeholder for hosting the latest version of GetSusp and its ePO deployable package. Current version is GetSusp (build date 23rd Nov 2010)


      GetSusp Product Guide: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 22000/PD22668/en_US/GetSusp.pdf
      GetSusp-ePO Guide: https://kc.mcafee.com/corporate/index?page=content&id=KB70405
      GetSusp FAQ: https://kc.mcafee.com/corporate/index?page=content&id=KB69385


      GetSusp – ChangeLog:

      + Code optimization – reduced size of GetSusp.exe by ~170KB.

      + Updated Scan location: Run entries under HKEY_Users\ registry hive (Miss reported by Tyco Electronics)
         Depending on the number of user profiles stored in the registry, GetSusp will traverse the all HKEY_USERS\S-x-x-xx RUN keys:

      + Updated Scan location: Winlogon\Userinit (Miss reported by QA during weekly LVT)
         [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
         "Userinit"="C:\\Windows\\system32\\userinit.exe,C:\Windows\host32.exe"  MD5 of sample: 1ADC27CEC841B066829045E3D3CE5CE9



      The latest version of GetSusp is hosted at: http://downloadcenter.mcafee.com/products/mcafee-avert/GetSusp/GetSusp.exe


      Message was edited by: vinoo on 18/7/11 4:59:19 PM IST