3 Replies Latest reply on Dec 1, 2010 12:45 AM by vinoo

    McAfee GetSusp 3.0.0.120

    vinoo

      A placeholder for hosting the latest version of GetSusp and its ePO deployable package. Current version is GetSusp 3.0.0.120 (build date 23rd Nov 2010)

       

      GetSusp Product Guide: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 22000/PD22668/en_US/GetSusp.pdf
      GetSusp-ePO Guide: https://kc.mcafee.com/corporate/index?page=content&id=KB70405
      GetSusp FAQ: https://kc.mcafee.com/corporate/index?page=content&id=KB69385

       

      GetSusp 3.0.0.120 – ChangeLog:


      + Code optimization – reduced size of GetSusp.exe by ~170KB.


      + Updated Scan location: Run entries under HKEY_Users\ registry hive (Miss reported by Tyco Electronics)
         Depending on the number of user profiles stored in the registry, GetSusp will traverse the all HKEY_USERS\S-x-x-xx RUN keys:
         [HKEY_USERS\S-x-x-xx\Software\Microsoft\Windows\CurrentVersion\Run]
         [HKEY_USERS\S-x-x-xx\Software\Microsoft\Windows\CurrentVersion\RunOnce]


      + Updated Scan location: Winlogon\Userinit (Miss reported by QA during weekly LVT)
         [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
         "Userinit"="C:\\Windows\\system32\\userinit.exe,C:\Windows\host32.exe"  MD5 of sample: 1ADC27CEC841B066829045E3D3CE5CE9

       

       

      The latest version of GetSusp is hosted at: http://downloadcenter.mcafee.com/products/mcafee-avert/GetSusp/GetSusp.exe

       

      Message was edited by: vinoo on 18/7/11 4:59:19 PM IST