STIGQter: STIG Summary: McAfee VirusScan 8.8 Local Client STIG Version: 5 Release: 16 Benchmark Date: 27 Jul 2018:

McAfee VirusScan Unwanted Programs Policy must be configured to detect adware.

DISA Rule

SV-56411r1_rule

Vulnerability Number

V-14663

Group Title

DTAM136 - McAfee VirusScan detection of Adware

Rule Version

DTAM136

Severity

CAT II

CCI(s)

• CCI-001243 - The organization configures malicious code protection mechanisms to perform organization-defined action(s) in response to malicious code detection.

Weight

10

Fix Recommendation

Access the local VirusScan console by clicking on Start->All Programs->McAfee->VirusScan Console.

Under the Task column, find the Unwanted Programs Policy, right-click, and choose Properties.
In the Scan Items tab, select the Adware option.


Click OK to Save.

Check Contents

Access the local VirusScan console by clicking on Start->All Programs->McAfee->VirusScan Console.

Under the Task column, find the Unwanted Programs Policy, right-click, and choose Properties.
In the Scan Items tab, ensure the Adware option is selected.

If the Adware option is not selected, this is a finding.
If the Adware option is selected, this is not a finding.

On the client machine, use the Windows Registry Editor to navigate to the following key:
HKLM\Software\McAfee\ (32-bit)
HKLM\Software\Wow6432Node\McAfee\ (64-bit)
SystemCore\VSCore\NVP

Criteria: If the value DetectAdware is 1, this is not a finding.

Vulnerability Number

V-14663

Documentable

False

Rule Version

DTAM136

Severity Override Guidance

Access the local VirusScan console by clicking on Start->All Programs->McAfee->VirusScan Console.

Under the Task column, find the Unwanted Programs Policy, right-click, and choose Properties.
In the Scan Items tab, ensure the Adware option is selected.

If the Adware option is not selected, this is a finding.
If the Adware option is selected, this is not a finding.

On the client machine, use the Windows Registry Editor to navigate to the following key:
HKLM\Software\McAfee\ (32-bit)
HKLM\Software\Wow6432Node\McAfee\ (64-bit)
SystemCore\VSCore\NVP

Criteria: If the value DetectAdware is 1, this is not a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

605

Comments