Below is the original email I received when attempting to get a .exe whitelisted via the submission process at https://community.mcafee.com/thread/2016
Could I get some assistance on how to proceed from that point?
I appreciate the help and thanks for your time!
======================================================================================
McAfee Labs - Beaverton
Current Scan Engine Version:5900.7806
Current DAT Version:8611.0000
Thank you for your submission.
Analysis ID: 10395006
File Name Findings Detection Type Extra
--------------------|------------------------------|----------------------------|------------|-----
inconclusive [zipandupload.exe]
Automated analysis was not able to determine that this file is malware. This file is
being sent for further processing and the DAT files will potentially be updated if
detection of this sample is warranted.
Note –
Due to the prevalence of network gateway AV products, it is important that all
submissions be zipped and the zip file password-protected (password - infected). Some
products will reject an email that contains a virus that is not sent in this way. In
addition, often we receive a file that appears not to have been infected, to find
later that the file was infected when it left the sender, and was cleaned somewhere
along the line.
Regards,
McAfee Labs
Solved! Go to Solution.
I've marked this file as clean, and you shouldn't have any more detections.
- David
I apologize for the lack of an Artemis ID as instructed. The detections are on several remote client PCs in which I do not have immediate access to.
Ok I will escalate this detection. Usually submission takes a few days I will assume you have waited this time before asking.
Thank you for the quick response!
Ticket #: AM001273 - Analysis ID: 10395006 false detection maybe
I've marked this file as clean, and you shouldn't have any more detections.
- David
Fantastic! I'll try to confirm this at the remote sites with the issue.
Thank you both for your time and quick assistance. Have a good weekend!
Happy to help, you have a good one too.
- David
Could you kindly confirm that your detection has been suppressed,so as we can close this thread?
Thank you,
CD
My apologies, it has taken longer to coordinate an available remote session with the affected districts than anticipated.
I was able to restore the .exe and manually scan the file today at 1 of the 4 locations and it appeared to be properly white listed. If the manual scan functions off the same definitions as the scheduled scan then I believe we should be good.
Thank you again for your assistance with this issue!
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA