cancel
Showing results for 
Search instead for 
Did you mean: 
Nisa51
Level 9

Artemis!2B8031C3C3C8 TROJAN

I have this Trojan in my Quarantined Section on Internet Security. It came through an email apparently. I have sent it to McAfee........But can I delete it from the quarantined section?

File Path is

C:\WINDOWS\TEMP\MC00000\MCE00001

Artemis!2B8031C3C3C8

I am on Windows xp sp3. I have done a search for the file path and cannot find this on my PC?

I have never had a trojan before, so can I delete this does anyone know.

Thank you for your replies in advance.

0 Kudos
12 Replies
Nisa51
Level 9

Re: Artemis!2B8031C3C3C8 TROJAN

Do I restore or delete this or is in fact an actual Trojan and to keep it in quarantine

0 Kudos
nchattop
Level 12

Re: Artemis!2B8031C3C3C8 TROJAN

Hi Nisa,


The file received is infected and can be detected and removed with our current DAT files and engine. It is recommended that you update your DAT and engine files and scan your computer again.  

Detection: generic dropper!dds
                                                          

If you are not seeing this with the product you are using, please speak with technical support so that they can help you determine the cause of this discrepancy.          


If you believe your computer is infected, but are unsure which files should be submitted to McAfee Labs for review, please visit:                                  

http://vil.mcafeesecurity.com/vil/submit-sample.aspx                                


Use the following link to update your DAT and scan engine to the most current version:

http://www.mcafee.com/apps/downloads/security_updates/dat.asp                        

Use the following links to reach online technical support for McAfee products -      

Corporate Customers:                                                                

http://www.mcafeesecurity.com/us/support/                                            

Single User/Retail Customers:                                                        

http://www.mcafeehelp.com

Regards

Neha Chattopadhyay

McAfee SME

0 Kudos
Nisa51
Level 9

Re: Artemis!2B8031C3C3C8 TROJAN

Somewhat a bit confused to what you mean. This did not appear from a scan, I did a scan yesterday and it never showed up. This quarantined item just appeared 5 days ago and was attached to an email which i didnt open just deleted, and never had a pop up to say a trojan stopped/blocked.

I only noticed that this had been done yesterday when I did a scan.

My DAT 5986

Engine 5400.1158

So are you saying I have to uninstall this McAfee and download a new one??

I am sorry but i really do not understand what I have to do here, it sounds so complicated downloading this DAT engine

And where am I supposed to see this Detection: generic dropper!dds

Message was edited by: Nisa51 on 19/05/10 12:18:47 CDT

Message was edited by: Nisa51 on 19/05/10 13:11:49 CDT
0 Kudos
nchattop
Level 12

Re: Artemis!2B8031C3C3C8 TROJAN

Hi Nisa,

You don't have to uninstall McAfee, Due to advanced cleaning techniques needed for cleaning of this threat, it's recommended that you use the Beta DATs for detection and cleaning.  The Beta DATs can be found at the following site:
http://vil.mcafeesecurity.com/vil/virus-4d.aspx
Current Dats: 5987

The engine you are using is fine.

Thanks

Neha Chattopadhyay

McAfee SME

0 Kudos
Nisa51
Level 9

Re: Artemis!2B8031C3C3C8 TROJAN

nchattop wrote:

Hi Nisa,

You don't have to uninstall McAfee, Due to advanced cleaning techniques needed for cleaning of this threat, it's recommended that you use the Beta DATs for detection and cleaning.  The Beta DATs can be found at the following site:
http://vil.mcafeesecurity.com/vil/virus-4d.aspx
Current Dats: 5987

The engine you are using is fine.

Thanks

Neha Chattopadhyay

McAfee SME

Hi neha

There are 3 downloads on that list which one do I do, or is all 3. Sorry to be a pain never done this before, do I just run these downloads and that is it?

0 Kudos
nchattop
Level 12

Re: Artemis!2B8031C3C3C8 TROJAN

Hi Nisa,

You emailed us the detection name Artemis!2B8031C3C3C8 , when we checked further we anlaysed that the file: my_resume.xxx.exe is currently detecting with our McAfee dats as generic dropper!dds, Henceforth the extra dat I have emailed will delete the files registry keys and process

Regards

Neha Chattopadhyay

McAfee SME

Message was edited by: neha chattopadhyay on 5/19/10 3:23:41 PM CDT
0 Kudos
Nisa51
Level 9

Re: Artemis!2B8031C3C3C8 TROJAN

nchattop wrote:

Hi Nisa,


The file received is infected and can be detected and removed with our current DAT files and engine. It is recommended that you update your DAT and engine files and scan your computer again.  

Detection: generic dropper!dds
                                                          

If you are not seeing this with the product you are using, please speak with technical support so that they can help you determine the cause of this discrepancy.          


If you believe your computer is infected, but are unsure which files should be submitted to McAfee Labs for review, please visit:                                  

http://vil.mcafeesecurity.com/vil/submit-sample.aspx                                


Use the following link to update your DAT and scan engine to the most current version:

http://www.mcafee.com/apps/downloads/security_updates/dat.asp                        

Use the following links to reach online technical support for McAfee products -      

Corporate Customers:                                                                

http://www.mcafeesecurity.com/us/support/                                            

Single User/Retail Customers:                                                        

http://www.mcafeehelp.com

Regards

Neha Chattopadhyay

McAfee SME

I have downloaded the security_updates/dat I have rebooted my pc but my internet security still says Dats is 5986? Am I supposed to do something else, if so WHAT? Where is the file located on my PC? Neha you are not being very clear on your instructions as to what to day with this.

Think I will just uninstall Mcafee and download a more simpler security system. had enough.

0 Kudos
Nisa51
Level 9

Re: Artemis!2B8031C3C3C8 TROJAN

This link http://www.mcafee.com/apps/downloads/security_updates/dat.asp  does not work I did as it said and saved to desktop, ran it and got the this error message up Unable to find any qualified McAfee products.  So hey for that

My Dat No. is now 5987. I have rebooted, I have restored this quaratined trojan, done a rescan, the trojan has been put back in the quarantined folder and not been deleted or removed from my pc.

The extra.dat file you sent me in an email with the path to copy it to does not exist on my PC. It took me about 30 mins to find a path which I think it should be sent to. So can you tell me which path this exra.dat file should sent to:

1) Program files\McAfee\VirusScan\Engine?

2) Program files\McAfee\VirusScan\Engine\DAT ?

3) Program files\McAfee\VirusScan\Engine\DAT\5987  - even though my product DAT says 5988?

Or at least tell me how I can get rid of the Trojan?

Posting this here as you have not replied to me email.

0 Kudos
nchattop
Level 12

Re: Artemis!2B8031C3C3C8 TROJAN

Hi Nisa,

The extra dat to be saved under /programs/common files/mcafee where you find avvscan.dat, avvclean.dat and avvnames.dat paste in the same folder and then scan the file which you suspects. It should delete the file.

I would also advise you to call our Technical Support team for any further assistance.

Virus Research accepts file samples for analysis and possible inclusion into AV signature DAT sets. We are also prepared to answer general virus questions.

All product related questions and comments can be addressed through technical support and customer service, including:

* Product installation and update questions
* Product usage questions
* Specific operating system/version questions
* Assistance with detection and cleaning or removal of viruses or trojans

Please use the following link to reach our technical support group for McAfee products.

Corporate Customers:
http://www.mcafee.com/us/support/index.html>

Single User/Retail Customers:
http://service.mcafee.com

Neha

Regards

0 Kudos