cancel
Showing results for 
Search instead for 
Did you mean: 
yaekee
Level 7
Report Inappropriate Content
Message 1 of 5

False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

I use scoop (https://github.com/lukesampson/scoop) to manage the tools on my Windows 10. Recently McAfee Endpoint Security think a file of scoop has a malware. Our comany IT send me this notification every week.

I want to check whether this file contain security issue.

 

 

2 Solutions

Accepted Solutions
Highlighted
Reliable Contributor ninov_n
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

Hello,

I do not see any current detections by McAfee regarding the Scoop package:

https://www.virustotal.com/#/file/5f09bd5e1e254f9f8b11969e859a0005db306cfe7350d5385f2d6ae72d06693c/d...

May be they were removed from the latest signature files but otherwise you can go on and put the detection as an exclusion so next on-demand or on-access does not detect it.

In case above information was useful or answered your question, please select "Accept as Solution" in my reply, or give a Kudo. Thanks!
Nino
McAfee Employee dvarnell
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

I am not seeing any detection for this core.ps1 file either. If you are still getting the detection, please open a Service Request so that we can take a further look.

 

Thanks!

4 Replies
yaekee
Level 7
Report Inappropriate Content
Message 2 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

Our security team give me more information and it's definitely McAfee issue.

The reason for multiple notifications on your machine is because of the application ‘Scoop’, which is a command line installer for windows. As you are using this program to install/manage other applications, we are getting alerts as and when the program is being used or McAfee OnDemand scan picks it up. Whenever powershell is executed to manage any apps through scoop, it is invoking core.ps1, which is categorized as ‘PS/Downloader!ams.h’ by McAfee.

Highlighted
Reliable Contributor ninov_n
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

Hello,

I do not see any current detections by McAfee regarding the Scoop package:

https://www.virustotal.com/#/file/5f09bd5e1e254f9f8b11969e859a0005db306cfe7350d5385f2d6ae72d06693c/d...

May be they were removed from the latest signature files but otherwise you can go on and put the detection as an exclusion so next on-demand or on-access does not detect it.

In case above information was useful or answered your question, please select "Accept as Solution" in my reply, or give a Kudo. Thanks!
Nino
McAfee Employee dvarnell
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

I am not seeing any detection for this core.ps1 file either. If you are still getting the detection, please open a Service Request so that we can take a further look.

 

Thanks!

yaekee
Level 7
Report Inappropriate Content
Message 5 of 5

Re: False Alarm for https://raw.githubusercontent.com/lukesampson/scoop/master/lib/core.ps1

Jump to solution

Thank you for the reply.

I'm happy that scoop is clean.

The version for my McAfee Endipoint Security is 10.6 and all the configuration is controlled by IT department. The security team tell me they may take the further action. I have to perform four malware scan (one scan for one week) for this file since MaAfee find it contain trojan.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community