cancel
Showing results for 
Search instead for 
Did you mean: 
ewang
Level 7

False Positive: Artemis!4EC67D890648

Jump to solution

I have been trying to play an old computer game called The Temple of Elemental Evil.

Unfortunately, the game needs a mod pack to work correctly.  The mod pack, and thus, the game do not work as 2 programs associated with the game are being identified by McAfee as suspect items that are quarantined.

The 2 items being quarantined are:  tfe-x.tfe and toee.exe

Both items have the same code of Artemis!4EC67D890648.

Other players have already noted that McAfee will create a false positive on these 2 items.  Some have already had McAfee whitelist the items for their computers.

How do I get these items to be fixed by McAfee for my computer?

Thanks in advance for your help,

Ewang

0 Kudos
1 Solution

Accepted Solutions
vinoo
Level 13

Re: False Positive: Artemis!4EC67D890648

Jump to solution

The file has been whitelisted. Give it ~25 mins for the detection to go away.

on 7/11/13 11:22:12 AM IST
0 Kudos
9 Replies
Peacekeeper
Level 20

Re: False Positive: Artemis!4EC67D890648

Jump to solution

http://vil.nai.com/vil/submit-sample.aspx

Submit the samles separately as a zipped password protected file and when you get a reply reply immediadely changing teh subject to False +ve and name of detection ie Artemis!4EC67D890648. Say why you feel it is a false detection.

Do this for both files

Post the analysis Ids here (that is shown on the reply and it no fix in 4 days I will escalate it to a lab tech.

0 Kudos
ewang
Level 7

Re: False Positive: Artemis!4EC67D890648

Jump to solution

Thanks, Tony! 

The Analysis ID for the tfe-x.tfe file is : 7790411

I kept sending in the toee.exe file, but never received a reply email for that one.  I've tried multiple times.

0 Kudos
Peacekeeper
Level 20

Re: False Positive: Artemis!4EC67D890648

Jump to solution

I assume it was zipped and passworded correctly? I will ask a lab tech to look at it.

Are the files from the mod pack or the old game files?

Also restore the files and run getsusp from

McAfee Communities: Anti-Spyware/Malware & Hijacker Tools

Add your email addy into the program preferences

Message was edited by: Peacekeeper on 7/11/13 6:14:41 AM
0 Kudos
ewang
Level 7

Re: False Positive: Artemis!4EC67D890648

Jump to solution

Initially, no; eventually, yes. 

I believe that they are from the mod pack.

It's strange.  Now, McAfee is quarantining a 3rd file with the exact same Artemis identification, but with no name to the file.

Thanks again, Tony, for your help in this matter.

0 Kudos
Peacekeeper
Level 20

Re: False Positive: Artemis!4EC67D890648

Jump to solution

I have messaged my contact please run getsusp and not the zip fles names it produces . Restore all files from quarantine first

0 Kudos
vinoo
Level 13

Re: False Positive: Artemis!4EC67D890648

Jump to solution

The file has been whitelisted. Give it ~25 mins for the detection to go away.

on 7/11/13 11:22:12 AM IST
0 Kudos
ewang
Level 7

Re: False Positive: Artemis!4EC67D890648

Jump to solution

Thank you so much, Tony and vinoo, for all your help on this!  Smiley Happy

I won't have a chance to check it out till later tomorrow, but I'm really looking forward to it. 

0 Kudos
Peacekeeper
Level 20

Re: False Positive: Artemis!4EC67D890648

Jump to solution

Hope this clears up the other detections.

0 Kudos
ewang
Level 7

Re: False Positive: Artemis!4EC67D890648

Jump to solution

Everything works perfectly now.  No more quarantined files.

Thanks again, Tony & vinoo! 

0 Kudos