cancel
Showing results for 
Search instead for 
Did you mean: 
mreco
Level 9

False positive Artemis!B8E16A4652FD

Artemis reports this as a virus, but there's no virus in there.

Please investigate.

0 Kudos
3 Replies
showvik
Level 12

Re: False positive Artemis!B8E16A4652FD

Hi,

This is detected as potentially unwanted program WinLock (PUP). It does not contain a virus, and is not considered a trojan because it does not damage systems maliciously. However, it may be used by malware as a companion to action malicious activities.

If the file is known to be good and has a ligitimate purpose in your environment, you may set the exclusions accordingly, depending on the installed product. For more information on configuring PUPs, kindly visit:

http://www.mcafee.com/in/mcafee-labs/resources/pups-configuration.aspx

Regards,

Showvik

0 Kudos
mreco
Level 9

Re: False positive Artemis!B8E16A4652FD

I forgot to mention that Web Gateway reports this file as PUP.

In the link, there's no information about how to configure WebGateway.

0 Kudos
showvik
Level 12

Re: False positive Artemis!B8E16A4652FD

Hi,

There are provisions to define rules in McAfee Web Gateway. Kindly refer the product documentation for more details around that. Here is the link to MGW 7.2 documentation:

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/23000/PD23741/en_US/...

Regards,

Showvik

0 Kudos