Hi
The best way to submit potential falses is as follows:
If you believe a false detection or misclassification has occurred with a particular file, use the steps below to submit the sample in question to McAfee Labs for review.
When analysis of the sample is complete, one of the following will occur:
* The sample is considered clean, detection is suppressed and will be updated in the earliest DAT release.
* The sample is misclassified, reclassification will occur and detection will be updated in the earliest DAT release.
* Analysis of the file determines that the sample is properly detected. The customer will be notified of the results.
*False Positive Submission Procedure:*
1. When submitting a sample, send it to the McAfee Labs Virus Research mailbox: virus_research@avertlabs.com (mailto:virus_research@avertlabs.com)
2. All false positive samples should have the word *FALSE* in the subject line. Example subject line:
*FALSE: In-house file being detected by McAfee*
1. Ensure that you include the On Access / On Demand Scan log files of the McAfee product along with the DAT and engine versions in use at the time. Also, include any other relevant information regarding why you believe the file has been incorrectly detected. This information will be helpful during our analysis of the sample. Example email message:
*NOTE:* Failure to supply all of the information requested above may result in delays in the analysis process.
Hope this helps!
Regards
Neha
