cancel
Showing results for 
Search instead for 
Did you mean: 

McAfee GW Edition is out of control.

So, if you scan the files of some legit program (Steam, firefox, etc...) with virustotal, MCAfee GW edition just detects a file as "BehavesLike.Sys32.blablabla" or Win32.

Heres an example:

BehavesLike.Win32.Suspicious.cm

BehavesLike.Win32.Dropper.mm

BehavesLike.Win32.Suspicious.dm

These detections are from the 2 following programs:

Steam

Firefox

Can someone tell me if they are false positive.

Thank you.

Links from virustotal:

https://www.virustotal.com/en/file/1fa8613a1e616106a96a38ecb185f42328f9e1b39573a292aff1d7b2733f1fa8/...

https://www.virustotal.com/en/file/1b5a9f300de44dc24bf6f6735f97c60e0acfe0fd3b49350c5cc5141452768960/...

**EDIT** - Scanned my computer with MalwareBytes, ended up with 0 detections (even added rootkit scan)

Message was edited by: luce kuce

7 Replies
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 2 of 8

Re: McAfee GW Edition is out of control.

As it's GW Edition I moved this to Malware Discussion > Corporate User Assistance, however, it may be better off actually in the GW Edition area, I can move it there if you like.

This may interest you although it is written for Consumer software users.

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 3 of 8

Re: McAfee GW Edition is out of control.

On second thoughts I'll leave this here as you already posted in GW Edition.

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 4 of 8

Re: McAfee GW Edition is out of control.

Unless you're seeing the same problem from a REAL McAfee Gateway, don't worry about it. As VT says, you can't rely on their data being the same as actual deployed AV.

Re: McAfee GW Edition is out of control.

But is this false-positive? Thats all that I wan't to know. I scanned my computer FULLY with malwarebytes and ended up with no problems, i am still scarred.

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 6 of 8

Re: McAfee GW Edition is out of control.

You'd have to submit each one to the labs as described in that link.

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 7 of 8

Re: McAfee GW Edition is out of control.

What are you scared about?

You're not using McAfee GW Edition, and it's one of two dozen plus engines the third party Virustotal is running. I expect they simply have it configured to be extremely cautious.

Without analyzing the files no one can tell definitively if they are infected or not, but the fact the vast majority of products, including the ones installed on your machine say they are safe most likely means they are.

Run getsusp if you want to confirm. McAfee GW Edition is vastly different to consumer AV.

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 8 of 8

Re: McAfee GW Edition is out of control.

Goodness me, all this fuss and here's me thinking the customer was running GW Edition.

Please listen to SafeBoot, he knows what he's talking about.