So, if you scan the files of some legit program (Steam, firefox, etc...) with virustotal, MCAfee GW edition just detects a file as "BehavesLike.Sys32.blablabla" or Win32.
Heres an example:
These detections are from the 2 following programs:
Can someone tell me if they are false positive.
Links from virustotal:
**EDIT** - Scanned my computer with MalwareBytes, ended up with 0 detections (even added rootkit scan)
Message was edited by: luce kuce
Unless you're seeing the same problem from a REAL McAfee Gateway, don't worry about it. As VT says, you can't rely on their data being the same as actual deployed AV.
What are you scared about?
You're not using McAfee GW Edition, and it's one of two dozen plus engines the third party Virustotal is running. I expect they simply have it configured to be extremely cautious.
Without analyzing the files no one can tell definitively if they are infected or not, but the fact the vast majority of products, including the ones installed on your machine say they are safe most likely means they are.
Run getsusp if you want to confirm. McAfee GW Edition is vastly different to consumer AV.