cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Need assistance with Trojan "Artemis!56DC15737866"?

We've detected a trojan "Artemis!56DC15737866" and events show the following action 

- Threat Action Taken: IDS_ALERT_ACT_TAK_WBD
- Event ID: 1428

- Second Attempted Action: IDS_ALERT_THACT_ATT_DEL
- Second Action Status: True

Could you please assist in determining the Artemis number and how can we mitigate this?

Thanks

3 Replies
Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 4

Re: Need assistance with Trojan "Artemis!56DC15737866"?

Hello,

Please refer to below article:

https://service.mcafee.com/webcenter/portal/oracle/webcenter/page/scopedMD/s55728c97_466d_4ddb_952d_...

Artemis detections could be false-positive detections of legit applications but you can submit a sample with mcafee directly:

https://www.mcafee.com/enterprise/en-us/threat-center/how-to-submit-sample.html

In case above information was useful or answered your question, please select "Accept as Solution" in my reply, or give a Kudo. Thanks!
Nino
Highlighted

Re: Need assistance with Trojan "Artemis!56DC15737866"?

Could you please expand on that? Specifically what does IDS_ALERT_ACT_TAK_WBD mean? I have difficulty interpreting WBD. Is there a list of acronyms and their meaning you can refer me to? what about a list of ThreatEventIDs and what they mean? 1428 is not very explicit.

TIA

 

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 4 of 4

Re: Need assistance with Trojan "Artemis!56DC15737866"?

Hi,

This is what WBD means:

https://community.mcafee.com/t5/Endpoint-Security-ENS/What-does-quot-IDS-ALERT-ACT-TAK-WBD-quot-mean...

Regarding the acronyms that could be helpful:

https://kc.mcafee.com/corporate/index?page=glossary#top

You can find ENS event IDs here:

https://kc.mcafee.com/corporate/index?page=content&id=KB85494

Additionally these are ePO events:

https://kc.mcafee.com/corporate/index?page=content&id=KB54677

In case above information was useful or answered your question, please select "Accept as Solution" in my reply, or give a Kudo. Thanks!
Nino

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community