PE_File.dll is not a virus but Mcafee detect it...Artemis!8ED812337F62

[junk_cia_man_ju]

Hello again!

PE_File.dll under C:\Windows is detected as a virus by Mcafee AllAcess

But this I think can't be the truth...

What can I do this time...?!

Thx

[exbrit]

This may help: 

[junk_cia_man_ju]

It must be a mistake by Mcafee:

https://www.virustotal.com/de/file/a22e0e480d1c27ebb3fb8dc5966743b23eb6fd1a11a082043dc8f4449d4a7e98/...

[junk_cia_man_ju]

I send this file by mail to Mcafee...

Hope they fix this issue soon again

[exbrit]

If you sent it correctly (zipped and password protected using the password infected) you should get an auto-response almost immediately which means they are working on it.

[junk_cia_man_ju]

I have already a response:

McAfee Labs - Beaverton

Current Scan Engine Version:5700.7163

Current DAT Version:7994.0000

Thank you for your submission.

Analysis ID: 9671818

File Name Findings Detection Type         Extra

--------------------|------------------------------|----------------------------|------------|-----

pe_file.dll |inconclusive | |            |no  

inconclusive [pe_file.dll]

   Automated analysis was not able to determine that this file is malware. This file is  

being sent for further processing and the DAT files will potentially be updated if    

detection of this sample is warranted.

Note –

Due to the prevalence of network gateway AV products, it is important that all        

submissions be zipped and the zip file password-protected (password - infected). Some 

products will reject an email that contains a virus that is not sent in this way. In  

addition, often we receive a file that appears not to have been infected, to find     

later that the file was infected when it left the sender, and was cleaned somewhere   

along the line.

Regards,

McAfee Labs                                                                           

[exbrit]

That sounds promising.

[junk_cia_man_ju · Accepted solution]

I think it is fixed... No virus anymore

Thx McAfee... or should I say Intel Security

[exbrit]

Glad you are OK, good luck 😉

[catdaddy]

Hopefully this file has indeed been whitelisted, As you stated it does not seem to be detected when accessed. The response back from McAfee Labs was 'Inconclusive' simply meaning it could not be determined if it was malware or not. And was being sent for further processing.

It has been my experience that one of our contacts generally confirms it to be 'Whitelisted'

If no future response from McAfee Labs, and you have no more issues, Then I would consider it cleared.

As Colleague Ex_Brit has marked 'Answered'

All the Best,

CD