cancel
Showing results for 
Search instead for 
Did you mean: 
f.u.b.a.r
Level 7

Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

I was installing Assassins Creed and McAfee said it identified the file as a trojan and quarantined it.  I stumbled upon this community with hopes of finding a resolution.  I am not tech savy so please advise if you need more information from me.

thanks

0 Kudos
1 Solution

Accepted Solutions
ConorD62
Level 12

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Hi,

If McAfee still has the file quarantined, please turn off Real time scanning, then restore it, right click on the file, then click on properties,

It should list how big the size of the file is.

Thanks.

0 Kudos
8 Replies
ConorD62
Level 12

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Hi F.u.b.a.r,

How big is the size of this file?

Thanks.

Message was edited by: Conor on 20/02/11 09:22:48 CST
0 Kudos
f.u.b.a.r
Level 7

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Conor - Thanks for taking an interest.  That's a good question.  I tried to look for it, but with no success and I don't really know where to look.  Any suggestions?

0 Kudos
ConorD62
Level 12

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Hi,

If McAfee still has the file quarantined, please turn off Real time scanning, then restore it, right click on the file, then click on properties,

It should list how big the size of the file is.

Thanks.

0 Kudos
f.u.b.a.r
Level 7

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution


Conor,

That was easy!  The file name was ASSASSINSCREED_GAME.exe and is small application file of 420 KB.

Thanks.

0 Kudos
ConorD62
Level 12

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Hi,

That is not the solution,

Please do the following:

Then post the url here.

Thanks.

Message was edited by: Conor on 21/02/11 12:04:14 CST

EDIT: clicking on the link, takes you to Sa-live.com, which is apparently SiteAdvisor.. Hmm, I'll have to PM someone..

Message was edited by: Conor on 21/02/11 12:07:15 CST
0 Kudos
f.u.b.a.r
Level 7

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Done and Done.  Here is the line itme from the latest report.

McAfee5.400.0.11582011.01.24Artemis!63302A631F69

http://www.virustotal.com/file-scan/report.html?id=ba8e5c40e574c9c4f23eed708ca2b92da335615687321c70c...

I can't tell if it says it's suspicious.

What now?

Message was edited by: f.u.b.a.r on 2/21/11 1:06:12 PM CST
0 Kudos
ConorD62
Level 12

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Hi,

Most of the Anti Viruses that have detected the file,

Are very unsecure, not known, and very untrusted because they don't detect anything.

Email file to: virus_research@mcafee.com

When submitting samples via E-mail all samples must be packaged in a .ZIP file and email header should start with the word "False" (minus the "").

Additionally, any .ZIP file created must be password-protected using the password "infected" (minus the ""). Failure to follow these guidelines will cause your submission to be rejected.

If you've done that properly an automated response should be received almost immediately, followed by a manual one, usually within 24 - 48 hours.

If you don't receive anything it either means the file was submitted incorrectly or the response is sitting in your Junk or Spam mail folders.

**If they respond that it is an infection and you are sure it is not, forward* that email immediately to virus_research@mcafee.com and insert the word'False' (minus the '') in front of the header, but keep the rest of the header intact.

* recommending forward because at the moment if you hit reply it goes to the old avertlabs email address in error.

Thanks.



0 Kudos
vinoo
Level 13

Re: Possible False Positive - Artemis!63302A631F69.exe

Jump to solution

Thanks for reporting. The file has been added to our whitelist.

0 Kudos