cancel
Showing results for 
Search instead for 
Did you mean: 
rgrayston
Level 7

Possible False Positive - Artemis!9A77882BAC65

Hello,

I was attempting to download a conversion utility from
www.littlemachines.com to convert my Outlook 2000 email files to a format
compatible to my iMac.  The file name was O2M_SETUP_2000.EXE.PART

When attempting this - the Mcaffee software detected the "trojan" and
quarantined the file.

Can you check your database and see if this is a reported (and real
problem)?  Does this software have to be whitelisted to prevent the problem
and allow download of the file?

Thanks very much for your help.

Reg

0 Kudos
5 Replies
Peacekeeper
Level 20

Re: Possible False Positive - Artemis!9A77882BAC65

In quarantined and trusted files area (navigation and quarantined and trusted files) find the quarantined file and select send to Mcafee. If it is a false detection the new dats should reflect this soon.

or

http://vil.nai.com/vil/submit-sample.aspx

Message was edited by: Peacekeeper on 5/01/11 6:57:39 PM
0 Kudos
rgrayston
Level 7

Re: Possible False Positive - Artemis!9A77882BAC65

Thanks for your reply.  I selected the files in the "Quarantined and Trusted Items" section and selected "Send to McAfee" but I got a message saying the Send process failed.  I tried to "Restore" the files so that I could zip them in and encrypted file to send ... but as soon as I do that the AV software identifies the threat and quarantines it again.

What method do I use to "capture and zip" the files so that the AV doesn't keep quarantining them?  Sorry for the dumb question - I suspect I am missing something simple as I am new to this.

Thanks again

Reg

0 Kudos
Peacekeeper
Level 20

Re: Possible False Positive - Artemis!9A77882BAC65

I suppose you disable real time scanning for a few minutes zip it and send it off. Not my favourite way of doing things but it might be your only way.

Actually we have another path if above fails but will leave that till we see if this works.

0 Kudos
rgrayston
Level 7

Re: Possible False Positive - Artemis!9A77882BAC65

Tony,

Thanks for the information.  Disabling the  real-time scanning allowed me to zip and encrypt the file.  I have sent  this to virus_research@avertlabs.com.

Reg

0 Kudos
Peacekeeper
Level 20

Re: Possible False Positive - Artemis!9A77882BAC65

Actually disabling threat identification safer  IE real time scanning settings extended protection.

hope you reenabled real time protection

0 Kudos