I posted it here http://community.mcafee.com/thread/25970?tstart=0 , But I rather post it here in Artemis Discussion too.:
THis is what happened to me today:
My McAfee (updated, version 14.0, DAT version: 6029) detected today a Artemis!D6638336CAB9 Trojan. (could NOT find this trojan in your Mcafee virus database)
My PC has: WinXP Pro, 32b.
Info was: File: C/ Windows/system32/iedkcs32.dll
Mcafee desinfected this file and sended it to "cuarentena" (quarenteen sp? ). After that, I had to reboot my PC by Mcafee.
After rebooting system I got a message from automatic windows update : to install : KB982381
So I try to install that update, but install always fails (after 3 tries). So I try to install it by downloading the file from windows update web here:
After downloading this file, I try to install it, but it gives an error and again suddenly Mcafee finds the trojan : Artemis!D6638336CAB9
in file: SP3GDR/iedkcs32.dll
in process: IE8-WindowsXP-KB982381-x86-ESN.exe
So after all this info I think that Mcafee thinks that this file is a Trojan, despite it is an authentic windows update file.
Could someone help me please?
Ops. forgot to tell you I´ve got:
Mcafee Total Protection:
Mcafee Security Center :
Last Update: 13/05/2010
Mcafee Virus Scan:
Last Update: 01/07/2010
DAT version: 6029
DAT creation date: 30/06/2010
engine version: 5400.1158
and some more like firewall, siteadvisor , and so on (please, let us copy+paste this info in "About Mcafee" window !!! )
I am Spanish, so my Mcafee language is Spanish.
I contacted Mcafee spanish support but they did not helped me. They told me to use "Stinger" application which I am currently using to find Trojans (they think I have got some trojan couse of the Artemis detection )
If you need more info, ask for it
but please, help me here !
PS: If you need the file(s), I can upload it here.
Solved! Go to Solution.
Finished Stinger Aplication:
Scan targets: Processes + Boot Sectors
On virus detection : Report only
Detection : all marked excep for: Enable Macro heuristics and Report Applications.
Sensivity level: very low.
Number of Clean Files: 225487.
It did not found anything.
Do you mean to run an update on Mcafee Total Protection?
I tried 30 minutes ago to update Mcafee again but problem was still there, despite you can see that my mcafee is updated up today.
If you mean to update again the KB982381 on windows update, I still got the fail message to install that update.
however, I will try again in about 20 minutes when Stinger finishes its detection (I am using atm the most updated Stinger application).
I´ll tell you in some minutes with more precise info on error messages and results.
Thanks Sam for your answer.El mensaje fue editado por: lorecam on 1/07/10 5:48:06 CDT
Hi. Thanks Sam, problem solved, windows update KB983281 succesfuly installed with no Artemis Trojan detection.
But.. why was this windows update file blacklisted?
Or did you turned it to whitlisted just now?
would it be usefull for you if I send all the false positive files which are in Quaranteene through Mcafee Total Protection ?
I´ve got this files in Quaranteene (spelling? sorry I´m Spanish):
Anyway, Thanks again for your help.