cancel
Showing results for 
Search instead for 
Did you mean: 
hwedin
Level 7

Unknown detection

Hi I have just run a full scan of my computer after explorer.exe had to be manually stopped due to the 'end now' box appearing at shut down.

McAfee detected A0004349.com in C:\System Volume Information \_restore{AFDD5784-4FFA-413C-84B1-64EE165D77E0}RP2\A0004349.com McAfee gave it the name

Artemis!1620A23BAFCE (trojan). But this does not exist in the threat library and the file is too big to send to McAfee.

So should I delete the 'virus' or not, just in case it is potentially dangerous false positive like the svchost.exe scare.

Thanks

Message was edited by: hwedin on 18/09/10 14:57:06 IST
0 Kudos
4 Replies
k3tg
Level 14

Re: Unknown detection

See this for information on submitting to McAfee for analysis http://vil.nai.com/vil/submit-sample.aspx

0 Kudos
exbrit
Level 21

Re: Unknown detection

Moved to Artemis Discussions.

The location gives it away, 'System Volume Information' means it's hidden  in your System Restore folders.  To get rid of it simply disable System  Restore temporarily and you wont have to worry about it again.

0 Kudos
hwedin
Level 7

Re: Unknown detection

Hi all.

Thanks for all your help as this has cleared the problem.

0 Kudos
exbrit
Level 21

Re: Unknown detection

Good luck ;-)

0 Kudos