Dear McAfee Team,
I tried few times to add our files on the whitelist.
It's whitelisted on the "McAfee" but not on "Gate Way". We try it since days to get the "Go".
Could somebody help me who we can do it easily?
Solved! Go to Solution.
have you sent the file where GAM is blocking to the AVert Team? Whitelisting with GAM is different to the normal signature based engine. because GAM does behavior based detection.
Finally, if your application has a similar behavior to a known threat the easiest way is to
a) make a rule in MWG to whitelist the detection name with a given URL.
b) open a ticket an upload the file to McAfee to whitelist.
Hope this helps,
we got a "process sheet" who we schould submitt it and use the GetSusp software.
We submitted it and get a "we received the mail" but until now nothing.
i do not understand what you mean with "process sheet".
GetSusp does not help if GAM blocke somthing. You need to upload the original file to McAfee Support opening a Support ticket.
I've added the detection name to your header in order to draw more attention to it and have moved this to Corporate User Assistance.
The software developer has to submit the software using this form: https://secure.mcafee.com/apps/mcafee-labs/dispute-form.aspx?region=us
It takes quite a long time sometimes for software to be cleared.
Hi got the following instruction from the McAfee Support. Btw: We don't use McAfee inhouse.
How to submit virus samples and false positives to McAfee Labs
Consumer KnowledgeBase ID: TS102053
Last Modified: 10/27/2015
This article describes how to submit virus samples and false positives to McAfee Labs. There are two possible reasons you might need to submit a file. Use the appropriate Solution for your issue:
Possibly Infected File Submissions
You can submit samples to McAfee Labs if you have located a file:
There are two methods for submitting potentially infected files:
Regular Technical Support cannot assist in malware removal. If you prefer support assistance, contact McAfee Virus Removal Services (http://home.mcafee.com/root/stdlandingpage.aspx?LPName=vrs_v2&affid=0&culture=en-us&mm_campaign=9056...).
False Positive Submissions
If you think that a file has been falsely detected or incorrectly classified, follow this process to submit the sample to McAfee Labs.
To submit a sample via email, zip the file (using the procedure described in Solution 1) and send it to McAfee Labs Virus Research at:
IMPORTANT: Prefix the email subject line with the word FALSE. For example, "FALSE: file being detected by McAfee."
Include the Product and version, DAT version, Engine version, and a short description (including any other relevant information regarding why you think the file has been incorrectly detected). You can find all of the product information inside your McAfee Security suite by clicking About.
Please review the submitted file as we believe this is a false detection.
Product: McAfee Security Center 12.8
DAT version: 6587
Description of issue: This file has been detected as malware, but is part of my game.
After the sample has been analyzed, one of the following occurs:
the GetSusp Tool is a tool that can be used on a Windows Endpoint It inspects your System and is able to upload a suspicious file to McAfee.
This tool does not help when the GAM engine (this is another engine completely different to the engine on endpoint) detects a false/positives.
So, when following the instrusctions you posted, take the file, zip it with Password and send it to McAfee.
From my side, the best Option for such a case is to open a ticket. Because you can monitor the status and you can update the case.
Additional, if something is not working you can directly interact with a Support specialist.