cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

We still have a problem with one of our commercial executables being flagged as malware.

Full month we can not reach anybody from McAfee to help us to resolve our problem.

It is flagged as Artemis!0C9FABF7E577.

I've already sent dozen emails to whitelist this file, but the file is still detected by McAfee Endpoint Security and virustotal.

Analysis ID: 10811605

Analysis ID: 10810910

Analysis ID: 10808163

Analysis ID: 10807514
Analysis ID: 10807152
Analysis ID: 10804582

Software is not flagged as malware on VIRUS TOTAL:

https://www.virustotal.com/gui/file/d473eccbba0dc8566bc4acab5b589290352c7590856b7e2a0e7b1a482c42c351...

The last analysis ID was 10811605 and the automated analysis send us same stupid message every time, without any escalation notice or ticked closed notice.

This was not the first time trying to whitelist the file, so i kindly ask for help.

If you need more information, please contact me.

Thank you,

Sreten

1 Solution

Accepted Solutions
Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 4 of 5

Re: FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

Reply back as below

All of the ID's provided contain the same hash and has been reclassified as clean in SDB.

So should be clean now or soon

View solution in original post

4 Replies
Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 2 of 5

Re: FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

OK that is strange so i have passed it directly onto the malware group for comment. Allow 3 days for review hopefully it works this way

Re: FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

Thank you, I hope someone will do something this time.

Reliable Contributor Peacekeeper
Reliable Contributor
Report Inappropriate Content
Message 4 of 5

Re: FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

Reply back as below

All of the ID's provided contain the same hash and has been reclassified as clean in SDB.

So should be clean now or soon

View solution in original post

Re: FALSE POSITIVE - Legitimate software detected as malware

Jump to solution

I got similar information from another source, but I have to wait for the new DAT to be updated to make sure this problem is really solved.

Thank you, again 🙂

 

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community