cancel
Showing results for 
Search instead for 
Did you mean: 
gunnars
Level 7

support.mcafee.com content being blocked

starting today, this link:

https://support.mcafee.com/ServicePortal/faces/wcnav_defaultSelection

throws an alert on my MWG7.5.2,


offending content is in:

hXXps://support.mcafee.com/ServicePortal/js/mfejs_18941-bd2863a977ec.js

detected as:

McAfeeGW: Heuristic.BehavesLike.JS.PrivacyViolation.J


I can always bypass that URI or even turn off that particular portion of the heuristics engine, but I'm curious:

what changed?

Thank you.

0 Kudos
8 Replies
catdaddy
Level 20

Re: support.mcafee.com content being blocked

,

           Just out of curiosity, have you attempted to submit the Detection?

            Submit a Virus or Malware Sample | McAfee Labs

Regards,

Catdaddy

McAfee Community Moderator

(Consumer Products)

Cliff
McAfee Volunteer
0 Kudos
gunnars
Level 7

Re: support.mcafee.com content being blocked

Thank you, catdaddy. Yes, just did that.

0 Kudos
catdaddy
Level 20

Re: support.mcafee.com content being blocked

,

                You are quite welcome.

All the best

Catdaddy

Cliff
McAfee Volunteer
0 Kudos
gunnars
Level 7

Re: support.mcafee.com content being blocked

no response to the email I sent this morning maybe tomorrow

0 Kudos
catdaddy
Level 20

Re: support.mcafee.com content being blocked

Did you follow the guidelines/instructions to zip and password protect?

For example:

When submitting samples via E-mail all samples must be packaged in a .ZIP file.

Additionally, any .ZIP file created must be password-protected (encrypted) using the password "infected" (minus the "") - using the basic or default zipping level - some compression software offers varying degrees.  Failure to follow these guidelines will cause your submission to be rejected.

If you've done that properly an automated response should be received almost immediately, followed by a manual one, usually within 24 - 48 hours.

If you don't receive anything it either means the file was submitted incorrectly or the response is sitting in your Junk or Spam mail folders.

Cliff
McAfee Volunteer
0 Kudos
gunnars
Level 7

Re: support.mcafee.com content being blocked

thank you, yes, I'm aware of those - I have submitted my share of samples and deployed my share of Extra.DATs to know better

this, however, is different. I have no sample. Session is aborted because of the detection. I never see the offending JS. I'm OK with that . But to submit for review I had to follow the "email to labs" process. Starting with the article you quoted, followed to KB68030 and followed instructions under Solution 2, Email Submissions.

I'll just call it in tomorrow, it's much easier

Thank you for your help.

0 Kudos
catdaddy
Level 20

Re: support.mcafee.com content being blocked

Thank you for the clarification. For I understand that Corporate issues, require different steps to take, opposed to Consumer.

Regards,

CD

Cliff
McAfee Volunteer
0 Kudos
catdaddy
Level 20

Re: support.mcafee.com content being blocked

You may submit your detection by utilizing the McAfee Getsusp Tool, however the file size is limited to (10 mbs)

Also should you indeed choose to do so, enter your Email Address under 'Preferences' before scanning.

When successfully submitting, you should receive either an Analysis ID #, or a 'Work Item # when submitted through Getsusp.

Please make certain that you use the proper Getsusp tool for Corporate.

Cliff
McAfee Volunteer
0 Kudos