7 Replies Latest reply on Jun 23, 2009 6:34 PM by Peter M

    How do i set exceptions?

      I have a program i made that connects to a website with winsock. I know the program is safe seeing as i made the thing myself, but low and behold McAfee thinks it's a trojan! I sent it in to be analyzed a month ago i still haven't got a response it still thinks it's a trojan if i restore it. So how do i make it so i can keep the file without McAfee saying it is a virus?
        • 1. RE: How do i set exceptions?
          Peter M
          The only way is to submit it, however, you should have got an immediate auto-response followed 24 - 48 hours later by a human one.

          If you follow the guidelines carefully it should work.

          Email file to: [EMAIL="virus_research@avertlabs.com"]virus_research@avertlabs.com
          When submitting samples via E-mail all samples must be packaged in a .ZIP file. When creating this .ZIP file, it is important to understand that the .ZIP can be no more than 3 megabytes in size and can contain no more than 30 files. Additionally, any .ZIP file created must be password-protected using the password "infected" (minus the ""). Failure to follow these guidelines will cause your submission to be rejected.

          There has been an unofficial change in attachment sizes accepted as follows:

           

          You can submit the file to "virus_research@avertlabs.com" in password-protected .ZIP
          file (password: "infected").
          If you have multiple files, then you may need to send multiple emails to the above
          address.
          For instance, if you have 2 files that are individually 2MB in size, you will need
          to send those files separately as sending them together would exceed the 3MB limit.
          If you have one file that is over 3MB in size, you can send that file and we will
          process it manually.
          However, if you send that file, and other files within the same submission, you will
          be asked to resubmit.
          Example: If you got 5 files, file 1.exe is 10MB, file 2.exe is 200kb, file 3.exe is
          2MB, file 4.dll is 100kb, and file 5.sys is 500 kb. Total they will be 12.8 MB in
          size.
          But you could send the 1.exe file separately, and the other 4 files in another
          email submission and we would only have to process the 10MB file manually.

          • 2. RE: How do i set exceptions?
            where can i find the quarantined file?
            • 3. RE: How do i set exceptions?
              Peter M
              Sorry I forgot to include those instructions....here they are..

              First disable VirusScan:

              To temporarily turn off VirusScan do the following:

              Double-click the taskbar icon to open Security Center
              Click Advanced Menu (bottom left)
              Click Configure (left)
              Click Computer & Files (top left)
              You can disable VirusScan in the right-hand module and tell it for how long.

              Then click the Restore button (left & assuming it was quarantined) & restore the item.
              • 4. RE: How do i set exceptions?
                Thank you!
                • 5. RE: How do i set exceptions?
                  Peter M
                  Good luck. Check your junk email and spam filters just in case the reply is there!
                  • 6. RE: How do i set exceptions?
                    ok so i got a response already! It would seem they think it is a virus :mad:
                    Generic.tra to be exact, however, i know it isn't seeing as i made it myself the program simply uses winsock to connect to a website for a game and buy items that appear from my predetermined list of items in the game

                    what else can i do?
                    • 7. RE: How do i set exceptions?
                      Peter M
                      Reply to that email keeing the header intact disputing it and they will send it for further testing.
                      If they subsequently find it is OK then they will either include it in the next daily update or send you what is called an "extra.dat".