When a file is scanned, VirusScan compares it to known threats. VirusScan also uses heuristic techniques to detect unusual behavior. When a file cannot be matched to a known threat, but exhibits unusual and possibly threatening behavior, VirusScan utilizes Artemis technology to evaluate the threat of the unknown file. If the file is deemed unsafe, VirusScan will quarantine the file to protect your computer.
If you feel that VirusScan has incorrectly quarantined a file you know to be safe, you can recover that file or send it to Mcafee labs using the steps in the below link : http://service.mcafee.com/faqdocument.aspx?id=TS100617&lang=en_US&prior_tid=18&A nswerID=16777218&turl==http%3A%2F%2Fkb.mcafee.com%2Finfocenter%2Findex%3Fpage%3D content%26id%3DTS100617%26actp%3Dsearch
1 of 1 people found this helpful
Is there a way to make McAfee Security Center NEVER scan a folder or file? Because Mcafee detected a trojan in 1 of a file that my computer downloaded it and it removed it, preventing me from playing a game. People from www.ijji.com said that it is a false alarm and only happens with McAfee.
We've been lobbying for that facility for years. It was a feature of VirusScan 7 and still is a part of VirusScan Enterprise and is also a feature of most competing brands...unfortunately McAfee developers have chosen to ignore our pleas.
Until auch time as they listen and act, you will have to submit samples to Webimmune & hope they allow the detection.
I made a quick reference on what to do with false detections here: http://community.mcafee.com/message/6645#6645
The problem is that everytime the file is downloaded, Mcafee removies it instantly.
The file I want to send is too big for E-Mail Submission and WebImmune Submission. It is 3.15 MB. Is there another way i can send the file?
That link explains how to temporarily disable VirusScan long enough to allow the file to be restored and has a link to an unofficial size increase in submissions.
Do I wait for their response after i have sent it?
If you sent it correctly then they will auto-respond followed by a manual response. If the manual response says it is infected and you disagree reply immediately disputing that and they will look at it further.