3 Replies Latest reply on May 8, 2010 5:32 PM by exbrit

    Trusted/Quarantined Items (false artemis report)

      I am having serious problems with McAfee at the moment. It keeps quarantining MW4MERCS.EXE and MW4ED2.exe from the MechWarrior 4 Free Release because of false Artemis reports. When I take them out of quarantine they get placed in their directory, but when i click them the get immediately placed in quarantine again, without asking me. This way I can never choose to trust them, and McAfee will endlessly quarantine them for no reason. I'm 100% sure that an official Microsoft free release won't have trojans in it, so is there a way besides the annoying pop-up screen that doesn't show up when you need it, but always when you don't, to trust quarantined items? or is this maybe an Idea for the next McAfee release to be able to select 'trust' for any quarantined item without having to restore it and hoping a screen pops up with a question if i want to quarantine it or trust it?

       

      thanks for your help in advance!

       

      artemis report numbers:

       

      MW4ED2.EXE (got quarantined thrice):

       

      Artemis!

      1BD0693D973B (2x)

       

      Artemis!

      2EE0F0CF16CF (1x)

       

      MW4MERCS.EXE:

      (renamed to MW4MERCS.OLD since there was a hotfix released for online pla)

       

      Suspect-02!

      920C5BFB7135

       

      MECHWARRIOR4MERCENARIES.ALL.TO.51.0.2.01.0017.zip (the free release package itself)

       

      Artemis!

      5DF6F318DEA1

       

      MW4MERCS.EXE (the new hotfix):

       

      Artemis!

      B283193C97D9 (1x)

       

      Artemis!

      920C5BFB7135

       

      i hope these codes help!

       

       

      Message was edited by: 134127 on 5/8/10 5:43:35 PM CDT
        • 1. Re: Trusted/Quarantined Items
          k3tg

          Perhaps this link will help you with your issue

          Information needed for possible Artemis false positive investigations

          • 2. Re: Trusted/Quarantined Items
            exbrit

            I've moved this to the Artemis section so that those people can take a look.  If you want to "edit thread" (top right) to include the Artemis detection numbers in the above post that would help them.

             

            Alternatively send an email with the header "False Artemis xxxxx (detection number)" to virus_research@avertlabs.com if more than one send each one separately.

             

            If you want to use the files  until they are cleared you will have to temporarily disable VirusScan.

             

            For the 2009 product which has a square taskbar icon...

             

            Double-click the taskbar icon to open SecurityCenter
            Click Advanced  Menu (bottom left)
            Click Configure (left)
            Click Computer &  Files (top left)
            You can disable VirusScan in the right-hand module  and tell it for how long.

             

            For the 2010 product which has a shield-shaped taskbar icon....

             

            Double-click the taskbar icon to open SecurityCenter

             

            Click Virus and Spyware Protection to expand it

            Click Real Time Scanning to expand it

            Click Turn Off

            That will disable VirusScan and you can tell it for how long

             

             

            Message was edited by: Ex_Brit on 08/05/10 6:32:33 EDT PM
            1 of 1 people found this helpful
            • 3. Re: Trusted/Quarantined Items

              i have put the codes in the main post. thanks for the quick response