1 2 Previous Next 12 Replies Latest reply on May 20, 2010 1:12 PM by Nisa51

    Artemis!2B8031C3C3C8 TROJAN

    Nisa51

      I have this Trojan in my Quarantined Section on Internet Security. It came through an email apparently. I have sent it to McAfee........But can I delete it from the quarantined section?

       

      File Path is

      C:\WINDOWS\TEMP\MC00000\MCE00001

      Artemis!2B8031C3C3C8

       

      I am on Windows xp sp3. I have done a search for the file path and cannot find this on my PC?

       

      I have never had a trojan before, so can I delete this does anyone know.

       

      Thank you for your replies in advance.

        • 1. Re: Artemis!2B8031C3C3C8 TROJAN
          Nisa51

          Do I restore or delete this or is in fact an actual Trojan and to keep it in quarantine

          • 2. Re: Artemis!2B8031C3C3C8 TROJAN

            Hi Nisa,


            The file received is infected and can be detected and removed with our current DAT files and engine. It is recommended that you update your DAT and engine files and scan your computer again.  

             

            Detection: generic dropper!dds
                                                                      

            If you are not seeing this with the product you are using, please speak with technical support so that they can help you determine the cause of this discrepancy.          


            If you believe your computer is infected, but are unsure which files should be submitted to McAfee Labs for review, please visit:                                  

            http://vil.mcafeesecurity.com/vil/submit-sample.aspx                                


            Use the following link to update your DAT and scan engine to the most current version:

            http://www.mcafee.com/apps/downloads/security_updates/dat.asp                        

             

            Use the following links to reach online technical support for McAfee products -      

            Corporate Customers:                                                                

            http://www.mcafeesecurity.com/us/support/                                            

             

            Single User/Retail Customers:                                                        

            http://www.mcafeehelp.com

             

            Regards

            Neha Chattopadhyay

            McAfee SME

            • 3. Re: Artemis!2B8031C3C3C8 TROJAN
              Nisa51

              Somewhat a bit confused to what you mean. This did not appear from a scan, I did a scan yesterday and it never showed up. This quarantined item just appeared 5 days ago and was attached to an email which i didnt open just deleted, and never had a pop up to say a trojan stopped/blocked.

               

              I only noticed that this had been done yesterday when I did a scan.

              My DAT 5986

              Engine 5400.1158

               

              So are you saying I have to uninstall this McAfee and download a new one??

               

              I am sorry but i really do not understand what I have to do here, it sounds so complicated downloading this DAT engine

               

              And where am I supposed to see this Detection: generic dropper!dds

               

               

              Message was edited by: Nisa51 on 19/05/10 12:18:47 CDT

               

               

              Message was edited by: Nisa51 on 19/05/10 13:11:49 CDT
              • 4. Re: Artemis!2B8031C3C3C8 TROJAN

                Hi Nisa,

                 

                You don't have to uninstall McAfee, Due to advanced cleaning techniques needed for cleaning of this threat, it's recommended that you use the Beta DATs for detection and cleaning.  The Beta DATs can be found at the following site:
                http://vil.mcafeesecurity.com/vil/virus-4d.aspx
                Current Dats: 5987

                The engine you are using is fine.

                 

                Thanks

                Neha Chattopadhyay

                McAfee SME

                • 5. Re: Artemis!2B8031C3C3C8 TROJAN

                  Hi Nisa,

                   

                  You emailed us the detection name Artemis!2B8031C3C3C8 , when we checked further we anlaysed that the file: my_resume.xxx.exe is currently detecting with our McAfee dats as generic dropper!dds, Henceforth the extra dat I have emailed will delete the files registry keys and process

                   

                  Regards

                  Neha Chattopadhyay

                  McAfee SME

                   

                   

                  Message was edited by: neha chattopadhyay on 5/19/10 3:23:41 PM CDT
                  • 6. Re: Artemis!2B8031C3C3C8 TROJAN
                    Nisa51

                    nchattop wrote:

                     

                    Hi Nisa,

                     

                    You don't have to uninstall McAfee, Due to advanced cleaning techniques needed for cleaning of this threat, it's recommended that you use the Beta DATs for detection and cleaning.  The Beta DATs can be found at the following site:
                    http://vil.mcafeesecurity.com/vil/virus-4d.aspx
                    Current Dats: 5987

                    The engine you are using is fine.

                     

                    Thanks

                    Neha Chattopadhyay

                    McAfee SME

                     

                    Hi neha

                    There are 3 downloads on that list which one do I do, or is all 3. Sorry to be a pain never done this before, do I just run these downloads and that is it?

                    • 7. Re: Artemis!2B8031C3C3C8 TROJAN
                      Nisa51

                      nchattop wrote:

                       

                      Hi Nisa,


                      The file received is infected and can be detected and removed with our current DAT files and engine. It is recommended that you update your DAT and engine files and scan your computer again.  

                       

                      Detection: generic dropper!dds
                                                                                

                      If you are not seeing this with the product you are using, please speak with technical support so that they can help you determine the cause of this discrepancy.          


                      If you believe your computer is infected, but are unsure which files should be submitted to McAfee Labs for review, please visit:                                  

                      http://vil.mcafeesecurity.com/vil/submit-sample.aspx                                


                      Use the following link to update your DAT and scan engine to the most current version:

                      http://www.mcafee.com/apps/downloads/security_updates/dat.asp                        

                       

                      Use the following links to reach online technical support for McAfee products -      

                      Corporate Customers:                                                                

                      http://www.mcafeesecurity.com/us/support/                                            

                       

                      Single User/Retail Customers:                                                        

                      http://www.mcafeehelp.com

                       

                      Regards

                      Neha Chattopadhyay

                      McAfee SME

                       

                      I have downloaded the security_updates/dat I have rebooted my pc but my internet security still says Dats is 5986? Am I supposed to do something else, if so WHAT? Where is the file located on my PC? Neha you are not being very clear on your instructions as to what to day with this.

                       

                      Think I will just uninstall Mcafee and download a more simpler security system. had enough.

                      • 8. Re: Artemis!2B8031C3C3C8 TROJAN
                        Nisa51

                        This link http://www.mcafee.com/apps/downloads/security_updates/dat.asp  does not work I did as it said and saved to desktop, ran it and got the this error message up Unable to find any qualified McAfee products.  So hey for that

                         

                        My Dat No. is now 5987. I have rebooted, I have restored this quaratined trojan, done a rescan, the trojan has been put back in the quarantined folder and not been deleted or removed from my pc.

                         

                        The extra.dat file you sent me in an email with the path to copy it to does not exist on my PC. It took me about 30 mins to find a path which I think it should be sent to. So can you tell me which path this exra.dat file should sent to:

                         

                        1) Program files\McAfee\VirusScan\Engine?

                         

                        2) Program files\McAfee\VirusScan\Engine\DAT ?

                         

                        3) Program files\McAfee\VirusScan\Engine\DAT\5987  - even though my product DAT says 5988?

                         

                        Or at least tell me how I can get rid of the Trojan?

                         

                        Posting this here as you have not replied to me email.

                        • 9. Re: Artemis!2B8031C3C3C8 TROJAN

                          Hi Nisa,

                           

                          The extra dat to be saved under /programs/common files/mcafee where you find avvscan.dat, avvclean.dat and avvnames.dat paste in the same folder and then scan the file which you suspects. It should delete the file.

                           

                          I would also advise you to call our Technical Support team for any further assistance.

                           

                          Virus Research accepts file samples for analysis and possible inclusion into AV signature DAT sets. We are also prepared to answer general virus questions.

                          All product related questions and comments can be addressed through technical support and customer service, including:

                          * Product installation and update questions
                          * Product usage questions
                          * Specific operating system/version questions
                          * Assistance with detection and cleaning or removal of viruses or trojans

                          Please use the following link to reach our technical support group for McAfee products.

                           

                          Corporate Customers:
                          http://www.mcafee.com/us/support/index.html>

                           

                          Single User/Retail Customers:
                          http://service.mcafee.com

                           

                          Neha

                          Regards

                          1 2 Previous Next