1 Reply Latest reply on Jan 6, 2011 11:13 PM by Peacekeeper

    Maybe two false positives.

      i have two artemis's...... they are

      Artemis!244373B60E32

      C:\USERS\MY NAME\APPDATA\ROAMING\MICROSOFT\SVCHOST.EXE

       

      AND

       

      Artemis!47AC90A08085

      C:\USERS\MY NAME\APPDATA\ROAMING\SVCHOST/SERVER.EXE

       

      what do i do? are they false positives? i really need help cause my computer could get screwed up and i really dont want that. no one does.

        • 1. Re: Maybe two false positives.
          Peacekeeper

          No such files in win 7 64 64 so

          1. If they are found are they quarantined if so send them to Mcafee via the send to tab in the quarantined area.

          2. Email them as well You may have to unselect in Real time scanning/settings extended protection the option to scan for viruses using identifying threat patterns

          http://vil.nai.com/vil/submit-sample.aspx

          ensure you zip the files up and password protect them as per the KB article.If they repy they are virused reply back to ask for a manual check.

          3 http://www.virustotal.com/

          see what the scanners say there

          Also for more opinions try to

           

          - Join the McAfee Getsusp group at https://community.mcafee.com/groups/getsusp30-beta-feedback

           

          You will have to ask there for Getsusp, which is a Beta program and not yet on general release.

           

          Before you use Getsusp, you should go to this document

           

          https://community.mcafee.com/docs/DOC-1323

           

          and download the PDF file explaining what Getsusp is and how it works, and this document

           

          https://community.mcafee.com/docs/DOC-1761

           

          which downloads the installation guide PDF document.

           

           

           

          If you want another opinion, or to be on the safe side, then you can do a scan with the free versions of these tools :

           

          Malwarebytes and SuperAntiSpyware

           

           

           

          If you already have Malwarebytes installed, the virus could be protecting itself against it. In that case, in order to get Malwarebytes running you'll need to rename the executable. Open the C:\Program Files\Malwarebytes Antimalware folder, then rename the "mbam.exe" file and double-click directly on the file to open the program. After updating the program, run a full system scan using Malwarebytes.

           

           

           

          Make sure both programs are updated to the latest versions before running them and let them clean anything they find. If they quarantine a file or fail to remove a file try to get a copy of it and send it to Mcafee using the virus submission path described here :

           

          I feel they might be malware...