How big is the size of this file?
Conor - Thanks for taking an interest. That's a good question. I tried to look for it, but with no success and I don't really know where to look. Any suggestions?
If McAfee still has the file quarantined, please turn off Real time scanning, then restore it, right click on the file, then click on properties,
It should list how big the size of the file is.
That was easy! The file name was ASSASSINSCREED_GAME.exe and is small application file of 420 KB.
That is not the solution,
Please do the following:
- Go to www.virustotal.com
- Upload the file.
- See if it comes back as malicious.
Then post the url here.
Message was edited by: Conor on 21/02/11 12:04:14 CST
EDIT: clicking on the link, takes you to Sa-live.com, which is apparently SiteAdvisor.. Hmm, I'll have to PM someone..
Done and Done. Here is the line itme from the latest report.
McAfee 5.400.0.1158 2011.01.24 Artemis!63302A631F69
I can't tell if it says it's suspicious.
Most of the Anti Viruses that have detected the file,
Are very unsecure, not known, and very untrusted because they don't detect anything.
Email file to: email@example.com
When submitting samples via E-mail all samples must be packaged in a .ZIP file and email header should start with the word "False" (minus the "").
Additionally, any .ZIP file created must be password-protected using the password "infected" (minus the ""). Failure to follow these guidelines will cause your submission to be rejected.
If you've done that properly an automated response should be received almost immediately, followed by a manual one, usually within 24 - 48 hours.
If you don't receive anything it either means the file was submitted incorrectly or the response is sitting in your Junk or Spam mail folders.
**If they respond that it is an infection and you are sure it is not, forward* that email immediately to firstname.lastname@example.org and insert the word'False' (minus the '') in front of the header, but keep the rest of the header intact.
* recommending forward because at the moment if you hit reply it goes to the old avertlabs email address in error.
Thanks for reporting. The file has been added to our whitelist.