1 Reply Latest reply on Jan 10, 2014 9:16 AM by dstraube

    AV Engine - Potentially Unwanted Program question

    feickholt

      Is it possible to turn of the detection of McAfeeGW: Potentially Unwanted Program . The following link:

      http://br-wahl.becksche.de/deploy/Application%20Files/BR-Wahl.Offline_1_0_0_88/W ebsite/bin/BRWahl.Core.dll.deploy

      will be detected by the AV Engine as "McAfeeGW: Potentially Unwanted Program".

      I disabled the detection for potentially unwanted programs in our setting for McAfee Gateway Anti-Malware, but we are still not able to download the file (same detection).

      I also disabled all Potentially Unwanted: Behaviors. Still the same.


      We use 7.2.0.7.

      Is this a bug, or do you have another solution. Other than writing a dedicated rule for such detection.

       

      Frank



        • 1. Re: AV Engine - Potentially Unwanted Program question
          dstraube

          Hello Frank,

           

          I've tested this with MWG 7.2.0.7 but I'm not able to get the AV engine to block this file. The file is not detected as Potentially Unwanted Program, no matter which settings I use. I'm testing with the engine and DAT versions from today.

           

          There is a slider in the AV settings with the text "Treat as request send by a PUP if probability is at least" above it. There you can specify the probability where the engine decides if the request was send by a PUP. This is not by accident set to 0%? In this case it would treat all requests as PUP requests.

           

          Regards,

           

          Dirk