0 Replies Latest reply on Sep 26, 2016 5:02 AM by bretzeli

    ENS10.2, Event 1095, Agent 5.0.4.283,  Mcafee detects it's own files again and again since years..

    bretzeli

      FILE: DB\MA.DB-JOURNAL

       

      Hello,

       

      There have been several when not hundereds of tickets and threads about False/Positive 1095 Error.

      And NO exlcuding all Event 1095 from Reporting to EPO not the solution we pay for...

       

      Now since 10.X is the big new product can we please solve this for Enterprise customers and mcafee partners?

       

      Any help welcome or please just Update the GTI info on this file.

       

      Agent5.0.4.283
      MCDATREP10001.0.4.385
      Endpoint Security Threat Prevention10.2.0.619
      Endpoint Security Platform10.2.0.620

       

       

      Threat Source Process Name:C:\PROGRAM FILES (X86)\MCAFEE\COMMON FRAMEWORK\MASVC.EXE
      Threat Source URL:
      Threat Target Host Name:B**PC128
      Threat Target IPv4 Address:10.*0.*.19*
      Threat Target IP Address:10.*0.*.19*
      Threat Target MAC Address:
      Threat Target User Name:NT-AUTORITÄT\SYSTEM
      Threat Target Port Number:
      Threat Target Network Protocol:
      Threat Target Process Name:
      Threat Target File Path:C:\PROGRAMDATA\MCAFEE\COMMON FRAMEWORK\DB\MA.DB-JOURNAL
      Event Category:'File' class or access
      Event ID:1095
      Threat Severity:Notice
      Threat Name:Common - Standardschutz:Ändern von Dateien und Einstellungen des McAfee Common Management Agenten verhindern