+1
Fixed

McAfee Warning

Ryan 2 years ago updated by Alexey Fedorov 2 years ago 3

McAfee gave me a warning message when downloading the Windows app.  McAfee version 16.0.4


Answer

Answer
Fixed

Hi Ryan, we received following answer from McAfee:


14.11.2017, 04:04, "virus_research@avertlabs.com" <virus_research@avertlabs.com>:

McAfee Labs Sample Analysis

Thank you for submitting your suspicious file(s). We have determined that the following files are detected with our current DAT files.

        Reference : (Escalation) 10470021
        ----------------------------------

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+
| File Name | MD5 | Findings | Detection | Type |
+---------------------------+----------------------------------+------------------+----------------------+-----------------+

        | image.png | 408b6184e2c849da571e280e0bff91bc | clean | | clean |

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+

        | fireworkinstaller.exe | c385acf0a967088905f5f8b50ffb2941 | clean | | clean |

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+

Solution:

To ensure that you have the maximum capability of detecting and cleaning this malware, please make sure you have the latest McAfee scanning engine.

DAT and scanning engine updates are available at the following location: http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Support:

McAfee Labs accepts file samples for analysis and possible inclusion into AV signature DAT updates.
Additional information for submitting samples to McAfee is available in the following location: https://kc.mcafee.com/corporate/index?page=content&id=KB68030

Product related questions and comments can be addressed via McAfee Technical Support and Customer Services, including:
* Assistance with detection and cleaning or removal of malware
* Product installation and update questions
* Product usage questions

Please use the following links to reach our Technical Support group:
Business Customers: http://www.mcafee.com/us/support.aspx
Home Customers: http://home.mcafee.com/root/support.aspx

Regards,
McAfee Labs

McAfee Labs: http://www.mcafee.com/us/threat-center.aspx
McAfee Labs Blog: http://blogs.mcafee.com/mcafee-labs

Started

Many thanks Ryan! We will report to McAfee immediately.

For several days we tried to contact McAfee, finally they redirect us to this document. Today we sent them the latest version of Firework and we recieved such answer:


McAfee Labs - Beaverton
Current Scan Engine Version:5900.7806
Current DAT Version:8713.0000
Thank you for your submission.
Analysis ID: 10471409
File Name Findings Detection Type Extra
--------------------|------------------------------|----------------------------|------------|-----
fireworkinstaller.ex|inconclusive | | |no
inconclusive [fireworkinstaller.exe]
   Automated analysis was not able to determine that this file is malware. This file is
being sent for further processing and the DAT files will potentially be updated if
detection of this sample is warranted.
Note –
Due to the prevalence of network gateway AV products, it is important that all
submissions be zipped and the zip file password-protected (password - infected). Some
products will reject an email that contains a virus that is not sent in this way. In
addition, often we receive a file that appears not to have been infected, to find
later that the file was infected when it left the sender, and was cleaned somewhere
along the line.
Regards,
McAfee Labs


We hope that we will get some results soon.

Answer
Fixed

Hi Ryan, we received following answer from McAfee:


14.11.2017, 04:04, "virus_research@avertlabs.com" <virus_research@avertlabs.com>:

McAfee Labs Sample Analysis

Thank you for submitting your suspicious file(s). We have determined that the following files are detected with our current DAT files.

        Reference : (Escalation) 10470021
        ----------------------------------

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+
| File Name | MD5 | Findings | Detection | Type |
+---------------------------+----------------------------------+------------------+----------------------+-----------------+

        | image.png | 408b6184e2c849da571e280e0bff91bc | clean | | clean |

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+

        | fireworkinstaller.exe | c385acf0a967088905f5f8b50ffb2941 | clean | | clean |

        +---------------------------+----------------------------------+------------------+----------------------+-----------------+

Solution:

To ensure that you have the maximum capability of detecting and cleaning this malware, please make sure you have the latest McAfee scanning engine.

DAT and scanning engine updates are available at the following location: http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Support:

McAfee Labs accepts file samples for analysis and possible inclusion into AV signature DAT updates.
Additional information for submitting samples to McAfee is available in the following location: https://kc.mcafee.com/corporate/index?page=content&id=KB68030

Product related questions and comments can be addressed via McAfee Technical Support and Customer Services, including:
* Assistance with detection and cleaning or removal of malware
* Product installation and update questions
* Product usage questions

Please use the following links to reach our Technical Support group:
Business Customers: http://www.mcafee.com/us/support.aspx
Home Customers: http://home.mcafee.com/root/support.aspx

Regards,
McAfee Labs

McAfee Labs: http://www.mcafee.com/us/threat-center.aspx
McAfee Labs Blog: http://blogs.mcafee.com/mcafee-labs