?virus signature issue with McAfee recently?

[forumstaff]

Hi Phil,

We are in the process of getting things done with McAfee. We however need the below mentioned details about your McAfee product - 1. Product and Version 2. Engine Version 3. .DAT Version.

You can get this information by following the below mentioned instructions -

Knowing the VirusScan Enterprise (VSE) Version, DAT Version, and Scan Engine Version is essential when troubleshooting. The best way to determine this information is through the About screen. Alternatively, you can verify the VSE file versions using Windows Explorer. When a patch is applied, the relevant files are updated and the About screen displays the new patch level. Details of files updated are in the readme file that accompanies each patch. Hotfixes applied are not displayed.

To view product information in the About VirusScan Enterprise screen:

From the VSE icon in the system tray

In the task bar, right-click the VirusScan icon.
Select About VirusScan Enterprise.

From the VirusScan console

Click Start, Programs, McAfee, VirusScan Console.
Click Help, About VirusScan Enterprise.

Information to note:

Product version
DAT Version
Scan Engine version

[philkryder]

please look back through the thread history.

I posted all that info a couple of months ago in a word doc.

[forumstaff]

Sorry about that. My bad.

[philkryder]

any word from McAfee?

[philkryder]

? any news ?

[forumstaff]

Hello Phil,

We are following up with McAfee, however we have not yet heard back from them.

We will update you as soon as we hear back from them.

[philkryder]

if you have a mcafee ticket number,
I can ask our central IT team to follow up with them directly.
Phil

[forumstaff]

Hi Phil,

We have not received any ticket number from McAfee but below is the link for the Detection Dispute Submission which we filled out and were told on submission that McAfee will contact us in 4 to 6 weeks but still have not heard back from them.

We are still following up on the request and are looking for other ways to get their attention.

https://secure.mcafee.com/apps/mcafe...aspx?region=us

Regards.

[forumstaff]

Hi Phil,

McAfee did respond to our request. Here is what they have quoted when we advised them about the fact that Automation Anywhere is falsely detected by McAfee -

"Your issue was examined by McAfee Labs Research and our Enterprise product team. The source of the blocking is a result of McAfee Virus Scan Enterprise Access Protection feature. Here is a response from that team to help explain:

Maximum protection will lock down the system quite a bit. The default is "Normal Protection", rather than maximum.

They can either exclude their installer within the exclusion section of the rule, or disable the rule completely.

The rule is behaving as designed, otherwise.

Please see if modifying the settings helps your issue.

Thank you for contacting McAfee."


We further asked them to include Automation Anywhere in their White-list to which their response was as under -

"The issue you reported is not a whitelisting issue. The behavior as described is a global protection over any installations without the Enterprise Administrator approval. Whitelisting for false detection prevention will not impact the Access Protection feature of our Enterprise product line."

Regards.