Virus in Download? (1 Viewer)

[cacti]

McAfee is picking up the Artemis! virus when downloading MediaPortalSetup_1.1.2.exe. This might be a false positive, but it's a bit worrying.

2010/12/13 10:49:18 AM Deleted XXX-PC\xxx C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\xxx\AppData\Local\Mozilla\Firefox\Profiles\aifgrsge.default\Cache\01DABC77d01\49.nsis\62.nsis Artemis!F89F0C49A0EE (Trojan)
2010/12/13 10:49:22 AM Deleted XXX-PC\xxx C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\xxx\Downloads\MediaPortalSetup_1.1.2.exe\49.nsis\62.nsis Artemis!F89F0C49A0EE (Trojan)

 

[ronilse]

Hi,
If you downloaded it from sourceforge (where MP sites points to) it is safe, so called false positive.
Please report your find to McAfee so it can be fixed.

I tested with AVG Free Edition 2011(with latest update available) & no virus was found in the installer which i was pointed to from MP sites..

Update (Result from scan):
Scan "Shell extension scan" completed.
No infection was found during this scan
Folders selected for scanning:;"MediaPortalSetup_1.1.2.exe;"
Scan started:;"13. desember 2010 10:31:23"
Scan finished:;"13. desember 2010 10:31:43 (20 second(s))"
Total object scanned:;"2373"
User who launched the scan:;"Roy Nilsen"


Regards
Roy

 

[cacti]

Hi,
If you downloaded it from sourceforge (where MP sites points to) it is safe, so called false positive.
Please report your find to McAfee so it can be fixed.

I tested with AVG Free Edition 2011(with latest update available) & no virus was found in the installer which i was pointed to from MP sites..

Regards
Roy

Thanks, yes I used the sourceforge link. I'll also do a test from home using Avira. We're using McAfee Enterprise 8.7i at work.

 

[Spragleknas]

Would perhaps be a good idea to UL it to VirusTotal - Free Online Virus, Malware and URL Scanner to see if any other AV finds a false positive.

 

[Furetto]

Artemis is not the name of a virus but is the name of the "behavioral scan" inside McAfee. Which is prone to having more false positives as it does not rely on virus signatures but on "behavioral scan".