Is this a false positive or bug with IE 6, McAfee 8/9/10 or both IE 6 and McAfee?

Is this a false positive or bug with IE 6, McAfee 8/9/10 or both IE 6 and McAfee?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Is this a false positive or bug with IE 6, McAfee 8/9/10 or both IE 6 and McAfee? GG 06-26-2006
Posted by GG on June 26, 2006, 6:57 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I get this error on two machines with IE6 and McAfee
When going to http://starwarsspoofs.com/, McAfee reports a problem.
Anyone else using Mcafee 8, 9 or 10 and have this same problem?
I get a Generic Downloader.0 trojan found message.
http://vil.nai.com/vil/content/v_131316.htm

My McAfee specs:
Mcafee Virusscan 10.0
Build 10.0.27
Engine version 4450
Dat version 4792
Dat file created 6/23/2006

When using IE Mcafee reports a trojan.
When using Firefox Mcafee doesn't.
I guess it's just something funky between IE and Mcafee.

Anyone else using McAfee 8, 9 or 10 and have dat file 4422 - 4769?
If so, do you get this error?
I've already done a McAfee full scan in normal and safe mode.
McAfee says my pc is clean.

I posted this info on McAfee's online forum.
I'll be checking McAfee's and this thread daily.
So, what is the cause of this problem?
Is this problem a false positive?
IE 6, McAfee 8/9/10 or http://starwarsspoofs.com/
Any info is appreciated!

http://webpages.charter.net/flashtv/stuff/starwarsspoofs1.JPG




Posted by David H. Lipman on June 26, 2006, 1:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| I get this error on two machines with IE6 and McAfee
| When going to http://starwarsspoofs.com/, McAfee reports a problem.
| Anyone else using Mcafee 8, 9 or 10 and have this same problem?
| I get a Generic Downloader.0 trojan found message.
| http://vil.nai.com/vil/content/v_131316.htm
|
| My McAfee specs:
| Mcafee Virusscan 10.0
| Build 10.0.27
| Engine version 4450
| Dat version 4792
| Dat file created 6/23/2006
|
| When using IE Mcafee reports a trojan.
| When using Firefox Mcafee doesn't.
| I guess it's just something funky between IE and Mcafee.
|
| Anyone else using McAfee 8, 9 or 10 and have dat file 4422 - 4769?
| If so, do you get this error?
| I've already done a McAfee full scan in normal and safe mode.
| McAfee says my pc is clean.
|
| I posted this info on McAfee's online forum.
| I'll be checking McAfee's and this thread daily.
| So, what is the cause of this problem?
| Is this problem a false positive?
| IE 6, McAfee 8/9/10 or http://starwarsspoofs.com/
| Any info is appreciated!
|
| http://webpages.charter.net/flashtv/stuff/starwarsspoofs1.JPG
|

To start with, you Engine version is funky.
The latest is v4400 (sans Beta 5000 which I use)

Well my v7.1E also flags the HTML page.

6/26/2006 1:08:25 PM Delete failed (Clean failed) DLIPMAN-1\lipman
D:\temp\IE6\Temporary
Internet Files\Content.IE5LUTYVAL\starwarsspoofs[1].htm Generic Downloader.o

But... No other vendor does. I will submit it to McAfee as a False Positive

AntiVir 6.35.0.16 06.26.2006 no virus found
Authentium 4.93.8 06.23.2006 no virus found
Avast 4.7.844.0 06.26.2006 no virus found
AVG 386 06.26.2006 no virus found
BitDefender 7.2 06.26.2006 no virus found
CAT-QuickHeal 8.00 06.26.2006 no virus found
ClamAV devel-20060426 06.26.2006 no virus found
DrWeb 4.33 06.26.2006 no virus found
eTrust-InoculateIT 23.72.49 06.25.2006 no virus found
eTrust-Vet 12.6.2275 06.26.2006 no virus found
Ewido 3.5 06.26.2006 no virus found
Fortinet 2.77.0.0 06.26.2006 no virus found
F-Prot 3.16f 06.23.2006 no virus found
Ikarus 0.2.65.0 06.26.2006 no virus found
Kaspersky 4.0.2.24 06.26.2006 no virus found
McAfee 4793 06.26.2006 Generic Downloader.o
Microsoft 1.1481 06.25.2006 no virus found
NOD32v2 1.1625 06.26.2006 no virus found
Norman 5.90.21 06.26.2006 no virus found
Panda 9.0.0.4 06.26.2006 no virus found
Sophos 4.07.0 06.26.2006 no virus found
Symantec 8.0 06.26.2006 no virus found
TheHacker 5.9.8.165 06.26.2006 no virus found
UNA 1.83 06.26.2006 no virus found
VBA32 3.11.0 06.26.2006 no virus found
VirusBuster 4.3.7:9 06.25.2006 no virus found



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by GG on June 26, 2006, 4:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thx.
I posted this info to McAfee's website and emailed them the .htm file
yesterday.
Both McAfee and you agree that it's a false positive.
Thx for your input!
>
> | I get this error on two machines with IE6 and McAfee
> | When going to http://starwarsspoofs.com/, McAfee reports a problem.
> | Anyone else using Mcafee 8, 9 or 10 and have this same problem?
> | I get a Generic Downloader.0 trojan found message.
> | http://vil.nai.com/vil/content/v_131316.htm
> |
> | My McAfee specs:
> | Mcafee Virusscan 10.0
> | Build 10.0.27
> | Engine version 4450
> | Dat version 4792
> | Dat file created 6/23/2006
> |
> | When using IE Mcafee reports a trojan.
> | When using Firefox Mcafee doesn't.
> | I guess it's just something funky between IE and Mcafee.
> |
> | Anyone else using McAfee 8, 9 or 10 and have dat file 4422 - 4769?
> | If so, do you get this error?
> | I've already done a McAfee full scan in normal and safe mode.
> | McAfee says my pc is clean.
> |
> | I posted this info on McAfee's online forum.
> | I'll be checking McAfee's and this thread daily.
> | So, what is the cause of this problem?
> | Is this problem a false positive?
> | IE 6, McAfee 8/9/10 or http://starwarsspoofs.com/
> | Any info is appreciated!
> |
> | http://webpages.charter.net/flashtv/stuff/starwarsspoofs1.JPG
> |
>
> To start with, you Engine version is funky.
> The latest is v4400 (sans Beta 5000 which I use)
>
> Well my v7.1E also flags the HTML page.
>
> 6/26/2006 1:08:25 PM Delete failed (Clean failed) DLIPMAN-1\lipman
> D:\temp\IE6\Temporary
> Internet Files\Content.IE5LUTYVAL\starwarsspoofs[1].htm Generic
> Downloader.o
>
> But... No other vendor does. I will submit it to McAfee as a False
> Positive
>
> AntiVir 6.35.0.16 06.26.2006 no virus found
> Authentium 4.93.8 06.23.2006 no virus found
> Avast 4.7.844.0 06.26.2006 no virus found
> AVG 386 06.26.2006 no virus found
> BitDefender 7.2 06.26.2006 no virus found
> CAT-QuickHeal 8.00 06.26.2006 no virus found
> ClamAV devel-20060426 06.26.2006 no virus found
> DrWeb 4.33 06.26.2006 no virus found
> eTrust-InoculateIT 23.72.49 06.25.2006 no virus found
> eTrust-Vet 12.6.2275 06.26.2006 no virus found
> Ewido 3.5 06.26.2006 no virus found
> Fortinet 2.77.0.0 06.26.2006 no virus found
> F-Prot 3.16f 06.23.2006 no virus found
> Ikarus 0.2.65.0 06.26.2006 no virus found
> Kaspersky 4.0.2.24 06.26.2006 no virus found
> McAfee 4793 06.26.2006 Generic Downloader.o
> Microsoft 1.1481 06.25.2006 no virus found
> NOD32v2 1.1625 06.26.2006 no virus found
> Norman 5.90.21 06.26.2006 no virus found
> Panda 9.0.0.4 06.26.2006 no virus found
> Sophos 4.07.0 06.26.2006 no virus found
> Symantec 8.0 06.26.2006 no virus found
> TheHacker 5.9.8.165 06.26.2006 no virus found
> UNA 1.83 06.26.2006 no virus found
> VBA32 3.11.0 06.26.2006 no virus found
> VirusBuster 4.3.7:9 06.25.2006 no virus found
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by David H. Lipman on June 26, 2006, 5:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Thx.
| I posted this info to McAfee's website and emailed them the .htm file
| yesterday.
| Both McAfee and you agree that it's a false positive.
| Thx for your input!

Still not corrected though by DAT v4793 :-(

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by GG on June 27, 2006, 6:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Check this out.
I uninstalled and reinstalled McAfee.
I now have engine 4400 back.
I've seen other people mention 4450 also.
Who knows why certain people get 44550 vs 4400.
After reinstalling, I no longer get the error with engine 4400.
Here are my specs after reinstalling:

My McAfee specs:
Mcafee Virusscan 10.0
Build 10.0.21
Engine version 4400
Dat version 4793
Dat file created 6/26/2006

These were my original specs:
My McAfee specs:
Mcafee Virusscan 10.0
Build 10.0.27
Engine version 4450
Dat version 4792
Dat file created 6/23/2006

I have one more machine with engine 4450.
I'll check it in about two months to see if it gets a new engine.
If not, I'll reinstall McAfee on it.
I wonder if you uninstalled Mcafee enterprise 8 on your machine and had
another engine besides the beta one would you still get the same error?

Here are some users with engine 4450.
http://forums.mcafeehelp.com/viewtopic.php?t=58983
http://forums.mcafeehelp.com/viewtopic.php?t=57645

It appears that anyone with engine 4450 gets build 10.0.27.
I wonder if I'll get 4450 back again when my machine is auto updated?

>
> | Thx.
> | I posted this info to McAfee's website and emailed them the .htm file
> | yesterday.
> | Both McAfee and you agree that it's a false positive.
> | Thx for your input!
>
> Still not corrected though by DAT v4793 :-(
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Similar ThreadsPosted
Win32.TrojanSpy.Goldun False Positive? January 27, 2008, 5:16 pm
Zone Alarm Pro - False Positive Report of Ardamax.e? November 12, 2007, 9:31 am
mcafee August 5, 2007, 11:56 am
McAfee AV? Pop up problem with AOL April 24, 2006, 9:47 pm
mcafee virus July 8, 2006, 11:22 pm
McAfee Stinger updated to v2.5.6 August 16, 2005, 8:38 pm
Help with a McAfee interference problem September 10, 2005, 2:38 pm
McAfee Stinger updated - v2.5.8 October 12, 2005, 11:16 pm
Norton & McAfee "crapware" November 11, 2005, 6:21 pm
Mcafee cls deleted my dvd2one123.exe :-( October 1, 2006, 11:55 am

The site map in XML format XML site map

Contact Us | Privacy Policy