PDA

View Full Version : McAfee - False Positive



NewsArchive
04-04-2014, 01:50 AM
Hello -

We have a large setup that 2 customers have not been able to complete
a download because McAfee says no.

Anyone have any Mcafee false positives lately?

Since it's 400+MB, Virustotal can't help me out here.

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.

NewsArchive
04-04-2014, 01:51 AM
Hi Jeff!

Usually, the false positive are relative to some api calls (hooks,
servicemanager...)

I use to report the false positive on my exe or dll to the anti-virus
vendors. But lately I prefer to call those API by "name" using load
library... false positive gone!

--
Saludos y Sonrisas
**************
¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬ ¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬ ¬¬¬¬¬
Hoy he considerado la _muy remota_ posibilidad de que el Mundo
esté correcto y que Yo sea el LOCO!
http://www.carabez.com
http://www.jamesbuchanans.com
¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬ ¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬¬ ¬¬¬¬¬

NewsArchive
04-04-2014, 09:54 AM
Jeff,

try to recompile your setup. The heuristic detection in McAfee might detect
a specific byte combination in your setup.exe. Sometimes a re-compile /
re-code-sign can help in this case.

Friedrich

NewsArchive
04-04-2014, 09:54 AM
Thanks. I'll suggest that.

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.

NewsArchive
04-04-2014, 09:54 AM
Jeff

Have you tried putting you setupbuilder install in the McAkiller Exceptions
list?

Dan