Author Topic: Newt blocked by McAfee (Read 9025 times)

stevenMHS · « **on:** February 10, 2010, 01:39:28 PM »

When installing 2.5.148, the installer stops partway through because McAfee has blocked a file. It looks like C:\\\\Program Files\\\\Komodo Labs\\\\NEWT Professional 2.5\\\\NewtScan is detected as Artemis!1F87F060DA0E.

If I add Artemis!1F87F060DA0E as an exception, it allows the install, but then McAfee deletes the file when Newt is run. Once that file is deleted Newt can still do discovery, but will not scan.

I\'ll try reinstalling the old version of Newt (I think it was build 144) to see if I have the same problem. I understand antivirus software can sometimes be too sensitive, but I just want to make sure before I get too far.

I\'m using McAfee scan engine 5400.1158, my DAT version is 5887.000 (Feb 9, 2010).

Komodo Support · « **Reply #1 on:** February 10, 2010, 09:58:29 PM »

Hello. We tested NEWTScan from build 148 on VirusTotal.com, and you\'re right, it does alert as a virus on McAfee Artemis (Artemis is their new heuristics package) and for some reason on F-Secure. When we tested the one file in build 144 however, it did not alert. So it\'s certainly a false positive.

VirusTotal.com is a useful site allowing you to run a file through at least 40 Windows anti-virus software packages.

Anyway, we found the discrepancy in build 144 vs 148 and have now fixed the anti-virus issue as well as a few others. It should no longer alert or delete the file with McAfee Artemis. Regardless what build you\'re running, as long as it\'s higher than 120, you should now get an alert to update to build 150.

Thank you for bringing this to our attention!

stevenMHS · « **Reply #2 on:** February 11, 2010, 01:41:24 PM »

Build 150 is working happily with McAfee. Wow, that was quick, thank you.

Komodo Support · « **Reply #3 on:** February 11, 2010, 08:57:13 PM »

You\'re welcome Steven!