×
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
BugSlayer
Former Member
Message 1 of 5

False Positive Trojan Detection! Unable to install software!

I am a representative of Priacta, Inc., maker of Trog Bar software. We were just informed by a client that the latest McAfee .DAT file update is causing a false positive as follows:

McAfee has automatically blocked and removed a Trojan.

About this Trojan
Detected: Artemis!40C24472A1D8 (Trojan), Artemis!40C24472A1D8 (Trojan)
Location: C:\Users\...\AppData\Roaming\Priacta\TrogBar\install\3D3FB4C\htmlayout.dll


The Trog Bar software in question can be downloaded for testing either via the Priacta web site on the /trog web page or via Download.com (search for Trog Bar).

Client is running Security Center latest version (2009). Client says that last night's .DAT update is what caused this to fail, it was working prior to that (must have been installing multiple times).

HTMLLayout is a known good open-source component of Trog Bar (UI). It is compiled fresh when Trog Bar is built.

Other .DAT updates have cause false positives, as a quick Google search for "mcafee false positive" will attest.

Please advise ASAP!
4 Replies
exbrit
MVP
MVP
Message 2 of 5

RE: False Positive Trojan Detection! Unable to install software!

There are stickies dotted around the forums on Artemis and other Possibly False Detections, try this one:

http://community.mcafee.com/showthread.php?t=233666
BugSlayer
Former Member
Message 3 of 5

Disabling Artemis & How to escalate resolution?

Peter,

The link you posted was very helpful but it is suddenly invalid today. Here is the new link:
http://community.mcafee.com/showthread.php?t=233666

NOTE to anyone: The instructions at the VERY BOTTOM of the link above explain how to configure Artemis in Security Center 9.3 (i.e., shut it off so you can continue running your valid program with htlmllayout or similar dll). Artemis is NOT CONFIGURABLE in prior versions (i.e., there is NO WORKAROUND).

This is a big, scary issue. HTMLayout is used by a large number of vendors, including Norton. Any application using HTMLayout.dll was likely to be shut down by McAfee Artemis less than 96 hours ago. (Google: mcafee htmlayout, to verify this.)

We have no direct way to talk to McAfee so far. The htmlayout file passed an "initial" analysis and was "passed to a McAfee technician for review," "we will be in touch by email," but no way to check on status and no ETA. A similar Artemis false positive for a game product was unresolved for some users TWO MONTHS later.

Please, any ideas on how to escalate this or get status updates from McAfee? Our customers are seriously inconvenienced...
BugSlayer
Former Member
Message 4 of 5

HTMLAYOUT.DLL status discussion in anotther forum

See this external forum for a running dialog on resolving this issue for their users, some of their advice may be useful to people here:

http://forum.esignalcentral.com/showthread.php?threadid=31606

The issue is still unresolved at the moment.
exbrit
MVP
MVP
Message 5 of 5

RE: HTMLAYOUT.DLL status discussion in anotther forum

Link corrected.
How Many Badges Can You Collect?
Ready for a little competition? Members like you are earning badges and unlocking perks for their helpful answers. Are you? Click here to find out.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community