'New' Active Protection

[hisshadow]

I have had numerous false positive atremis detections in the last several months to a year. Since I do alot of programming, it is detrimental to loose as essentially become unable to use application files I have created. I read on the stickied post that Artemis is part of a 'new' heuristic detection technique with active protection. If I disable active protection, does this mean that McAfee will no longer automatically detect infected files as they appear on my system, or will problems still be identified without requiring a full system scan? I feel like previous versions of the software performed a similar real time scanning function but without the calling all of my debugging tools Artemis!Generic trojans.

Simply put, does disableing active protection mean the only way McAfee will detect viruses is during system scans?

[exbrit]

It will still detect known infections (indexed up to whenever the last DAT was done) but wont detect unknowns heuristically, so feasibly it could be dangerous, but you wont be totally exposed as VirusScan will still be active.

[Dinz]

Hi,

When a file is scanned, Virus Scan compares it to known threats. VirusScan also uses heuristic techniques to detect unusual behavior. When a file cannot be matched to a known threat, but exhibits unusual and possibly threatening behavior, Virus Scan utilizes Artemis technology to evaluate the threat of the unknown file. If the file is deemed unsafe, Virus Scan will quarantine the file to protect your computer.Moreover turning off active protection is not suggestible.

If you feel that Virus Scan has incorrectly quarantined a file you know to be safe, you can recover that file using the steps below :

1. Double-click the M icon in your taskbar.
2. If it appears in the bottom left, click Advanced Menu. Otherwise, continue to step 3.
3. Select Restore.
4. On the Restore menu, select Files to display a list of all quarantined files
5. Check the box beside the file you want to alter. 
6. You may now select Restore to restore the file in question, Remove to permanantly delete the file, or Send to McAfee to send the file to McAfee Labs for further investigation.

Regards,

Dinesh K
McAfee Online Community Moderator on 12/14/09 10:03:56 AM GMT-06:00