×
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Message 1 of 23
‎11-04-2015 11:39 PM

Too many missed detections

Recently I`ve been testing virus detection rates of mcafee internet security using samples from various sources, and submit the missed samples via getsusp

But in the reply there`re a lot of reports indicating samples that should have been detected, but missed.

The missed detections exist in various forms, but mostly begins with prefix "RDN"， together with some other detections.

        | 08.ex_    | 91b62b6cb2700902ebdd994426be0850 | detected | fareit-fcg!91b62b6cb270   | Unknown        |

        | 23.ex_    | 73175263ed0ca60015a7cdf515ac1dfd | detected | genericr-ete!73175263ed0c | Unknown        |

        | 18.ex_    | 8fc4c25a70024b2398764abc87dbd697 | detected | rdn/generic pws.y         | TROJAN         |

        | 21.ex_    | fd80e978ee3b05ef226c686697343488 | detected | rdn/generic downloader.x  | TROJAN         |

        | 43.ex_    | 8afecc8e61fe3805fdd41d4591710976 | detected | rdn/generic.dx            | TROJAN         |

        | 45.ex_    | b5d6e82d9a2c83830774ae98ab1bd766 | detected | rdn/generic downloader.x  | TROJAN         |

        | 34.ex_    | ec30c5cbca734b6c0311e5f332558606 | detected | rdn/ransom                | assumed_dirty4 |

        | 48.ex_    | 63821a12980a9e6b11c3dd9b9e15230e | detected | trojan-fhhb!63821a12980a  | assumed_dirty4 |

        | 03.ex_    | 198daed0fe23f7317a8cfb97b171d97b | detected | rdn/generic backdoor      | TROJAN  |

        | 25.ex_    | 52299d477e0bea01a82da8142511b94d | detected | generic-fawt!52299d477e0b | TROJAN |

        | 09.ex_    | badf74e12ab1921d61b11d8ef924e3f9 | detected | generic-fawt!badf74e12ab1 | TROJAN |

        | 41.ex_    | 6ed422ec24ecc7afef56ba0ef3df3dfa | detected | rdn/pwcrack-winspy        | PUP     |

        | 29.ex_    | baa0c1b7c0da0e0e3c9b5c7d6e534ff7 | detected | generic-fawt!baa0c1b7c0da | TROJAN |

So mcafee IS cannot detect a lot of malware even if mcafee think it can. And that will pose our PC into great danger.

Plz fix it ASAP.

0 Kudos
Reply
22 Replies
Peacekeeper
MVP
MVP
Message 2 of 23
‎11-05-2015 01:24 AM

Re: Too many missed detections

Pinged the getsusp guru

0 Kudos
Reply
exbrit
MVP
MVP
Message 3 of 23
‎11-05-2015 01:58 AM

Re: Too many missed detections

It also depends on your definition of malware but all the ones above were detected.    But best wait for comments from someone at the labs.

In all tests conducted by the media McAfee/Intel scored very highly.

0 Kudos
Reply
SafeBoot
MVP
MVP
Message 4 of 23
‎11-05-2015 05:17 AM

Re: Too many missed detections

the data you shared doesn't support your claims - all the samples were detected?

0 Kudos
Reply
Former Member
Not applicable
Message 5 of 23
‎11-05-2015 09:48 AM

Re: Too many missed detections

my definition is the samples were detected using on-access or on-demand scan.

I`m not questioning the real detection rate, but it seems that MIS is not fully showing its capabilities on my PC.

0 Kudos
Reply
Former Member
Not applicable
Message 6 of 23
‎11-05-2015 09:51 AM

Re: Too many missed detections

the full reply from getsusp is like this:

        +-----------+----------------------------------+--------------+---------------------------+----------------+

| File Name | MD5                              | Findings     | Detection                 | Type           |

+-----------+----------------------------------+--------------+---------------------------+----------------+

        | 05.ex_    | 73b944b630898a695536cb0c3f826295 | not_detected | | TROJAN         |

        | 08.ex_    | 91b62b6cb2700902ebdd994426be0850 | detected | fareit-fcg!91b62b6cb270   | Unknown        |

        | 13.ex_    | 219c843cf84cc73f624779d12c997f1c | not_detected |                           | assumed_dirty4 |

        | 23.ex_    | 73175263ed0ca60015a7cdf515ac1dfd | detected | genericr-ete!73175263ed0c | Unknown |

        | 18.ex_    | 8fc4c25a70024b2398764abc87dbd697 | detected | rdn/generic pws.y         | TROJAN         |

        | 21.ex_    | fd80e978ee3b05ef226c686697343488 | detected | rdn/generic downloader.x  | TROJAN         |

        | 40.ex_    | 10991b454f1923aae00115b120bcd803 | not_detected |                           | assumed_dirty4 |

        | 32.ex_    | 6377b30d73687cf955d32f53cf42f52b | not_detected |                           | assumed_dirty4 |

        | 43.ex_    | 8afecc8e61fe3805fdd41d4591710976 | detected | rdn/generic.dx            | TROJAN         |

        | 44.ex_ | 9a367e46449bffa33227974bcc75c9fe | not_detected |                           | assumed_dirty4 |

        | 45.ex_    | b5d6e82d9a2c83830774ae98ab1bd766 | detected | rdn/generic downloader.x  | TROJAN         |

        | 37.ex_    | dfdbb12f24584e1c772059ee8fd0a43d | not_detected |                           | assumed_dirty4 |

        | 34.ex_    | ec30c5cbca734b6c0311e5f332558606 | detected | rdn/ransom                | assumed_dirty4 |

        | 31.ex_    | fc7668b98ff01a8841fd8eee6390daa9 | not_detected |                           | assumed_dirty4 |

        | 48.ex_    | 63821a12980a9e6b11c3dd9b9e15230e | detected | trojan-fhhb!63821a12980a  | assumed_dirty4 |

        | 47.ex_    | 7b84e05bf2045a64fba566dfb929d140 | not_detected | | Unknown        |

        | 46.ex_    | c9dc4e6c77498f5a45bb5dda9e23328f | not_detected |                           | assumed_dirty4 |

+-----------+----------------------------------+--------------+---------------------------+----------------+

All the samples I submitted are not detected on my PC, but the reply shows that there are some that should be detected already by Mcafee

0 Kudos
Reply
SafeBoot
MVP
MVP
Message 7 of 23
‎11-05-2015 09:52 AM

Re: Too many missed detections

What you're seeing is the difference between signature based detection and behaviour based detection - since most malware is one time polymorphic, the chances of seeing the same signature twice is so low that it's hardly worth recording it.

That's where behavioural detection comes in.

0 Kudos
Reply
catdaddy
MVP
MVP
Message 8 of 23
‎11-05-2015 09:53 AM

Re: Too many missed detections

Are you referring to Quarantined Items, or Security History?

Cliff
McAfee Volunteer
0 Kudos
Reply
Former Member
Not applicable
Message 9 of 23
‎11-05-2015 09:55 AM

Re: Too many missed detections

There`re some samples that mcafee shows they should be detected right now are missed on my PC, according to the results frome getsusp above

what else do you think do I need to provide to make this more clear?

0 Kudos
Reply
catdaddy
MVP
MVP
Message 10 of 23
‎11-05-2015 09:55 AM

Re: Too many missed detections

I see that SafeBoot offered his assistance, so having said this...His Product knowledge 'Dwarfs' mine.

Cliff
McAfee Volunteer
0 Kudos
Reply
How Many Badges Can You Collect?
Ready for a little competition? Members like you are earning badges and unlocking perks for their helpful answers. Are you? Click here to find out.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community

* Important Terms and Offer Details:

  Subscription, Free Trial, Pricing and Automatic Renewal Terms:

  • The amount you are charged upon purchase is the price of the first term of your subscription. The length of your first term depends on your purchase selection (e.g. 1 month or 1 year).  Once your first term is expired, your subscription will be automatically renewed on an annual basis (with the exception of monthly subscriptions, which will renew monthly) and you will be charged the renewal subscription price in effect at the time of your renewal, until you cancel (Vermont residents must opt-in to auto-renewal.)
  • Unless otherwise stated, if a savings amount is shown, it describes the difference between the introductory first term price (available only to customers without an existing McAfee subscription) and the renewal subscription price (e.g., first term price vs. each year thereafter).
  • Pricing is subject to change. If the renewal price changes, we will notify you in advance so you always know what’s going on.
  • You can cancel your subscription or change your auto-renewal settings any time after purchase from your My Account page. To learn more, click here.
  • You may request a refund by contacting Customer Support within 30 days of initial purchase or within 60 days of automatic renewal (for 1 year terms or longer).
  • Your subscription is subject to our License Agreement and Privacy Notice. Subscriptions covering "all" devices are limited to supported devices that you own. Product features may be added, changed or removed during the subscription term.  Not all features may be available on all devices.  See System Requirements for additional information.
  • Free Trial Terms: At the end of your trial period you will be charged $39.99 for the first term. After the first term, you will be automatically renewed at the renewal price (currently $124.99/yr). We will charge you 7-days before renewal. You can cancel at any time before you are charged. ​

 **Free Benefits With Auto-Renewal:

  • For many qualifying product subscriptions McAfee offers additional benefits for free when you are enrolled in auto-renewal. You can check your eligibility for these benefits in your My Account page. Not all benefits are offered in all locations or for all product subscriptions.  System Requirements apply.   Turning off auto-renewal terminates your eligibility for these additional benefits. 
  • Virus Protection Pledge (VPP): If we cannot remove a virus from your supported device we’ll refund you the amount you paid for your current term subscription.  The refund does not apply to any damage or loss caused by a virus.  You are responsible for backing up your data to prevent data loss. See terms here: mcafee.com/pledge.
  • Safe Connect VPN:  You will receive free, unlimited access to our VPN wireless on supported devices. Users not on auto-renewal have access to 500 MB/month of bandwidth.

   ‡Additional Terms Specific to Identity Monitoring Service:

  • Eligibility: McAfee® Identity Monitoring Service Essentials is available within active McAfee Total Protection and McAfee LiveSafe subscriptions with identity monitoring for up to 10 unique emails. Phone number monitoring is enabled upon activation of Automatic Renewal. Not all identity monitoring elements are available in all countries. See Product Terms of Service for more information. 
  • Your subscription is subject to our License Agreement and Privacy Notice. Product features may be added, changed or removed during the subscription term. Some features may require registration and a valid ID number to activate. See System Requirements for additional information.
  • While McAfee Identity Monitoring Service provides you tools and resources to protect yourself from identity theft, no identity can be completely secure.
  • US Only:
    Fair Credit Reporting Act: You have numerous rights under the FCRA, including the right to dispute inaccurate information in your credit report(s). Consumer reporting agencies are required to investigate and respond to your dispute, but are not obligated to change or remove accurate information that is reported in compliance with applicable law. While this plan can provide you assistance in filing a dispute, the FCRA allows you to file a dispute for free with a consumer reporting agency without the assistance of a third party.
  • Identity theft coverage is not available in New York due to regulatory requirements.


Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA

Products

McAfee® Total Protection
McAfee® Gamer Security
McAfee® Identity Monitoring Service
McAfee® Security Scan Plus
McAfee® WebAdvisor
McAfee® Techmaster Concierge
McAfee® Virus Removal Service

Resources

Antivirus
Free Downloads
Parental Controls
Malware
Firewall
 Blogs
Activate Retail Card
Threat Center
McAfee Enterprise

Support

Consumer Support
FAQs
Renewals
Support Community

About

About McAfee
Careers
Contact Us
Newsroom
Investors
Legal Terms
Your Privacy Choices
System Requirements
Sitemap

Copyright © 2022 McAfee, LLC
Copyright © 2022 McAfee, LLC