McAfee Gold Technical Support
18
Malware Identification
If you suspect that your system has been compromised by a virus, it is recommended that you submit the infected file
for verification.
Submitting virus samples
If you believe that your computers have been infected with a virus but the virus is not being detected by a McAfee product,
you can submit a sample for analysis by McAfee’s Avert Labs response team at
http://vil.nai.com/vil/submit-sample.aspx
WebImmune is the preferred method to submit samples to Avert Labs, as it provides the fastest turnaround time on sample
reviews and provides historical information of all samples that you have submitted. By accessing the WebImmune web site
(
) and creating a free account, you will be able to upload files directly to Avert Lab’s automated
systems for review. If the automated system is unable to determine that a threat exists, then the issue will be escalated to
Avert Labs analysts.
More information about WebImmune can be found at
https://www.webimmune.net/faqs.asp
WebImmune was the first Internet virus security scanner that resides on the web. It is available 24/7/365 and enables you to
receive information about your files, including solutions and real-time fixes, if required.
When you submit a sample to WebImmune, you will get one of the following four responses:
• This is in the current DAT and you should update to the latest DAT files
• This is a known threat, not in the current DAT set, and an extra DAT has been created
• This is not a known threat and has been escalated to a researcher within Avert Labs
• This is a known clean file
Detection of an infected file
If your file is infected with a virus, it is recommended that you submit a case to Technical Support and state the WebImmune
ID number. McAfee Technical Support and the Avert Labs team will then work together to assist in identifying suspicious,
malicious, or offending processes through data collection, customer conference calls, and information sharing across support
levels and Avert Labs levels.
