false positive after an update

[Former Member]

As I am the author, I am sure I didn't include any malware inside.

So I kindly request recheck and remove the false positive detection asap
1. Issue Type: False positive
2. Source website: https://medlexo.ml/
3. Name of the software or product: Medlexo
4. Version number of medlexo: 8.0

[AdithyanT]

Hi @Former Member,

Thank you for reaching out to us. May I request you for more details such as what detection you see? Name of detection? or a screenshot to show if there is a block happening from McAfee products?

This will help us determine what we should do for reviewing the detection/block.

[Former Member]

64bit BehavesLike.Win32.Generic.wc

32bit GenericRXNF-VL!ECEB0F0440D6

@AdithyanT 

[AdithyanT]

Hi @Former Member,

Thank you for your quick response. I have verified this with available resources and I can confirm that these are file detections and not url blocks. Hence I would recommend you to create a service Request with us. If you are already a customer of us, you can call us or login to the support portal for the same..

if not, you can still create a Service Request by contacting our Customer care and getting a temporary Grant# using which they can assist you with an SR creation as well.

Reason for SR creation: we have sample available with us for detection: GenericRXNF-VL!ECEB0F0440D6.

However, we do not have any specific sample for BehavesLike.Win32.Generic.wc as this detection name corresponds to thousands of malwares in the wild.

[Former Member]

I have unsubscribed mcafee few years ago, I don't have access to my old email as well. Can you give a better approach that is more convenient for me? @AdithyanT 

I do not want to waste my phone call.

I already email to **personal information omitted**  before and they never reply and never process the detection when Medlexo was on v6.0 (current is v8.0).

I am truly very unhappy with the service provided by mcafee, take note in customer perspective this will discourage me to use your product @AdithyanT 

[AdithyanT]

Hi @Former Member,

We sincerely regret this and do not wish to have such an impression with you. Please bear with me while I check internally if I can create a way for you to upload the sample to us and I will drive this through to a resolution.

[AdithyanT]

Hi @Former Member,

Thank you for your kind time and patience with us on this. I have got a response with an SFTP link for you to upload the sample so that we can investigate this for you. I will DM the same in few minutes.

For any one else looking for a solution in general, we usually encourage vendors to have their application whitelisted with us proactively as mentioned in the below KB which should be helpful for your future versions as well:

How to submit your company's software to be considered for validation against DAT files (Whitelisting Program)

https://kc.mcafee.com/corporate/index?page=content&id=KB85568

[AdithyanT · Accepted solution]

Hi @Former Member,

The False positive issue should be resolved as of today's update. However, I sincerely request you to kindly check and confirm if it is cleared on your end as well.

Looking forward to your kind update on the same.

[Former Member]

fantasic. Yes, it is solved. I am very satisfied with your service

[AdithyanT]

Hi @Former Member,

Very glad we could be of help to you on this. We sincerely encourage you to submit your new versions proactively using this KBA as reference so that we can ensure your future versions are also deemed clean by us!

How to submit your company's software to be considered for validation against DAT files (Whitelisting Program)

https://kc.mcafee.com/corporate/index?page=content&id=KB85568

Hope you have a great year ahead!