PMP files detected as trojans

[Clive Churchyard]

Whilst installing SIM 4.1 SP1 Mcafee Anti-Virus detected 3 performance management pack files as trojans - Firstly this is slightly worrying, and secondly has anyone else had this issue?

[David Claypool]

Clive:

This forum is not an official escalation mechanism, but your report got a lot of people's attention. We have had several people download and perform installs with multiple different virus scanners and none have reported a problem. At this point, our opinion is that one of the following may have occurred:

- a false positive because McAfee thought it recognized a pattern that resembled a Trojan
- the files were infected after they were downloaded
- a corrupted virus definition file

Not that it never could happen, but before files can be posted on hp.com a very rigorous review and scan is performed at several stages. It doesn't just go from someone's PC out to the web site.

At this point, unless others experience something similar, we consider the subject closed and recommend you try out your install on a clean, freshly installed and patched system to avoid any possibility of taint.

Thanks,
David

[David Claypool]

Further update from McAfee customer services:

Virus definition file 4407 released 17 Nov 2004 had been reported to give false positives identifying files as containing the Downloader-RK Trojan. McAfee released definition file 4408 the day after that corrected the problem.

Anyone experiencing this issue should make sure that they are using definition 4408 or later.