mullvad-browser icon indicating copy to clipboard operation
mullvad-browser copied to clipboard

Detected as virus after installing update / McAfee Total Protection

Open gracie95 opened this issue 2 years ago • 8 comments

Screenshot 2023-06-15 234944

With the kind threat as shown at picture.

gracie95 avatar Jun 15 '23 15:06 gracie95

What Endpoint Detection and Response/antimalware software is detecting this? I only see one detection on VirusTotal (Trapmine; which seems to have a fair share of FPs, which isn't shocking given it's one of those "next gen" EDRs), but of course VT isn't the real world IMO you need to report a false positive to them

iam-py-test avatar Jun 15 '23 22:06 iam-py-test

McAfee Total Protection.

Jun 16, 2023, 06:34 by @.***:

What EDR/antimalware is detecting this? IMO you need to report a false positive to > them

— Reply to this email directly, > view it on GitHub https://github.com/mullvad/mullvad-browser/issues/98#issuecomment-1593806700> , or > unsubscribe https://github.com/notifications/unsubscribe-auth/AZV7OK2CEGAOXPY7DMVWNWTXLOEYPANCNFSM6AAAAAAZIBZIYY> . You are receiving this because you authored the thread.> Message ID: > <mullvad/mullvad-browser/issues/98/1593806700> @> github> .> com>

gracie95 avatar Jun 16 '23 00:06 gracie95

Please report this to them: https://www.mcafee.com/support/?articleId=TS103032&page=shell&shell=article-view Thanks

iam-py-test avatar Jun 16 '23 00:06 iam-py-test

Thanks for the report @gracie95.

Can you confirm you updated Mullvad Browser from 12.0.6 to 12.0.7?

I have submitted a dispute to the McAffee with a link to this issue, using the following form: https://www.mcafee.com/en-us/consumer-support/dispute-detection-allowlisting.html

ruihildt avatar Jun 16 '23 09:06 ruihildt

Yes. That version I got problem.

Jun 16, 2023, 17:15 by @.***:

Thanks for the report > @gracie95 https://github.com/gracie95> .

Can you confirm you updated Mullvad Browser from 12.0.6 to 12.0.7?

I have submitted a dispute to the McAffee with a link to this issue, using the following form: > https://www.mcafee.com/en-us/consumer-support/dispute-detection-allowlisting.html

— Reply to this email directly, > view it on GitHub https://github.com/mullvad/mullvad-browser/issues/98#issuecomment-1594378008> , or > unsubscribe https://github.com/notifications/unsubscribe-auth/AZV7OK4AKSOHMTNQ2JXJVITXLQP4VANCNFSM6AAAAAAZIBZIYY> . You are receiving this because you were mentioned.> Message ID: > <mullvad/mullvad-browser/issues/98/1594378008> @> github> .> com>

gracie95 avatar Jun 18 '23 06:06 gracie95

Still same. Tested to latest version.

Screenshot 2023-06-29 122450

gracie95 avatar Jun 29 '23 04:06 gracie95

Unfortunately, McAfee hasn't replied to my submission.

ruihildt avatar Jun 29 '23 08:06 ruihildt

I've been having issues using the mullvad browser and I finally found out my anti-virus (McAfee) was quarantining the browser whenever I tried to launch it because it saw it as a threat. This the threat name I get whenever I try and use the application (t!619F0A2B143A). Is there any guidance you can provide? I can't seem to find the corresponding threat for this.

ruihildt avatar Aug 24 '23 08:08 ruihildt

It hasn't been reported, so I will close. But as these come up periodically, there's not much we can do, especially when antivirus vendors are not responding,

ruihildt avatar Sep 10 '24 14:09 ruihildt