|
What is a Primary E-mail Address? |
| |
A primary e-mail address is the true address of your account, not an alias of the address.
For example, Joe.Avert@avert.com would be a primary address. javert@avert.com might be an
alias of that address, but because it is shorter it is the address Joe Avert typically uses
to register with.
[Back to top]
|
|
Why do I need to use my Primary E-mail Address? |
| |
The WebImmune MyAccount page will allow you to review web submissions to WebImmune and e-mail
submissions to Virus Research. If you register using an alias address at WebImmune, we will not
display your e-mail submission history.
[Back to top]
|
|
What information should be provided in each of the Registration fields? |
|
Name:
- Please provide your first and last name so we can personalize our responses to you.
E-mail address:
- Please provide your Primary e-mail address. An e-mail address is required so Avert(r) Labs
can contact you by e-mail if necessary. A primary e-mail address is the true address of
your account, not an alias of the address. For example, Joe.Avert@avert.com would be a primary
address. javert@avert.com might be an alias of that address, but because it is shorter it is
the address Joe Avert typically uses to register with.
The WebImmune MyAccount page will allow you to review web submissions to WebImmune and e-mail
submissions to Virus Research. If you register using an alias address at WebImmune, we will
not display your e-mail submission history.
Secret Question and Answer:
- Please select a Secret Question and Answer. A Secret Question and Answer will allow us to
verify who you are when you have forgotten your password and need a new one sent to you.
Language:
- Please select a preferred language. WebImmune will respond to you in the language you select.
If Avert(r) Labs needs to contact you via e-mail to follow up on your submission, the follow up e-mail
may not be in your preferred language.
Country, State, Industry and Time zone:
- Please provide a Country, State, the Industry you work in, and the Time Zone you live in.
After you select your Country, the web page will refresh and populate the State list.
The location and industry information will help Avert(r) Labs track virus prevalence and migration patterns.
Number of PC's:
- Please provide the number of PC that you are responsible for. This information can aid us
in assessing the risk of a particular virus, by letting us know more accurately how many
machines are at risk of infection. See information on our
Risk Assessment.
Vendor:
- Please provide your Desktop, Server, and Perimeter Anti-Virus vendor. This information is voluntary.
[Back to top]
|
|
What is Avert(r) Labs Threat News? |
| |
Avert(r) Labs' goal is to Advise and Alert, not Alarm. The purpose of Avert(r) Labs Threat News is to inform
subscribers of the latest information regarding threats that reach
Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak assessment levels.
When Avert(r) Labs has determined that a threat warrants a public notification people signed up for Avert(r) Labs
Threat News will receive an e-mail from our List Server.
[Back to top]
|
|
How do I remove myself from Avert(r) Labs Threat News if I no longer want a notification? |
| |
If you do not wish to receive Avert(r) Labs Threat News you will need to un-register from
the Avert(r) Labs Threat News list server. Instructions for un-registering from the List Server, using e-mail,
is included in each Avert(r) Labs Threat News.
[Back to top]
|
|
Why doesn't the Registration page ask for a password? |
| |
A password will be sent to you in e-mail. This number will be a randomly generated unique number.
Once you have received your password in e-mail log in to WebImmune with this password.
WebImmune will immediately prompt you to change the password to something more personalized.
[Back to top]
|
|
How will Avert(r) Labs use the information I was asked for on the registration page? |
| |
Avert(r) Labs will use information like geographic location, industry sector, and time zone to
track virus prevalence and distribution patterns. This type of information can aid us in
a assessing a particular threat's
Risk Assessment. Avert(r) Labs' goals are not only to provide rapid virus analysis, but to also
study prevalence and migration patterns of viruses and other malware.
[Back to top]
|
|
What browsers does WebImmune Support? |
| |
IE 5.x and higher
Netscape 5.x and higher
Opera 5.x and higher
[Back to top]
|
|
Should I send samples to WebImmune and e-mail them to Avert(r) Labs? |
| |
No, you only need to submit the sample to Avert(r) Labs once. The only exception is if WebImmune
prompts you to send to Avert(r) Labs via e-mail. This will usually be the case if the file is over
three megabytes in size.
[Back to top]
|
|
How big of a file can I send WebImmune? |
| |
WebImmune will not allow a sample to be submitted that is greater than three megabytes. If the
sample is greater than three megabytes, then submit the sample via e-mail to Avert(r) Labs.
[Back to top]
|
|
Why does WebImmune tell me "Zero byte file"? |
| |
Their are two causes for this error:
- The file that you uploaded was not large enough to contain any viral code. Therefore there is no reason for the scan to continue.
- When you submit to WebImmune, if your anti-virus scanner detects a virus in the file you are attempting
to upload, it can hinder WebImmune from receiving your file. If you disable your anti-virus product first before uploading
you can avoid this error.
Please be absolutely certain to re-enable the product once the upload is complete.
[Back to top]
|
|
Can I use any type of compression to package a submission to WebImmune? |
| |
There are some compression formats that WebImmune will not accept. We suggest using a PKZip
compatible compression format. Currently WebImmune does not support the advanced encryption
routines available in WinZIP 9.0 when password protecting your ZIP file. If you are submitting
a ZIP file which has been created with WinZIP 9.0, please use the WinZIP 2.0 compatible encryption.
[Back to top]
|
|
Do I have to stay logged in until the scan is complete? |
| |
No, WebImmune will store your results on the submission page, so you can easily come back to it.
[Back to top]
|
|
I received an ALERT.TXT from someone in e-mail? |
|
ALERT.TXT is a notification that McAfee's GroupShield and WebShield products insert into a mail
message when they detect a known or suspected virus. ALERT.TXT is not the infected file. It is
not necessary to submit an ALERT.TXT file to Avert(r) Labs.
[Back to top]
|
|
What does "inconclusive" mean? |
| |
The message response can mean one of several things. It could mean our
automated analysis has flagged the file as containing a new virus or a new variant of a known virus,
but cannot automatically generate a remover for the file. "Inconclusive" could indicate the file is
sent to an Avert(r) Labs Researcher for review. It could also indicate that WebImmune found nothing suspicious
about the file. In either situation, Avert(r) Labs wants to be completely thorough and manually review the file.
WebImmune is an automated system, which means we will not declare a file clean or safe unless
automation is 100% sure.
[Back to top]
|
|
Why do the instructions say what password to use on a ZIP file? How is that secure? |
| |
The purpose of password protecting ZIP files is not for security from the "wrong" people viewing
your file. The purpose of password protecting a zip file is so anti-virus products that run at
the gateway and perimeter of companies and ISP's do not inadvertently clean the sample you are
sending to Avert(r) Labs. If this happens, Avert(r) Labs will not be able to adequately analyze the file.
[Back to top]
|
|
Why can't I submit questions to Avert(r) Labs through WebImmune? |
| |
WebImmune is strictly a resource for submitting files you suspect may be infected with a virus.
If you need a virus related question answered, you should submit your question to
Virus_Research@avertlabs.com.
[Back to top]
|
|
Can I have the file I sent to Avert(r) Labs back? |
| |
No, files sent to Avert(r) Labs will not be returned. Files sent to Avert(r) Labs become the property
of Avert(r) Labs
and cannot be returned. If a particular file you need to send to Avert(r) Labs contains confidential
information, as in a text document or spreadsheet, we suggest removing the confidential information
before submitting the file.
[Back to top]
|
|
How do I submit a sample? |
| |
For instructions on submitting a sample to Avert(r) Labs, visit:
http://vil.nai.com/vil/submit-sample.aspx
[Back to top]
|
|
WebImmune detected a threat. How do I get more information about the threat? |
| |
The McAfee Avert(r) Labs Threat Library has detailed information on where threats come from,
how they get on your system, and how to remove them. In addition to genuine threats, the Threat Library
contains useful information on virus hoaxes. Visit:
http://vil.nai.com/vil/default.aspx
[Back to top]
|
|
Can Avert(r) Labs assist me with product issues? |
| |
Avert(r) Labs is a virus research organization focused on writing signatures to protect users from threats.
Avert(r) Labs does not work with product-related issues. If you need assistance with using
a product to detect and remove a threat or applying an EXTRA.DAT, visit:
Corporate Users go to
http://www.mcafee.com/us/enterprise/support/technical_support/index.html
Home Users go to http://www.mcafeehelp.com/
[Back to top]
|
