Monitor one installation issue when McAfee virusscan is used

This posting only applies to users running McAfee anti virusscan (all flavours). Users using other anti virus software (non McAfee) can skip reading this post.

Description of the problem

McAfee Virusscan flags an executable (Malerter.exe) contained in the Monitor one installation file as a Trojan. This is definitely a "false positive". Monitor one DOES NOT contain any malware, trojan or virus!!

Explanation

Monitor one provides the option to send alert and/or warning messages to a mail-server for further distribution. It does so using the small program Malerter.exe (Mail alerter). This small program is an in-house FineConnection development and is included in the Monitor one setup file by default. Malerter.exe is invoked/started by the Monitor one main program (monitor1.exe) in case a serious event occurs and sends the alert messages to port 25 of a configured mail- or smpt-relay server.

During installation, the Monitor one setup program unzips the contents of the installation file to temporary files in a temporary directory and after that installs them the Program Files directory. During one of these steps, McAfee virusscan flags the file Malerter.exe as a Trojan.

Workaround

There's only one workaround! Disable McAfee OAS (On-Access Scanning) before Monitor one installation, run Monitor one setup, add an exclusion for Malerter.exe and enable OAS again.

To disable OAS follow these steps:

  1. Right-click the McAfee quick launch icon on the taskbar and choose "VirusScan Console".
  2. Right-click "Access Protection" and select "Properties".
  3. On the "Access Protection" tab, uncheck "Prevent McAfee services from being stopped".
  4. Stop the McAfee McShield service (My Computer->Manage->Services and Applications->Services)

To add an scan exclusion for Malerter.exe:

  1. Right-click the McAfee quick launch icon on the taskbar and select "On-Access Scan properties"
  2. Click "All Processes"
  3. Choose the "Detection" tab
  4. Click "Exclusions"
  5. Add the file "c:\Program Files\FineConnection\Monitor one\Malerter.exe" to the exclusions list.

What you also need to know

In order to prevent "Mass mailing worms from sending spam", McShield also blocks outgoing port 25. If you want to use Malerter.exe to send alert and/or warning messages through email, you also need to permit the use of port 25. Follow the steps described below:

  1. Right-click the McAfee quick launch icon on the taskbar and choose "VirusScan Console".
  2. Right-click "Access Protection" and select "Properties".
  3. In the right pane uncheck "Prevent mass mailing...."

Sorry for the inconvenience! We're in the process of finding a better workaround with McAfee.