[#MISC-427] Adware.CPush -Symantec quarantines Second Life 1-18-0-125 Voice First Look Setup.exe

4. Second Life Misc Issues - MISC

Adware.CPush -Symantec quarantines Second Life 1-18-0-125 Voice First Look Setup.exe

Created: 15/Jul/07 10:14 PM Updated: 20/Jul/07 08:30 AM

Component/s:

None

Affects Version/s:

None

Fix Version/s:

None

Time Tracking:

Not Specified

File Attachments:

None

Image Attachments:

1. adware_SL.JPG
(55 kB)

2. Second Life claimed as Adware.CPush by Norton Anti-Virus 2007.jpg
(341 kB)

Environment:

Windows XP

Issue Links:

Relates

This issue is related to by:

~~VWR-1596~~ Had to turn off virus firewall to install Second Life First Look

Source Version:	Second Life 1-18-0-125 Voice First Look Setup.exe
Linden Lab Issue ID:	SL-48664

Description

« Hide

Symantec quarantines Second Life 1-18-0-125 Voice First Look Setup.exe.

refer Symantec.com > Security Response > Adware.CPush
http://www.symantec.com/security_response/writeup.jsp?docid=2007-031215-0744-99&tabid=1

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Nexeus Fatale added a comment - 16/Jul/07 12:21 AM

This actually also happens on the new viewer, the 1.18.06 client. (see attached picture).

After a few scans, Norton Anti-Virus 2007 claims that c:\program files\secondlife\uninst.exe is Adware.CPush (reference: http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2007-031215-0744-99)

[ Permlink | « Hide ]

Metatronis Enoch added a comment - 16/Jul/07 10:34 AM

I have experience the exact same problem when allowing the Second Life client to automatically upgrade itself. I am using the corporate edition of Symantec Antivirus V10.1.5.5. This is raising privacy concerns with our corporate executives that Second Life may be pushing adware onto our machines.

[ Permlink | « Hide ]

Torley Linden added a comment - 18/Jul/07 08:10 AM

Importing internally and asking our devs, thanks for the heads-up!

[ Permlink | « Hide ]

Celierra Darling added a comment - 18/Jul/07 05:35 PM

This happened to me after installation - to be specific, it marked the uninstaller (or, at least, the file involved was named something like uninst.exe).

[ Permlink | « Hide ]

Torley Linden added a comment - 19/Jul/07 06:25 AM

Upping priority to match internally, we're investigating this.

[ Permlink | « Hide ]

Torley Linden added a comment - 20/Jul/07 08:30 AM

Here's what we found out: "Norton Antivirus definition file v2007.07.15.002 appeared to contain a false positive for Adware.Cpush which was corrected in the next definition release (v2007.07.16.021)" Please upgrade to the new definition file and try again.