Virus Alert: FMFirefoxCE-33.0.1

Post Reply
MezgaGeza
Posts: 2
Joined: Wed Dec 03, 2014 8:04 am

Virus Alert: FMFirefoxCE-33.0.1

Post by MezgaGeza » Wed Dec 03, 2014 8:08 am

Just installed FMFirefoxCE-33.0.1-hu.msi, then SEP blocked:
Risk,Filename,Original Location,Status,Date
"Suspicious.Cloud","updater.exe","C:\Program Files (x86)\Mozilla Firefox\","Infected","2014.12.03. 13:58"

GHopkins
Posts: 4
Joined: Wed Dec 03, 2014 5:19 pm

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by GHopkins » Wed Dec 03, 2014 5:43 pm

I got this also. I went to upgrade to 32.03 and the updater got quarantined. Tried 33.0 and had the same result. This must be a symantec definition problem. I ran a test on a machine that had not been on for 3 months and it installed fine. Of course it updated before the endpoint definitions got updated. Any advise?

MHX
Posts: 31
Joined: Thu Oct 06, 2011 1:55 am

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by MHX » Tue Dec 09, 2014 5:44 am

We whitelisted the updater.exe (with hashsum value) in Symantec, so it will not get blocked anymore.

GHopkins
Posts: 4
Joined: Wed Dec 03, 2014 5:19 pm

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by GHopkins » Tue Dec 09, 2014 8:56 pm

I had to make an exception in the SEP server for updater.exe in directory C:\Program Files (x86)\Mozilla Firefox. Then you can push the site wide install through GPO. Good luck all.
I have some hope for the future that there could be a signed updater.exe for the future. Just a hope.

P.S. don't forget to take out the exception after the install push.

User avatar
DraconPern
Site Admin
Posts: 1218
Joined: Thu Oct 30, 2003 11:47 pm
Location: Texas
Contact:

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by DraconPern » Wed Dec 10, 2014 4:42 pm

If I create a package with signed .exe, can you all test it out?
FrontMotion Lead Developer

MezgaGeza
Posts: 2
Joined: Wed Dec 03, 2014 8:04 am

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by MezgaGeza » Fri Dec 12, 2014 4:49 am

DraconPern wrote:If I create a package with signed .exe, can you all test it out?
Of course.

GHopkins
Posts: 4
Joined: Wed Dec 03, 2014 5:19 pm

Re: Virus Alert: FMFirefoxCE-33.0.1

Post by GHopkins » Thu Dec 18, 2014 7:42 pm

Rats,
I just pushed the CE 33.1.1 with the exception in place. I would love to test a signed updater.exe if any new version rolls out. When will CE34.0 roll out?

Post Reply