Page 1 of 1

Virus Alert: FMFirefoxCE-33.0.1

Posted: Wed Dec 03, 2014 8:08 am
by MezgaGeza
Just installed FMFirefoxCE-33.0.1-hu.msi, then SEP blocked:
Risk,Filename,Original Location,Status,Date
"Suspicious.Cloud","updater.exe","C:\Program Files (x86)\Mozilla Firefox\","Infected","2014.12.03. 13:58"

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Wed Dec 03, 2014 5:43 pm
by GHopkins
I got this also. I went to upgrade to 32.03 and the updater got quarantined. Tried 33.0 and had the same result. This must be a symantec definition problem. I ran a test on a machine that had not been on for 3 months and it installed fine. Of course it updated before the endpoint definitions got updated. Any advise?

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Tue Dec 09, 2014 5:44 am
by MHX
We whitelisted the updater.exe (with hashsum value) in Symantec, so it will not get blocked anymore.

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Tue Dec 09, 2014 8:56 pm
by GHopkins
I had to make an exception in the SEP server for updater.exe in directory C:\Program Files (x86)\Mozilla Firefox. Then you can push the site wide install through GPO. Good luck all.
I have some hope for the future that there could be a signed updater.exe for the future. Just a hope.

P.S. don't forget to take out the exception after the install push.

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Wed Dec 10, 2014 4:42 pm
by DraconPern
If I create a package with signed .exe, can you all test it out?

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Fri Dec 12, 2014 4:49 am
by MezgaGeza
DraconPern wrote:If I create a package with signed .exe, can you all test it out?
Of course.

Re: Virus Alert: FMFirefoxCE-33.0.1

Posted: Thu Dec 18, 2014 7:42 pm
by GHopkins
Rats,
I just pushed the CE 33.1.1 with the exception in place. I would love to test a signed updater.exe if any new version rolls out. When will CE34.0 roll out?