SWFObject 1.5 & AVG

[Brett]

Good morning all,

As of this morning an update to Grisoft's AVG virus scanner reports
SWFObject (1.5) as containing a "Downloader.Generic_c.ACX" Trojan
Horse. I assume (I've gone through the code and it all seems solid)
that AVG have misinformation on this one, however many of our websites
now flag up a virus alert when Flash isn't installed for SWFObject
which is quite a serious cause for concern (for our clients and their
customers)

I repeat the virus alert message only appears when SWFObject is used
but the Flash player is not installed (however clicking the
SWFObject.js file within Windows Explorer also fires up the virus
warning)

Does anybody else get this and has anybody got any advice (other than
going through all of our sites and re-installing SWFObject 2 - which
is impractical)?

Many thanks,

Brett

[Aran Rhee]

Brett

I don't use AGV so I can't verify, but it would make sense to contact
the AGV team to see what can be done.

Cheers,
Aran

Sent from my iPhone

[renata coutinho]

Hi Brett,

I have the same problem also. Please just in case you find a solution
for this problem, could you post here the solution or send me a
mensage?
email: rena...@gmail.com

thanks a lot:)

Renata.

[Aran Rhee]

I have submitted a support email / request to AVG this afternoon.

"-----------------------------------------------------------------------
This message has been automatically generated, please do NOT reply
-----------------------------------------------------------------------

Dear valued client,

Our system has created a new e-mail request ticket for your inquiry with the
subject:

"AVG false trojan warning potentially affecting 100,000's of web pages which
embed Flash - Need AVG engineer follow up!"

The new ticket has been assigned with the following ticket ID:

[#XYS-XXXXX-XXX]"

I spoke to Australian support who are supposedly going to pass it up to the
US engineers. We'll see if that happens...

I don't know what else I can do presently, as I am not a user of AVG. I
understand that you can do a support request from within the app itself if
you have the paid version. You might also want to submit a request yourself.
I was also told that AVG log all reports of viruses etc, so if they start
seeing large amounts of Downloader.Generic_c.ACX hits coming up, that they
are likely to investigate (but I wouldn't hold my breath on that)

Aran

[Brett]

This is quite a major problem - I don't particularly like the idea of
my clients' sites displaying a virus download warning yet I have too
many sites and too little time to change it to an alternative to
SWFObject.

I will also post a message to AVG and I would recommend that anybody
else who uses SWFObject do the same.

Does anybody know of a good alternative to SWFObject? (for plan B)

Brett

[Bobby]

Brett, SWFObject 1.5 has been deprecated, so SWFObject 2 would be plan
B. Can you verify if the issue occurs with SWFObjecy 2+ (static and
dynamic publishing) too?

[Brett]

It would seem like a new update from AVG this morning now doesn't list
SWFObject 1.5 as a virus - panic over!

phew.