Second Life Forums Archive - Virus Found, While In-World

Walker Moore

Fоrum Unregular

Join date: 14 May 2006

Posts: 1,458

10-09-2007 09:04

Well this is a first for me. There I was, aimlessly flying around, when Avast's air raid siren blasted through my headset causing me to nearly crap myself.

I'm assuming this is nothing but a JPeG 2000 virus in a texture that would only present a problem if opened in IE - of which there is no chance because it's safely tucked away in SL's cache.

How off the mark is that assumption?

Could be a false positive I suppose.

_____________________

It's only a forum, no one dies.

Chris Norse

Loud Arrogant Redneck

Join date: 1 Oct 2006

Posts: 5,735

10-09-2007 09:10

Were you using the standard viewer or a 3rd party one?

_____________________

I'm going to pick a fight
William Wallace, Braveheart

“Rules are mostly made to be broken and are too often for the lazy to hide behind”
Douglas MacArthur

FULL

Viktoria Dovgal

…

Join date: 29 Jul 2007

Posts: 3,593

10-09-2007 09:11

Yes, false positive in the virus checker, see https://jira.secondlife.com/browse/VWR-2007 - the filename mentioned in your dialog box is even one of the ones listed there.

Walker Moore

Fоrum Unregular

Join date: 14 May 2006

Posts: 1,458

10-09-2007 09:16

Grah! Why didn't I think of checking Jira first? Thanks Viktoria.

Standard viewer by the way Chris. I've isolated it to a single texture in a club and am now debating whether I should inform the owner.

Maybe she has a worm on her system? (Seems unlikely, but the Jira entry seems speculative so I wouldn't rule it out.)
Maybe she would like to know if her textures are triggering an air raid siren on every customer's machine with Avast installed.
Or maybe she would be annoyed at my contacting her.

_____________________

It's only a forum, no one dies.

Meade Paravane

Hedgehog

Join date: 21 Nov 2006

Posts: 4,845

10-09-2007 09:19

From: Walker Moore

...only present a problem if opened in IE

From the JIRA link Viktoria provided, it sounds like this is a false positive. Something about that texture just happens to match the signature of the virus but there's not really any virus there..

Million monkeys, million typewriters.

_____________________

Tired of shouting clubs and lucky chairs? Vote for llParcelSay!!!
- Go here: http://jira.secondlife.com/browse/SVC-1224
- If you see "if you were logged in.." on the left, click it and log in
- Click the "Vote for it" link on the left

Walker Moore

Fоrum Unregular

Join date: 14 May 2006

Posts: 1,458

10-09-2007 09:21

OK. I didn't notice that about the filename. I think Viktoria edited it in afterwards. I won't bother the owner.

Thanks. =)

_____________________

It's only a forum, no one dies.

Virus Found, While In-World
Walker Moore Fоrum Unregular Join date: 14 May 2006 Posts: 1,458	10-09-2007 09:04 Well this is a first for me. There I was, aimlessly flying around, when Avast's air raid siren blasted through my headset causing me to nearly crap myself. I'm assuming this is nothing but a JPeG 2000 virus in a texture that would only present a problem if opened in IE - of which there is no chance because it's safely tucked away in SL's cache. How off the mark is that assumption? Could be a false positive I suppose. _____________________ It's only a forum, no one dies.
Chris Norse Loud Arrogant Redneck Join date: 1 Oct 2006 Posts: 5,735	10-09-2007 09:10 Were you using the standard viewer or a 3rd party one? _____________________ I'm going to pick a fight William Wallace, Braveheart “Rules are mostly made to be broken and are too often for the lazy to hide behind” Douglas MacArthur FULL
Viktoria Dovgal … Join date: 29 Jul 2007 Posts: 3,593	10-09-2007 09:11 Yes, false positive in the virus checker, see https://jira.secondlife.com/browse/VWR-2007 - the filename mentioned in your dialog box is even one of the ones listed there.
Walker Moore Fоrum Unregular Join date: 14 May 2006 Posts: 1,458	10-09-2007 09:16 Grah! Why didn't I think of checking Jira first? Thanks Viktoria. Standard viewer by the way Chris. I've isolated it to a single texture in a club and am now debating whether I should inform the owner. Maybe she has a worm on her system? (Seems unlikely, but the Jira entry seems speculative so I wouldn't rule it out.) Maybe she would like to know if her textures are triggering an air raid siren on every customer's machine with Avast installed. Or maybe she would be annoyed at my contacting her. _____________________ It's only a forum, no one dies.
Meade Paravane Hedgehog Join date: 21 Nov 2006 Posts: 4,845	10-09-2007 09:19 From: Walker Moore ...only present a problem if opened in IE From the JIRA link Viktoria provided, it sounds like this is a false positive. Something about that texture just happens to match the signature of the virus but there's not really any virus there.. Million monkeys, million typewriters. _____________________ Tired of shouting clubs and lucky chairs? Vote for llParcelSay!!! - Go here: http://jira.secondlife.com/browse/SVC-1224 - If you see "if you were logged in.." on the left, click it and log in - Click the "Vote for it" link on the left
Walker Moore Fоrum Unregular Join date: 14 May 2006 Posts: 1,458	10-09-2007 09:21 OK. I didn't notice that about the filename. I think Viktoria edited it in afterwards. I won't bother the owner. Thanks. =) _____________________ It's only a forum, no one dies.

Welcome to the Second Life Forums Archive

Virus Found, While In-World