Skip to main content
A
Angela7
Inspiring
January 30, 2015
Answered

How to remove a virus that is reported to be in the text animation files of Captivate 8

  • January 30, 2015
  • 2 replies
  • 6432 views

The virus protection program ClamAV is reporting a virus Swf.Exploit.CVE_2014_0564-2 exploit. in several of the Captivate program files that are located in the programs/Adobe folder (some of the text animations swf files, interaction files, and widget files- there are several text animation files that are not infected). How can I remove this virus. I found out in other forums that many other people experience the same issue. But I could not find a resolution yet.

The scan reported that the following files were infected:

 

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blade.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blue_Aura.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blurrywave.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Cascade_Dive.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Catapult.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Cloning.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\DePlume.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Elliptical.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fade_In.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Feather.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fillin_Blanks.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flashlight.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flight.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flowright.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fly_Away.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fog_Lifted.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Futbol.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Giftwrap.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Green_Globe.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Gridright.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Hori_Scan.swf: swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\illusion.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Leading_Star.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Light_Passage.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Matador.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Mini_Starburst.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Modflare.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Multi_Wake.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Ornaments.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Paradigm.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Passby.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pastel_Prism.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pivot.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Prismflow.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pythagorean.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Raindrops.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Red_Hot_Skew.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Reflect.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Rotate_Left.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Shufflecards.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sidestep.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Slant_Slide_Blinds.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sliced.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sliding.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Slidingblinds.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Spindle.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Spintop.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Square_Roll.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Starburst.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Stuff_It.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Swingstack.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Take_Two.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Topsy_Turvy.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Tossup.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trailing_Light.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Transition.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trans_Pivot.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trickle_In.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Turnabout.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twinkle.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twinkle_Trail.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twirl_flip.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Typing Text With Sound.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Typing Text.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Wake.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Waltz.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Waveripple.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Whimsy.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Windblown.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Windmill.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Wizard.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Zoomout.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Interactions\Digital Timer.wdgt: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Interactions\hangman.wdgt: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Interactions\hourglass.wdgt: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Interactions\memoryGame.wdgt: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Widgets\emailIcon.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Widgets\pocastIcon.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Widgets\print.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Widgets\videoIcon.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

  C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\Widgets\volumeControl.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

    

  

 

    This topic has been closed for replies.
    Correct answer Angela7

    Here is an update on this issue. Maybe it will help someone else. After many months of working with Adobe support, they finally helped me to remove all viruses from my computer. This included Adobe Captivate cleaning up their Captivate 8 code and removing the Swf.Exploit.CVE_2014_0564-2 virus from their Captivate program files. As my research showed, the danger with this virus is that it seems to be dormant until a visit to a website that activates it and then it can destroy all your data (that terrified me when I read that and I made sure I had lots of backups in the Cloud). I got lucky and it did not get activated.

    As it turns out, it's not only the text animation files but also the widget animation files. Following is the final correspondence with Adobe. I hope the links work too.

    These are the fixed program files that Adobe uploaded for me to access https://www.dropbox.com/sh/cyelu2yvkc0f521/AADRYR3X0n3nM7lmIUNMQokWa?dl=0. However, do not use the "text animations folder", there was a little bug left and they sent me a replacement for the text animations here https://www.dropbox.com/sh/ymen27rrba75mc2/AABwsQjCmxdQHvkSx5Kjybo_a?dl=0

    These are the steps they had me take and it worked for me.

     

    1. Download and extract the SWF Animations from the TextAnimations folder
    2. Take a back-up of the old animations which are located at “<Captivate Installation Dir>\Gallery\TextAnimations\” and “<Captivate Installation Dir>\Gallery\Widgets\”
    3. Replace the existing animations with the new ones in the same folder
    4. Open your Captivate project and delete all the old animations which were inserted, and then close Captivate.
    5. Even though the animations have been deleted, Captivate still holds them as internal resources. Hence, the following tool must be run :

      1. Download and extract the files in the CCFix folder(Win 32-bit or Win 64-bit)

      2. Place AdobeCaptivateFix.exe, CleanResources.bat and CPProjectsNSlides.dll in the Installation folder of Captivate 8.1
      3. Run CleanResources.bat
      4. Captivate opens in a special mode, where you get a file browser.
      5. Choose the files to be fixed and proceed. The fixed cptx files will be placed in the same location as the original. A “_fixed” suffix is added to the new cptx.
      6. Captivate automatically exits after this.Your file is now fixed.
    6. Now open the fixed project and replace all the deleted text animations with the new ones.

    I scanned my computer with ClamWin again and it still found the virus. This time it was in the Captivate Cache. Maybe it was from fixing the old files. I deleted all Captivate Cache files and I no longer got a positive Swf.Exploit.CVE_2014_0564-2 found report from ClamWin. YIPPPIEEEEE!

    It took almost 200 hours of effort to repair infected files. What I don't understand is how Adobe can have a virus in their Captivate program files and then make us fix the infected files manually. I have asked them to write a program to fix infected files (how hard can that be to automate the steps they gave me?). I never got a response.  That seems really sad.

    2 replies

    A
    Angela7AuthorCorrect answer
    Inspiring
    April 1, 2015

    Here is an update on this issue. Maybe it will help someone else. After many months of working with Adobe support, they finally helped me to remove all viruses from my computer. This included Adobe Captivate cleaning up their Captivate 8 code and removing the Swf.Exploit.CVE_2014_0564-2 virus from their Captivate program files. As my research showed, the danger with this virus is that it seems to be dormant until a visit to a website that activates it and then it can destroy all your data (that terrified me when I read that and I made sure I had lots of backups in the Cloud). I got lucky and it did not get activated.

    As it turns out, it's not only the text animation files but also the widget animation files. Following is the final correspondence with Adobe. I hope the links work too.

    These are the fixed program files that Adobe uploaded for me to access https://www.dropbox.com/sh/cyelu2yvkc0f521/AADRYR3X0n3nM7lmIUNMQokWa?dl=0. However, do not use the "text animations folder", there was a little bug left and they sent me a replacement for the text animations here https://www.dropbox.com/sh/ymen27rrba75mc2/AABwsQjCmxdQHvkSx5Kjybo_a?dl=0

    These are the steps they had me take and it worked for me.

     

    1. Download and extract the SWF Animations from the TextAnimations folder
    2. Take a back-up of the old animations which are located at “<Captivate Installation Dir>\Gallery\TextAnimations\” and “<Captivate Installation Dir>\Gallery\Widgets\”
    3. Replace the existing animations with the new ones in the same folder
    4. Open your Captivate project and delete all the old animations which were inserted, and then close Captivate.
    5. Even though the animations have been deleted, Captivate still holds them as internal resources. Hence, the following tool must be run :

      1. Download and extract the files in the CCFix folder(Win 32-bit or Win 64-bit)

      2. Place AdobeCaptivateFix.exe, CleanResources.bat and CPProjectsNSlides.dll in the Installation folder of Captivate 8.1
      3. Run CleanResources.bat
      4. Captivate opens in a special mode, where you get a file browser.
      5. Choose the files to be fixed and proceed. The fixed cptx files will be placed in the same location as the original. A “_fixed” suffix is added to the new cptx.
      6. Captivate automatically exits after this.Your file is now fixed.
    6. Now open the fixed project and replace all the deleted text animations with the new ones.

    I scanned my computer with ClamWin again and it still found the virus. This time it was in the Captivate Cache. Maybe it was from fixing the old files. I deleted all Captivate Cache files and I no longer got a positive Swf.Exploit.CVE_2014_0564-2 found report from ClamWin. YIPPPIEEEEE!

    It took almost 200 hours of effort to repair infected files. What I don't understand is how Adobe can have a virus in their Captivate program files and then make us fix the infected files manually. I have asked them to write a program to fix infected files (how hard can that be to automate the steps they gave me?). I never got a response.  That seems really sad.

      trainingSFMC
      trainingSFMC
      Participant
      February 11, 2016

      I am having a similar issue since Dec 2015 and am on a Mac having similar issue ClamXav shows the following issue.

      Volumes/Documents/2016 ORCCs/Safe Medication Practice/Safe Medication Practice.zip: Swf.Exploit.CVE_2015_0323 FOUND

      A
      Anonymous
      January 31, 2015

      Same issue on ClamX AV on Mac with Captivate 8.

      Any outside experts or Adobe care to comment on the apparent virus infestation?

      False alarm or genuine security concern? Either is likely given past challenges facing Adobe.

      A
      Angela7Author
      Inspiring
      February 8, 2015

      Would someone from the Captivate staff please respond to our inquiry? I cannot upload anything to Creative Cloud because CC reports a virus in the Captivate files. Even if it is a false alarm, we would need to know. I have a thread in the CC forum since several weeks but cannot get any resolution there either. It's just such a joy to work with Adobe support.

      Lilybiri
      Lilybiri
      Legend
      February 9, 2015

      Angela, please reach out to the Technical support, this is a users forum. I never heard about this 'virus', and I am around since many years daily. Or try to log a bug?

      Terms & ConditionsAccessibility statement
      Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices