Skip to main content
isaiahb41795372
Participating Frequently
September 2, 2017
Question

Swf.exploit virus detected

  • September 2, 2017
  • 1 reply
  • 718 views

Hi all!

So my latest blocker has been as of yesterday afternoon trying to upload a published file to SCORM Cloud to start the testing process and it gets flagged with a virus detected.  SCORM Cloud rep has advised the virus flagged was Swf.exploit.CVE_2016_0995_1 - they are going to send to their developers and see what they have to say. 

In all the years I have been using captivate for learning development I have NEVER come across this, but did find a similar thread on this forum -> How to remove a virus that is reported to be in the text animation files of Captivate 8

So following that, I have raised a ticket through the Adobe Bug/feature survey but I need this resolved ASAP.  I'm a little anxious as the previous thread infers it took months for Adobe Support to provide a manual work around for the users specific version of Captivate 8.  The dropbox links on this thread no longer work so i can't follow the lot of steps provided there, but I have done the following:

  • restarted the application
  • restarted the computer
  • republished the file
  • reserved the file using different file name and republished
  • Virus scanned HD and a few other published SWFs from the same time period were also flagged with same virus as listed above. deleted these found files, emptied trash.
  • cleared out cache for both browser and captivate.
  • restarted application and computer again and then re-ran the virus scanner.
  • tried re-publishing and uploading and still go the error message on SCORM cloud. 
  • uninstalled captivate 9. 
  • reinstalled captivate and republished...still same error message on SCORM cloud.
  • tried an older published file (months ago which passed testing and is currently in LMS) get the same error message on SCORM cloud!

I was publishing using Captivate 9 Version 9.0.2.437.

I now have Captivate 2017 and still get the same error message.

If Adobe is reading can  you please help asap! Anyone else experienced this recently and can help please reach out. Thanks heaps in advance for your time and assistance.

This topic has been closed for replies.

1 reply

Adobe Employee
September 4, 2017

Hi,

Can you try Publishing the file from another machine?? This could be a problem from your machine. Please try this out and let me know.

Thanks,

Charu

isaiahb41795372
Participating Frequently
September 6, 2017

Hi @Charushree,

Oh, I forgot to mention I have also tried publishing the same files on two different machines available at work and they yielded the same results unfortunately.  

I have since contacted Adobe Support with this and raised it in the bug survey that RodWard previously mentioned to me.  The Adobe Support person I was connected with acknowledged this is an issue but didn't provide any information regarding how to avoid or why it possibly has happened to me now after almost 10 years of me using capivate! (part of me has become used to not trying to understand these types of anomalies in Captivate, but the bigger part of me feels there should always be an answer!) I even supplied them links to a couple of other threads on this forum where users on previous captivate versions or programs that have SWF output i.e. Encore, have experienced the same thing and how those Adobe Support people provided resolutions by assisting them with clean up files etc.  Their response was  "Captivate is a dynamic program" and even if I make a basic change on one slide, it can have down stream impacts on your project.  I definitely am aware of this to a degree after using captivate for this long now, but as I hope you can understand, didn't feel confident or satisfied with this response or the subsequent approach to rectify my virus found dilemma.

While the Adobe Support person was excellent to provide immediate support by taking my file and having a look and identifying that some how one slide had become corrupted in one of the projects, they didn't provide confidence that this won't happen again, that I should use the latest captivate 2017.  I explained that through the  process of trying to problem solve this before I contacted Adobe, I did download Captivate 2017 and still got the same result!  In the end, they just recommended that in future if I come across this issue again, i just have to try breaking down the project and publishing at each step to try and isolate the offending slide/s.  Im sure a lot of us captivate users have had to take this approach to determine issues from time to time and know how painful and time consuming this can be, but necessary in some instances.  But for something that seems to be lying dormant in the captivate application I would hope that this could have been avoided.  Out of the four modules that got affected on the same day, this approach has worked on two of them.  On the other two, it doesn't matter which slides I have removed, or even copying and pasting various slides to another blank new project, I still get the error   So alas I am rebuilding and just hope it doesn't happen again.

This is after running a virus scan, removing any SWF files that were identified as infected with the SWF.exploit, which as just the SWFs as part of the SCORM packages for these files.

On the SCORM Cloud front, when I asked if they could help narrow down what the issue was, their developers have replied this morning to me and advised that they are white listing this virus detection and this update will be live in the platform over the next couple of days...so I guess this is a little re-assuring that it's not that bad of a 'corruption', however, our LMS wouldn't upload the same files that SCORM Cloud had flagged as being infected!  So this is a conversation I'm trying to get our LMS provider to understand at present...fun times!

In a nutshell I have been very grateful for both SCORM Cloud and the Adobe rep's responsiveness, just the solution/s still seem a bit sketchy to me and like a band aid fix.  But hopefully this will help somebody else who has the same issue.