Unable to Load Captivate files to Creative Cloud

Report · Dec 11, 2014

We have several captivate files that that for whatever reason we are unable to upload to creative cloud. We have tried from both Macs and PCs and receive the same message. "A virus was detected in Filename. This file will not be uploaded." They function in every respect in both cp7 and cp8. We have scanned them with mac and pc virus scanners. I can remove all the contents of the file and it still fails.

If I copy out all the slides to a new file, the file loads to cc. There is a lot of master template and advanced actions that would be lost if we have to port out the slides. This is not a great solution.

Can anyone suggest possible causes or remedies? My hope this there is some resource missing or corrupted in the file structure and that can be repaired.

Thanks for your attention.

Report · Jan 26, 2015

bajie,

In my research about the virus the only thing I found so far is that someone claims that the Adobe Captivate 8 trial installation did this.

Warner, Is this possible? I switched to another computer just recently and downloaded Cap 8 trial so that I could register my Cap8 subscription.

Report · Jan 26, 2015

@Angela, i downloaded Cap 8 trial so that I could register my Cap8 subscription, same as you, but i did it back in October when it came out. I have not installed the trail since my issue started last December.

Report · Jan 26, 2015

I am not sure whether our files are were create using a copy of the trial. We too have to download a trial to reinstall CP (thought it was only us that couldn't figure out how to download CP as a paid subscriber - seems a tad insane but that is for another thread)

I have chatted with Symantec - there power erasure product did not detect anything in the infected files.

We also tested the files with Windows Defender which lists the ability to detect Swf.Exploit.CVE_2014_0564-2. Neither detect the four files we have as infected.

We have tested the files for viruses on Windows and Macs. Neither show any issue with the files.

@ Warner, what product was used to detect the virus. And if it was detected, could it be removed?

@ CP Product Manager? As we do not have any third party plugins for CP. How is it possible that a file could get infected generated from CP. How can we be assured that our CP files won't continue to be corrupted.

Regards, Mike

Report · Jan 26, 2015

Warner,

I involved a developer who used binary elimination to isolate where the virus started to appear. We created a new .cptx file and saved it to the cloud with no problem (no virus reported). Next, we created a new .cptx file using my template, saved that with no problem. By adding sections of one of the files that has the virus, we identified that it only shows up when inserting a slide with certain text animations (e.g., we tested deplume, feather, and flashlight animation effect) and when saving a file with those animations to the cloud, the virus was reported for each. When we used the text animation effects Architect_unveil and Aquarium exclusively, the upload worked fine and no virus was reported.

The next test we did was to eliminate all text animations from all slides and save the file to the cloud which worked fine (no virus reported).

Therefore, it appears that some of the text animations that Adobe Captivate 8 provides are the ones that are infected with the virus. Since these files are part of Adobe Captivate 8, how can I fix that?

Report · Jan 27, 2015

Hi,

We are currently working hard with other teams within Adobe to solve this and unblock everyone who has been effected by this issue. I hope to have an update for you soon.

Thanks

Warner

Report · Jan 27, 2015

Warner,

The only virus detection program that I found that recognizes this virus is ClamWin (Free Antivirus for Windows - Open source GPL virus scanner) I used it to scan the text animation swf files ( installed with my Adobe Captivate 8 64 bit program files. Below is the report. I hope this helps someone at Adobe to find and fix the issue as soon as possible. Since I now know there is a virus on my system, I really need a fix as soon as possible. What I read about this virus is that "it will be used as a backdoor to spread more malware, malicious, and other Trojan virus... usually monitors internet browsing activity and collects confidential information of the victims and then sends them to Cybercriminals...."

Here are the results of my program directory scan. As you can see not all text animations are impacted but many are.

Scan Started Tue Jan 27 07:36:59 2015

-------------------------------------------------------------------------------

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blade.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blue_Aura.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Blurrywave.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Cascade_Dive.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Catapult.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Cloning.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\DePlume.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Elliptical.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fade_In.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Feather.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fillin_Blanks.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flashlight.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flight.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Flowright.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fly_Away.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Fog_Lifted.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Futbol.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Giftwrap.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Green_Globe.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Gridright.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Hori_Scan.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\illusion.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Leading_Star.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Light_Passage.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Matador.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Mini_Starburst.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Modflare.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Multi_Wake.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Ornaments.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Paradigm.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Passby.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pastel_Prism.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pivot.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Prismflow.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Pythagorean.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Raindrops.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Red_Hot_Skew.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Reflect.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Rotate_Left.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Shufflecards.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sidestep.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Slant_Slide_Blinds.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sliced.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Sliding.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Slidingblinds.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Spindle.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Spintop.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Square_Roll.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Starburst.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Stuff_It.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Swingstack.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Take_Two.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Topsy_Turvy.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Tossup.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trailing_Light.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Transition.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trans_Pivot.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Trickle_In.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Turnabout.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twinkle.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twinkle_Trail.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Twirl_flip.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Typing Text With Sound.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Typing Text.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Wake.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Waltz.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Waveripple.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Whimsy.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Windblown.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Windmill.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Wizard.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

C:\Program Files\Adobe\Adobe Captivate 8 x64\Gallery\TextAnimations\Zoomout.swf: Swf.Exploit.CVE_2014_0564-2 FOUND

----------- SCAN SUMMARY -----------

Known viruses: 3733799

Engine version: 0.98.5

Scanned directories: 1

Scanned files: 85

Infected files: 72

Data scanned: 11.62 MB

Data read: 5.65 MB (ratio 2.06:1)

Time: 7.050 sec (0 m 7 s)

--------------------------------------

Completed

--------------------------------------

Report · Jan 29, 2015

Warner,

Is there any resolution yet? I currently have the cptx files quarantined but this is not a solution. We are a training business and we are creating new cptx files all the time. If the virus is inside Captivate (the text animation swf files) what could we do? Do your developers have some quick fix for us maybe?

Report · Jan 29, 2015

Angela, I realize this is just a workaround, but would it be possible to zip/7-zip the files, and then have the user unzip them upon download? I don't know if CC is scanning archives, so that might be allowed. (This would at least allow you to share files until the issue is fixed).

Report · Jan 29, 2015

Christopher, I do not want to do that because, now that I know it is a virus, I do not want to send virus infected files to anyone. This virus is supposed to do some major damage to personal data. I need a way to remove that virus from the Adobe Captivate 8 program and from my infected files. I have the feeling you are addressing the problem from the Creative Cloud perspective (meaning the non-functioning up- and download). I am more concerned about the virus itself now. Do I need to talk to someone else about the virus removal in the text animation files?

Report · Jan 29, 2015

Hi Christopher. The zip version of the file does not upload to creative cloud. It must be scanned and rejected.

Report · Jan 29, 2015

Thanks for checking. My instinct tells me this is a false positive. Since Angela verified that only Clam AV detected it and none other, that tells me that Clam AV is wrong. This happens a lot; antivirus programs rely on algorithms and they are sometimes faulty. That is why it's always good to a get a second opinion. I usually do a manual scan of any suspect file with the online scanner link I sent and on my desktop using MalwareBytes, and if that finds nothing, I take that as the final word.

Report · Jan 29, 2015

I also believe that these are false positives but that doesn't get them on CC. The files we have were created with Adobe Cap7 and one of many using the same template. They were never opened with CP8 so they could not have been infected via that route. Some of these files were on even on CC and were taken off for space. When adding the back we got the rejection. The files had not even been opened in the intervening time period.

One thing I tried with the files, was to delete all the slides except 1 blank - file was rejected. Copy all slides out to a new project (destroys all the linking an breaks the project) and tried loading that. The file is accepted by CC. So there must be something in the shell of these files. Again we have 43 course that have been updated over the last year and only certain ones get rejected.

I cannot find what these files have in common that the others do not as they all have the same master template and are developed the same way.

Report · Jan 29, 2015

Hi Angela,

To get attention to the virus issue in the text animation files, you should post directly to the Adobe Captivate forum Adobe Captivate. I'm not sure if Warner or others in this Creative Cloud thread have reached out to them already.

Thanks,
Elba

Report · Jan 30, 2015

Thanks Elba, that's a great idea. I will do that.

Report · Feb 08, 2015

Warner,

Another week has passed without hearing from Adobe. Is the issue resolved?

Report · Feb 09, 2015

Hi,

We have contacted the Adobe Captivate team for more information on this issue and how to help the customer effected. As I am not customer support I don't monitor the forums or these issues all day. I hope to have more information for you soon however.

Thanks

Warner

Report · Jan 27, 2015

Warner,

The only virus detection program that I found that recognizes this virus is ClamWin ( I removed the link because the comment was not published but you can find it easily online) I used it to scan the text animation swf files ( installed with my Adobe Captivate 8 64 bit program files. Below is the report. I hope this helps someone at Adobe to find and fix the issue as soon as possible. Since I now know there is a virus on my system, I really need a fix as soon as possible. What I read about this virus is that "it will be used as a backdoor to spread more malware, malicious, and other Trojan virus... usually monitors internet browsing activity and collects confidential information of the victims and then sends them to Cybercriminals...."