McAfee Hijacked Flare 5.1 update

[panda]

I've just downloaded and run the Flare 5.1 update..... and McAfee said it had detected a Trojan, which it then removed.

The file it's objecting to is: SBAPPLOCALE.EXE (C:\Program Files\Madcap Software\Madcap Flare V5\Flare.APP\Resources\Bin\SBapplocale\sbapplocale.exe)

Detection Name: Artemis! 1B0F 1133DE6C

[NealPozner]

We are aware of this issue and assure our customers it is a false-positive identification. We have contacted McAfee to try to resolve the issue.

[panda]

We are aware of this issue and assure our customers it is a false-positive identification. We have contacted McAfee to try to resolve the issue.

Thanks for the reassurance, Neil. Flare of course wouldn't run without it, so I restored it anyway...

[helen]

I had the same issue, bin McAfee if you can. It's the latest DAT update (on the 27th) that apparently triggered it - as when I rolled back to 5.0 it still thought it was a trojan despite it being perfectly happy with it for months. http://forums.madcapsoftware.com/viewto ... =4&t=10049

Great to hear you've contacted McAfee, although I'm not entirely convinced they will care.

[panda]

I had the same issue, bin McAfee if you can. It's the latest DAT update (on the 27th) that apparently triggered it - as when I rolled back to 5.0 it still thought it was a trojan despite it being perfectly happy with it for months. http://forums.madcapsoftware.com/viewto ... =4&t=10049

Great to hear you've contacted McAfee, although I'm not entirely convinced they will care.

Binning not an option - in part because we need to know what it does with our own application. We did have a problem and they did respond positively, though not quite as quickly as we might have wished, and the problem was sorted.

[panda]

We are aware of this issue and assure our customers it is a false-positive identification. We have contacted McAfee to try to resolve the issue.

Neal, started Flare without any problems today, so it looks as though McAfee have dealt with this.

[panda]

Neal, started Flare without any problems today, so it looks as though McAfee have dealt with this.[/quote]

No they haven't...

[Sharpras]

My Ver 5.0.1 starts up, but only after 4.5 minutes and an alert from McAfee that SBAppLocale.exe has been deleted.

Roger

[SteveS]

I, too, have reported this issue to both McAfee and Madcap.

After a suggestion from Madcap Rob, I've been able to get the installation to 'stick'.

First, turn off McAfee. 'course, there isn't an off button. You have to open McAfee, click the Configure accordian tab and select Computer and Files.

McAfee 1.JPG

Next, turn off all the protection (Virus, Spyware, Systemguards, and Script).

Then install the Flare update. That puts a file SBAPPLOCALE.exe in the ...FLARE.APP\RESOURCES\BIN\SBAPPLOCALE directory.

In McAfee, while still on the Configure tab, Select Internet & Network, then click the Advanced... button for the firewall.

Click the Program Permissions link on the Firewall dialog box.

McAfee 2.JPG

Click Add Allowed Program and browse to ... FLARE.APP\RESOURCES\BIN\SBAPPLOCALE/SBAPPLOCALE.exe

Turn all the protection back on and you should have fixed it...

HTH

[Sharpras]

Thanks, SteveS, for the work-around instructions.
Do you know where I can find Flare Update 5.1? The latest I see on the Flare PATCHES page (http://kb.madcapsoftware.com/default_Le ... adCap-Skin ) is 5.0.

Roger

[RamonS]

When you start Flare it should offer you to download any patches.

[panda]

I, too, have reported this issue to both McAfee and Madcap.

After a suggestion from Madcap Rob, I've been able to get the installation to 'stick'.

Turn all the protection back on and you should have fixed it...

HTH

I tried it on my laptop and it's actually made things worse! Now, every time I start Flare, McAfee kidnaps this file - so have to go through the routine of ... start Flare... cancel installation dialogue.... open McAfee, restore file, close McAfee, run Flare.... make coffee while waiting...

However, I thought I'd give it a go on the main computer..... but the file has disappeared entirely. McAfee hasn't quarantined it - it just isn't there. But, and here's the twist.... Flare runs fine....after a minute or two. Not so on the laptop - without that file Flare won't run.

[SteveS]

However, I thought I'd give it a go on the main computer..... but the file has disappeared entirely. McAfee hasn't quarantined it - it just isn't there. But, and here's the twist.... Flare runs fine....after a minute or two. Not so on the laptop - without that file Flare won't run.

That was happening to me, McAfee wanted a sample of the file and I couldn't send it because it wasn't in there.

I must say I'm unimpressed with McAfee, I've got a 3 machine licence and it keeps wanting to install on other machines it can see on the network, but I'm leaving my free virus program on the other machines, it plays much nicer.

[panda]

I must say I'm unimpressed with McAfee, I've got a 3 machine licence and it keeps wanting to install on other machines it can see on the network, but I'm leaving my free virus program on the other machines, it plays much nicer.

I did send them the file when the problem first reared its ugly head and it appears they've done nothing. Like you, I have more than one licence, but I do have a dilemma: is it better to have AV software which is occasionally over-enthusiastic or run the risk that the one that doesn't interfere with any of your programs might actually be missing other stuff too? We also need to know what happens with our own software when it comes up against McAfee.

I do think that as the problem is still on-going, MadCap should be pursuing this - but for all I know they are, and are getting the same level of 'support' that I am!