Possibly they are just doing a pattern match that matches against  
us.  We generate 'more sophisticated' code that the flex compiler, so  
it seems plausible that a naive pattern matcher might incorrectly  
flag our code.

If there is any way we can get the actual pattern they are looking  
for that would help.  Or perhaps they could tell us what in clockblox  
looks suspicious and we could disassemble that and show them that it  
is not.

On 2006-03-14 18:11 EST, Jim Grandy wrote:

> McAfee added rules to check for the "Exploit-SWF" trojan last  
> Wednesday. They are firing against OpenLaszlo-compiled code.
>
> I've got an email in to McAfee about this now, and I'm working with  
> Mark Davis to see what we can find out about it.
>
> Up to this thread, we've only heard reports of it targeting  
> clockblox, which is run against LPS 2.1.2 and targets Flash 5. It's  
> more worrying if McAfee is triggering on something like LFC6.lzl.
>
> I'll post something on the forum thread.
>
> jim
>
> On Mar 14, 2006, at 2:06 PM, Henry Minsky wrote:
>
>> There've been two threads about this, seems to be something in a  
>> new update of that virus scanner. What is the known issue? Is it  
>> just that the systems have an out of date version of the Flash  
>> player installed? Or do the virus scanners target any app which is  
>> tagged as SWF6?
>>
>>
>>
>> ---------- Forwarded message ----------
>> From: Laszlo Systems Developers Forums Mailer  
>> <[EMAIL PROTECTED] >
>> Date: Mar 14, 2006 4:08 PM
>> Subject: New Post/Thread Notification: LZX Coding Help
>> To: [EMAIL PROTECTED]
>>
>> Hello,
>>
>> dbuchal has just posted in the LZX Coding Help forum of Laszlo  
>> Systems Developers Forums under the title of High Priority McAfee  
>> issue!.
>>
>> This thread is located at http://www.laszlosystems.com/developers/ 
>> community/forums/showthread.php?threadid=5661
>>
>>
>> -- 
>> Henry Minsky
>> Software Architect
>> [EMAIL PROTECTED]
>>
>> _______________________________________________
>> Laszlo-dev mailing list
>> [email protected]
>> http://www.openlaszlo.org/mailman/listinfo/laszlo-dev
>
> _______________________________________________
> Laszlo-dev mailing list
> [email protected]
> http://www.openlaszlo.org/mailman/listinfo/laszlo-dev

_______________________________________________
Laszlo-dev mailing list
[email protected]
http://www.openlaszlo.org/mailman/listinfo/laszlo-dev

Reply via email to