[UW-GIS-L] [Fwd: [Uwlib-gisatlib] ArcGIS Address Coder SP1 Trojan?]

[Matthew Parsons]

Forwarding on behalf of Drew Larson.  I'm curious as peoples' experience 
with this, also. Please reply to the list and cc Drew at 
alarson at u.washington.edu if you have any insight.

Thanks,
Matt Parsons

-------- Original Message --------
Subject: 	[Uwlib-gisatlib] ArcGIS Address Coder SP1 Trojan?
Date: 	Thu, 14 May 2009 14:09:11 -0700
From: 	Drew Larson <alarson at u.washington.edu>
To: 	'gis at lib.washington.edu' <gis at lib.washington.edu>



Greetings,

I provide I.T. support for Obstetrics & Gynecology, UW School of Medicine and encountered an anomaly today when installing and updating ArcGIS ESRI for one of my end users (faculty).

Following the installation of ArcGIS 9.3 (CD provided by Suzallo Maps) I visited the ArcGIS support site for updates. I found "ArcGIS Address Coder 9.3 Service Pack 1" at http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=141&MetaID=1508.

Following the installation of this Service Pack, McAfee AV On-Access scanner detected C:\Program Files\ESRI\Address Coder\ACoder.exe as Downloader-ABU (Trojan).

I'm thinking I really didn't need to install this Service Pack since the ArcGIS ESRI installation did not install C:\Program Files\ESRI\Address Coder\ACoder.exe - this was installed by the SP1 update I downloaded per above.

In any case, do you know if this Service Pack is being mis-identified as the Downloader-ABU Trojan by McAfee AV, or is it really an infection I'd downloaded?

Also please advise if my end user doesn't need to have the Address Coder SP1 installed, and if they don't I'll remove it.

Thank you for your assistance,
Drew Larson
I.T. Support
UW Dept ObGyn
206.543.2774_______________________________________________
Uwlib-gisatlib mailing list
Uwlib-gisatlib at u.washington.edu
https://mailman1.u.washington.edu/mailman/listinfo/uwlib-gisatlib

-------------- next part --------------
A non-text attachment was scrubbed...
Name: parsonsm.vcf
Type: text/x-vcard
Size: 335 bytes
Desc: not available
Url : http://mailman1.u.washington.edu/pipermail/uw-gis-l/attachments/20090514/2318b0e6/parsonsm.vcf