[UW-GIS-L] [Fwd: [Uwlib-gisatlib] ArcGIS Address Coder SP1 Trojan?]
parsonsm at u.washington.edu
Thu May 14 15:48:37 PDT 2009
Forwarding on behalf of Drew Larson. I'm curious as peoples' experience
with this, also. Please reply to the list and cc Drew at
alarson at u.washington.edu if you have any insight.
-------- Original Message --------
Subject: [Uwlib-gisatlib] ArcGIS Address Coder SP1 Trojan?
Date: Thu, 14 May 2009 14:09:11 -0700
From: Drew Larson <alarson at u.washington.edu>
To: 'gis at lib.washington.edu' <gis at lib.washington.edu>
I provide I.T. support for Obstetrics & Gynecology, UW School of Medicine and encountered an anomaly today when installing and updating ArcGIS ESRI for one of my end users (faculty).
Following the installation of ArcGIS 9.3 (CD provided by Suzallo Maps) I visited the ArcGIS support site for updates. I found "ArcGIS Address Coder 9.3 Service Pack 1" at http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=141&MetaID=1508.
Following the installation of this Service Pack, McAfee AV On-Access scanner detected C:\Program Files\ESRI\Address Coder\ACoder.exe as Downloader-ABU (Trojan).
I'm thinking I really didn't need to install this Service Pack since the ArcGIS ESRI installation did not install C:\Program Files\ESRI\Address Coder\ACoder.exe - this was installed by the SP1 update I downloaded per above.
In any case, do you know if this Service Pack is being mis-identified as the Downloader-ABU Trojan by McAfee AV, or is it really an infection I'd downloaded?
Also please advise if my end user doesn't need to have the Address Coder SP1 installed, and if they don't I'll remove it.
Thank you for your assistance,
UW Dept ObGyn
Uwlib-gisatlib mailing list
Uwlib-gisatlib at u.washington.edu
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 335 bytes
Desc: not available
Url : http://mailman1.u.washington.edu/pipermail/uw-gis-l/attachments/20090514/2318b0e6/parsonsm.vcf
More information about the Uw-gis-l