Welcome, Guest

Author Topic: Universe Sandbox for Schools - Blocked by McAfee VirusScan Enterprise  (Read 4609 times)

Ted

  • *
  • Posts: 1
  • Computer Support and Training
I am part of an IT support team for a local school district.  One of our teachers requested that we install a classroom copy of Universe Sandbox.  He provided us with a download link he obtained in response to his Universe Sandbox for Schools Google Form. the following download link:

http://www.download366.com/universe-sandbox?utm_source=bing&utm_medium=cpc&utm_campaign=366_USA_en_longtail_Productividad_windowsads&utm_content=Universe-Sandbox&utm_term=Universe%20Sandbox

We tried to install the program by running the downloaded Universe Sandbox.exe (SHA1: C1D1BA79F33C0D42B62FFBEB1FBB57A72985CF1F signed by Popeler System, S.L.).  However, it was immediately blocked by McAfee VirusScan Enterprise's On-Access Scan and deleted.  Here is the message generated by McAfee:

Message:              VirusScan Alert!
Name:                  C:\Users\...\AppData\Local\Temp\n5578\s5578.exe
Detected As:         Artemis!ABAF13CB23DE
Detection Type:     Potentially Unwanted Program
Status:                 Deleted

On subsequent attempts, the blocked executable's name and location were randomized.  For example, ...n5578\s5578.exe became ...n3082\s3082.exe and then later ...n3562\s3562.exe.  Each version, however, was detected as Artemis!ABAF13CB23DE and deleted.

We are running McAfee Viruscan Enterprise + AntiSpyware Enterprise, version 8.8.0.1247, build date 1/16/2014, scan engine 5700.7163, DAT version 7758.0000 (DAT created on 4/1/2015).

VirusTotal gives the following analysis of Universe Sandbox.exe:
https://www.virustotal.com/en/file/d81f5ed58bbef448ee7587a366a578b8a99b7997dcef258578f8b5752b107193/analysis/1427906734/

We would like to use Universe Sandbox in our classroom, but unfortunately we can't until this is resolved.  Please advise.
« Last Edit: April 02, 2015, 08:56:53 AM by Ted »

Jar

  • Developer
  • *****
  • Posts: 732
    • Universe Sandbox
Re: Universe Sandbox for Schools - Blocked by McAfee VirusScan Enterprise
« Reply #1 on: April 02, 2015, 11:01:36 AM »
We are not associated with the website you listed above. The file they are offering for download is different from the setup file we have on our site http://universesandbox.com. Judging from the bottom of that page, it seems to be bundled with at least some adware.

Please use the link in the email sent to your teacher to access your download page for Universe Sandbox.

Please let me know if you run into any further issues. You can also use our contact page: http://universesandbox.com/contact/