I am part of an IT support team for a local school district. One of our teachers requested that we install a classroom copy of Universe Sandbox. He provided us with
a download link he obtained in response to his Universe Sandbox for Schools Google Form. the following download link:
http://www.download366.com/universe-sandbox?utm_source=bing&utm_medium=cpc&utm_campaign=366_USA_en_longtail_Productividad_windowsads&utm_content=Universe-Sandbox&utm_term=Universe%20SandboxWe tried to install the program by running the downloaded
Universe Sandbox.exe (SHA1: C1D1BA79F33C0D42B62FFBEB1FBB57A72985CF1F signed by
Popeler System, S.L.). However, it was immediately blocked by
McAfee VirusScan Enterprise's On-Access Scan and deleted. Here is the message generated by McAfee:
Message:
VirusScan Alert!Name: C:\Users\...\AppData\Local\Temp\n5578\s5578.exe
Detected As: Artemis!ABAF13CB23DE
Detection Type: Potentially Unwanted Program
Status: Deleted
On subsequent attempts, the blocked executable's name and location were randomized. For example, ...n5578\s5578.exe became ...n3082\s3082.exe and then later ...n3562\s3562.exe. Each version, however, was detected as Artemis!ABAF13CB23DE and deleted.
We are running McAfee Viruscan Enterprise + AntiSpyware Enterprise, version 8.8.0.1247, build date 1/16/2014, scan engine 5700.7163, DAT version 7758.0000 (DAT created on 4/1/2015).
VirusTotal gives the following analysis of Universe Sandbox.exe:
https://www.virustotal.com/en/file/d81f5ed58bbef448ee7587a366a578b8a99b7997dcef258578f8b5752b107193/analysis/1427906734/We would like to use Universe Sandbox in our classroom, but unfortunately we can't until this is resolved. Please advise.