Hello,
I am a Customer Support tech at PopCap Games, Inc. – PopCap Games is the world market leader for premium casual games www.popcap.com.
A customer has reported a malware notification related to PopCap's Internet Explorer browser plug-in (popcaploader_v10.cab) and Firefox plug-in (PopCapPluginInstaller_v2.exe), which are used to load our ActiveX-based Web games.
The files popcaploader_v10.cab (PopCaploader.dll) and PopCapPluginInstaller_v2.exe are not malicious – they are merely used to load our ActiveX-based Web games.
I have attached the file in question as a password protected .ZIP file (password = popcap); please make the necessary adjustments to your products to prevent such false-positives going forward.
The report from the customer is as follows:
Was playing the free version of insaniquarium. I use adaware as one product to help protect my computer. I remember when first loading the game, I was asked to install an activeX control for popcap game loader. I clicked to allow the activeX, as I trust this site, and have played games here in the past with no adverse results.
Adaware has identified the popcap loader as a high-threat malware trojan that will download content without my consent. Is this true of your loader, and is it really required in order to run the game?? Adaware has automatically deleted the loader. Will I be required to allow the activeX again the next time I play, and for each play after that, or does my computer now have the info I need to play, even after the loader was removed?
I'm running Adaware Anniversary Edition (freeware) Version 8.0.7
Definitions updated 07/07/2009 file 0148.0067
I went directly thru popcap to play the game.
Full Version: PopCap Games ActiveX control
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive False Postive Issues
Hi,
The definition file used by your customer is more than a month old. This must have already been fixed as we do not currently detect the file you attached.
Regards.
Atri
The definition file used by your customer is more than a month old. This must have already been fixed as we do not currently detect the file you attached.
Regards.
Atri
QUOTE(popcapgamestech @ Aug 10 2009, 01:59 PM) 
Hello,
I am a Customer Support tech at PopCap Games, Inc. – PopCap Games is the world market leader for premium casual games www.popcap.com.
A customer has reported a malware notification related to PopCap's Internet Explorer browser plug-in (popcaploader_v10.cab) and Firefox plug-in (PopCapPluginInstaller_v2.exe), which are used to load our ActiveX-based Web games.
The files popcaploader_v10.cab (PopCaploader.dll) and PopCapPluginInstaller_v2.exe are not malicious – they are merely used to load our ActiveX-based Web games.
I have attached the file in question as a password protected .ZIP file (password = popcap); please make the necessary adjustments to your products to prevent such false-positives going forward.
The report from the customer is as follows:
Was playing the free version of insaniquarium. I use adaware as one product to help protect my computer. I remember when first loading the game, I was asked to install an activeX control for popcap game loader. I clicked to allow the activeX, as I trust this site, and have played games here in the past with no adverse results.
Adaware has identified the popcap loader as a high-threat malware trojan that will download content without my consent. Is this true of your loader, and is it really required in order to run the game?? Adaware has automatically deleted the loader. Will I be required to allow the activeX again the next time I play, and for each play after that, or does my computer now have the info I need to play, even after the loader was removed?
I'm running Adaware Anniversary Edition (freeware) Version 8.0.7
Definitions updated 07/07/2009 file 0148.0067
I went directly thru popcap to play the game.
I am a Customer Support tech at PopCap Games, Inc. – PopCap Games is the world market leader for premium casual games www.popcap.com.
A customer has reported a malware notification related to PopCap's Internet Explorer browser plug-in (popcaploader_v10.cab) and Firefox plug-in (PopCapPluginInstaller_v2.exe), which are used to load our ActiveX-based Web games.
The files popcaploader_v10.cab (PopCaploader.dll) and PopCapPluginInstaller_v2.exe are not malicious – they are merely used to load our ActiveX-based Web games.
I have attached the file in question as a password protected .ZIP file (password = popcap); please make the necessary adjustments to your products to prevent such false-positives going forward.
The report from the customer is as follows:
Was playing the free version of insaniquarium. I use adaware as one product to help protect my computer. I remember when first loading the game, I was asked to install an activeX control for popcap game loader. I clicked to allow the activeX, as I trust this site, and have played games here in the past with no adverse results.
Adaware has identified the popcap loader as a high-threat malware trojan that will download content without my consent. Is this true of your loader, and is it really required in order to run the game?? Adaware has automatically deleted the loader. Will I be required to allow the activeX again the next time I play, and for each play after that, or does my computer now have the info I need to play, even after the loader was removed?
I'm running Adaware Anniversary Edition (freeware) Version 8.0.7
Definitions updated 07/07/2009 file 0148.0067
I went directly thru popcap to play the game.
popcapgamestech,
You have already posted about this false positive on May 12th and the files you mention were removed from the detection database:
http://www.lavasoftsupport.com/index.php?showtopic=25538
Casey
You have already posted about this false positive on May 12th and the files you mention were removed from the detection database:
http://www.lavasoftsupport.com/index.php?showtopic=25538
Casey
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.