Page 1 of 1

TwonkyMediaServer 5.1.2 - WHS - Norton - Virus????

Posted: Thu Mar 18, 2010 2:30 pm
by prmusic
Hi All,

today I downloaded the WHS AddOn for Twonky Server 5.1.2. My Norton Anti Virus blocked it by saying it seems to be a Trojan Horse. Can you please verify? Any comment?

The download for 5.1.1 seems to be clean and is not blocked by Norton AV.

Thanks
prmusic

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Thu Mar 18, 2010 11:39 pm
by Twonky_Rick
Obviously TMS is not a virus, or Trojan Horse, nor does it contain spyware or anything else like that. We'll see if we can try to reproduce this issue and contact Norton about this. It seems their database needs to be updated. TMS does look for UPnP or DLNA devices on your network and I suspect that might be what's confusing it.

- Rick

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Fri Mar 19, 2010 9:58 am
by prmusic
Thanks for the feedback.

However I am not talking about the installed Twonky Server. When downloading the .msi of the 5.1.2 WHS Version from your web page the Norton Alarm came up.
This is not the case when downloading the 5.1.1 .msi WHS Version. Seems that Norton doesn not like the msi file itself.

Norton reports: Trojan.Gen
Windows asked me to allow Admin access for copying the file.
This is not the case for any other download.
OS: Win 7 pro 64bit

I did a test downloading the file from another computer running Avira free and this time no alert came up.
OS: Win 7 pro 32bit

prmusic

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Fri Mar 19, 2010 10:51 am
by zuz242
norton is a bit conservative / paranoic. as it is mainly for the inexperienced user it is overcautious, often blocking downloads if not known to norton or other users (i think norton calls this "sonar" technology) and in any way suspicious (all networking apps are..).

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Fri Mar 19, 2010 8:30 pm
by mgillespie
A quick Google.

http://www.symantec.com/security_respon ... 99&tabid=2

Basically it's because Norton is not smart enough to tell the difference between a real virus and something that had virus-like behaviour.

I suggest getting a proper Anti-virus that CAN tell the difference...

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Tue Mar 23, 2010 11:57 pm
by Twonky_Rick
We're looking into this. It might also have something to do with a file signing problem.

- Rick

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Wed Mar 24, 2010 6:35 pm
by Twonky_Rick
Alright. It's been confirmed. The installer and all binaries of the WHS builds prior to 5.1.3 were not properly signed. This may cause some virus scanners to flag the TMS for WHS installer.

The problem has been fixed and a new build (5.1.4) will be posted on the Forum by late next week.

- Rick

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Fri Mar 26, 2010 9:10 am
by adhesiv
will this include the changes from 5.1.3 on the WHS build?

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Posted: Mon Apr 05, 2010 2:49 am
by Twonky_Rick
Yes it will.

- Rick

Re: TwonkyMediaServer 5.1.2 - WHS - Norton - Virus????

Posted: Thu Apr 15, 2010 1:36 am
by warrenbbs
Any idea when 5.1.4 will be out? Been waiting a few weeks now. Just wondering...