TwonkyMediaServer 5.1.2 - WHS - Norton - Virus????

General discussion about the media server. Feature requests. Hints, tips and tricks.
Locked
prmusic
Posts:45
Joined:Wed Aug 08, 2007 5:58 am
TwonkyMediaServer 5.1.2 - WHS - Norton - Virus????

Post by prmusic » Thu Mar 18, 2010 2:30 pm

Hi All,

today I downloaded the WHS AddOn for Twonky Server 5.1.2. My Norton Anti Virus blocked it by saying it seems to be a Trojan Horse. Can you please verify? Any comment?

The download for 5.1.1 seems to be clean and is not blocked by Norton AV.

Thanks
prmusic

Twonky_Rick
Posts:3816
Joined:Wed Nov 19, 2008 1:59 am
AV Hardware:Samsung 650 Series TV (2010), 4.5TB HP MediaSmart server with 100,000 songs, 5) AT&T U-Verse STB, CE form-factor Media Center PC and 6 other networked PCs running TwonkyManager, 2 Sonos ZP80, Sonos S5 speaker, Apple TV (running XBMC), Roku Soundbridge, X-Box 360, Sony PS3, Kodak 10" Wireless Photo Frame, iPhone with PlugPlayer software, Sonos CR-100.
Location:San Diego
Contact:

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by Twonky_Rick » Thu Mar 18, 2010 11:39 pm

Obviously TMS is not a virus, or Trojan Horse, nor does it contain spyware or anything else like that. We'll see if we can try to reproduce this issue and contact Norton about this. It seems their database needs to be updated. TMS does look for UPnP or DLNA devices on your network and I suspect that might be what's confusing it.

- Rick

prmusic
Posts:45
Joined:Wed Aug 08, 2007 5:58 am

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by prmusic » Fri Mar 19, 2010 9:58 am

Thanks for the feedback.

However I am not talking about the installed Twonky Server. When downloading the .msi of the 5.1.2 WHS Version from your web page the Norton Alarm came up.
This is not the case when downloading the 5.1.1 .msi WHS Version. Seems that Norton doesn not like the msi file itself.

Norton reports: Trojan.Gen
Windows asked me to allow Admin access for copying the file.
This is not the case for any other download.
OS: Win 7 pro 64bit

I did a test downloading the file from another computer running Avira free and this time no alert came up.
OS: Win 7 pro 32bit

prmusic

zuz242
Posts:14
Joined:Mon Nov 16, 2009 11:33 am
AV Hardware:Twonky Server on Windows Home Server
Intel SS4200 / FS Scaleo

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by zuz242 » Fri Mar 19, 2010 10:51 am

norton is a bit conservative / paranoic. as it is mainly for the inexperienced user it is overcautious, often blocking downloads if not known to norton or other users (i think norton calls this "sonar" technology) and in any way suspicious (all networking apps are..).

User avatar
mgillespie
Posts:1222
Joined:Fri Jul 08, 2005 1:19 pm
AV Hardware:TwonkyMedia AV UPnP Mediaserver (Marvell Kirkwood ARM Sheevaplug with Debian Squeeze).
2x Noxon V2 audio client
1x PS3 Slim 500GB Audio/Video UPnP client.
1x Sony VGF-CP1 Wireless Photoframe.
Location:UK

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by mgillespie » Fri Mar 19, 2010 8:30 pm

A quick Google.

http://www.symantec.com/security_respon ... 99&tabid=2

Basically it's because Norton is not smart enough to tell the difference between a real virus and something that had virus-like behaviour.

I suggest getting a proper Anti-virus that CAN tell the difference...

Twonky_Rick
Posts:3816
Joined:Wed Nov 19, 2008 1:59 am
AV Hardware:Samsung 650 Series TV (2010), 4.5TB HP MediaSmart server with 100,000 songs, 5) AT&T U-Verse STB, CE form-factor Media Center PC and 6 other networked PCs running TwonkyManager, 2 Sonos ZP80, Sonos S5 speaker, Apple TV (running XBMC), Roku Soundbridge, X-Box 360, Sony PS3, Kodak 10" Wireless Photo Frame, iPhone with PlugPlayer software, Sonos CR-100.
Location:San Diego
Contact:

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by Twonky_Rick » Tue Mar 23, 2010 11:57 pm

We're looking into this. It might also have something to do with a file signing problem.

- Rick

Twonky_Rick
Posts:3816
Joined:Wed Nov 19, 2008 1:59 am
AV Hardware:Samsung 650 Series TV (2010), 4.5TB HP MediaSmart server with 100,000 songs, 5) AT&T U-Verse STB, CE form-factor Media Center PC and 6 other networked PCs running TwonkyManager, 2 Sonos ZP80, Sonos S5 speaker, Apple TV (running XBMC), Roku Soundbridge, X-Box 360, Sony PS3, Kodak 10" Wireless Photo Frame, iPhone with PlugPlayer software, Sonos CR-100.
Location:San Diego
Contact:

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by Twonky_Rick » Wed Mar 24, 2010 6:35 pm

Alright. It's been confirmed. The installer and all binaries of the WHS builds prior to 5.1.3 were not properly signed. This may cause some virus scanners to flag the TMS for WHS installer.

The problem has been fixed and a new build (5.1.4) will be posted on the Forum by late next week.

- Rick

adhesiv
Posts:4
Joined:Sun Mar 21, 2010 8:21 am
AV Hardware:xbox 360, hp mediasmart ex495

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by adhesiv » Fri Mar 26, 2010 9:10 am

will this include the changes from 5.1.3 on the WHS build?

Twonky_Rick
Posts:3816
Joined:Wed Nov 19, 2008 1:59 am
AV Hardware:Samsung 650 Series TV (2010), 4.5TB HP MediaSmart server with 100,000 songs, 5) AT&T U-Verse STB, CE form-factor Media Center PC and 6 other networked PCs running TwonkyManager, 2 Sonos ZP80, Sonos S5 speaker, Apple TV (running XBMC), Roku Soundbridge, X-Box 360, Sony PS3, Kodak 10" Wireless Photo Frame, iPhone with PlugPlayer software, Sonos CR-100.
Location:San Diego
Contact:

Re: TwonkyMediaServer 5.1.2 - WHS - Virus????

Post by Twonky_Rick » Mon Apr 05, 2010 2:49 am

Yes it will.

- Rick

warrenbbs
Posts:12
Joined:Tue Dec 15, 2009 6:20 pm
AV Hardware:Acer Easystore AH340
Samsung UN46B7100

Re: TwonkyMediaServer 5.1.2 - WHS - Norton - Virus????

Post by warrenbbs » Thu Apr 15, 2010 1:36 am

Any idea when 5.1.4 will be out? Been waiting a few weeks now. Just wondering...

Locked