Net66 54 Posted June 16, 2010 Report Share Posted June 16, 2010 Does anyone here use Norton Anti-virus? I have a customer who is getting a trojan report when trying to run a compiled bot I have supplied. When they run the bot they get the ubot window come up but it doesn't load any tabs (screenshot below). They try to click the play button anyway and get this warning from Norton:Auto-Protect has detected Trojan HorseBlocked: ........\application data\xenocode\sandbox\compiledbot\1.0.0.0.\2010.06.14t20.36\native\stubexe\@programfiles@\common~1\micros~1\dw\dw20.exe I have run the bot through Virustotal and only Sophos gives a possible warning (but 42 other systems report as clear so I didn't read anything into that). If someone here has Norton and is prepared to try the bot for me I'll send you a download link (it's a 5mb download). I am sure this is a false-positive as I've run it through three different Anti-virus programs locally too (Eset, AVG and Panda). Screenshot from customer: Andy Quote Link to post Share on other sites
Frank 177 Posted June 16, 2010 Report Share Posted June 16, 2010 This is not uncommon. Most trojans run the way ubot does - with automation. Very annoying for sure. Frank Quote Link to post Share on other sites
alcr 135 Posted June 16, 2010 Report Share Posted June 16, 2010 Can you add exceptions to folders in norton? If that's the case, just add an exception for the whole compiled bot folder. Norton sucks though - I guess thats why most developers and advanced users avoids it at all times! Quote Link to post Share on other sites
Net66 54 Posted June 16, 2010 Author Report Share Posted June 16, 2010 Can you add exceptions to folders in norton? If that's the case, just add an exception for the whole compiled bot folder. Norton sucks though - I guess thats why most developers and advanced users avoids it at all times!Yeah, sadly customers use it. I remember when Norton was the best Anti-virus out there, but that was a long time ago. Now it's as bloated as Mcaffee. The problem is that customers are afraid of trusting that its OK. I'll see if I can convince him to set an exception. Andy Quote Link to post Share on other sites
iglow 8 Posted June 16, 2010 Report Share Posted June 16, 2010 thing is it used to not show up as virus before new compile system with the hidden files that unpack Quote Link to post Share on other sites
Net66 54 Posted June 16, 2010 Author Report Share Posted June 16, 2010 thing is it used to not show up as virus before new compile system with the hidden files that unpackI now have another customer who gets the blank ubot screen (but no anti-virus in the way). Am waiting to find out what version of Windows, etc. But there could be a wider issue here :-( Quote Link to post Share on other sites
alcr 135 Posted June 16, 2010 Report Share Posted June 16, 2010 thing is it used to not show up as virus before new compile system with the hidden files that unpack Yeah, though, it showed up on 40 other antivirus scanners before fixing the compile system, haha. We would need a solution to this though. Hmm. Quote Link to post Share on other sites
thoth 0 Posted June 20, 2010 Report Share Posted June 20, 2010 Yeah, though, it showed up on 40 other antivirus scanners before fixing the compile system, haha. We would need a solution to this though. Hmm. True but still annoying to the point of not being able to run compiled bots. Norton reporting as a Trojan ... a huge disadvantage if sharing or selling compiled bots. After using Nortons for the last year this will be my last once subscription runs out. Great software but hopefully a solution soon! Quote Link to post Share on other sites
alcr 135 Posted June 20, 2010 Report Share Posted June 20, 2010 Try reporting it as a false negative to norton as much as you can. That would probably speed it up since the problem isn't really on our side. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.