Hello, I just purchased the full retail version of Rebex for SFTP.

Unfortunately my anti-virus is not allowing me to download it, because it's detecting it's a virus. The machine I'm running on is corporate and I cannot disable the antivirus.

Can you confirm this is a false positive? Can you talk to Norton? It's showing up as the "Insight Network Threat" which is quite concerning.

Thank you, Justin

asked 20 Dec '11, 04:41

null7238's gravatar image

null7238
251
accept rate: 0%

I will try to reproduce it and will contact Norton to check it. Would it be possible to update your question and include which antivirus are you using? Is it http://us.norton.com/antivirus/ or http://us.norton.com/internet-security or something other?

(20 Dec '11, 15:17) Martin Vobr ♦♦

I am able to reproduce something similar using Norton Internet Security 2012. However, the error message is different. It displays threat named WS.Reputation.1 For details see http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99

If I understand the Symantec/Norton description correctly the reason for disabling the download was not any detected threat but the fact, that download has not gained enough reputation from existing Norton Antivirus users.

I've contacted Symantec and reported false positive. We also plan to cooperate with Symantec in order to white-list future Rebex downloads. We are already white-listing our downloads with one other antivirus vendor.

Now we have to wait for reaction from Symantec/Norton. I'll update this post when I have anything new to share.

Many thanks for reporting it!

UPDATE 2011-12-21

  • Received response from Symantec. They are unable to reproduce the issue with trial download. Neither do I (today). It used to be blocked yesterday.
  • Rebex SFTP trial installation packages can be downloaded. NortonAntivirus does not complain.
  • Full Rebex SFTP installation package for .NET 2.0 can be downloaded. NortonAntivirus does not complain.
  • Full Rebex SFTP installation package for .NET 4.0 download is still blocked (WS.Reputation.1).

As a quick resolution I would recommend downloading full .NET 2.0 packages. This version can be used in both .NET 2.0 and 4.0. We will work on white-listing all of our downloads with Symantec. Please note that Symantec states that white-listing can take number of weeks.

UPDATE 2012-01-19

Rebex installation packages are now signed with code signing certificate from VeriSign (using Microsoft Authenticode technology). Norton Antivirus is no longer reporting any error.

link

answered 20 Dec '11, 20:09

Martin%20Vobr's gravatar image

Martin Vobr ♦♦
335310
accept rate: 37%

edited 19 Jan, 17:33

Thank you very much, this is the answer I was looking for...work will be pleased to know you took the appropriate steps :)

I do get Ws.Reputation.1 as well, but it also shows if you look in a different place that it's detecting the "Insight Network Threat".

(20 Dec '11, 23:42) null7238
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×116

Asked: 20 Dec '11, 04:41

Seen: 192 times

Last updated: 19 Jan, 17:33