I am able to reproduce something similar using Norton Internet Security 2012. However, the error message is different. It displays threat named WS.Reputation.1
For details see http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99
If I understand the Symantec/Norton description correctly the reason for disabling the download was not any detected threat but the fact, that download has not gained enough reputation from existing Norton Antivirus users.
I've contacted Symantec and reported false positive. We also plan to cooperate with Symantec in order to white-list future Rebex downloads. We are already white-listing our downloads with one other antivirus vendor.
Now we have to wait for reaction from Symantec/Norton. I'll update this post when I have anything new to share.
Many thanks for reporting it!
- Received response from Symantec. They are unable to reproduce the issue with trial download. Neither do I (today). It used to be blocked yesterday.
- Rebex SFTP trial installation packages can be downloaded. NortonAntivirus does not complain.
- Full Rebex SFTP installation package for .NET 2.0 can be downloaded. NortonAntivirus does not complain.
- Full Rebex SFTP installation package for .NET 4.0 download is still blocked (WS.Reputation.1).
As a quick resolution I would recommend downloading full .NET 2.0 packages. This version can be used in both .NET 2.0 and 4.0. We will work on white-listing all of our downloads with Symantec. Please note that Symantec states that white-listing can take number of weeks.
Rebex installation packages are now signed with code signing certificate from VeriSign (using Microsoft Authenticode technology). Norton Antivirus is no longer reporting any error.