Ask a Question

Rebex showing up as VIRUS

0 votes
by (120 points)
edited

Hello, I just purchased the full retail version of Rebex for SFTP.

Unfortunately my anti-virus is not allowing me to download it, because it's detecting it's a virus. The machine I'm running on is corporate and I cannot disable the antivirus.

Can you confirm this is a false positive? Can you talk to Norton? It's showing up as the "Insight Network Threat" which is quite concerning.

Thank you, Justin

Applies to: Rebex SFTP
by (13.3k points)
edited

I will try to reproduce it and will contact Norton to check it. Would it be possible to update your question and include which antivirus are you using? Is it http://us.norton.com/antivirus/ or http://us.norton.com/internet-security or something other?

1 Answer

0 votes
by (13.3k points)
edited

I am able to reproduce something similar using Norton Internet Security 2012. However, the error message is different. It displays threat named WS.Reputation.1 For details see http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-051308-1854-99

If I understand the Symantec/Norton description correctly the reason for disabling the download was not any detected threat but the fact, that download has not gained enough reputation from existing Norton Antivirus users.

I've contacted Symantec and reported false positive. We also plan to cooperate with Symantec in order to white-list future Rebex downloads. We are already white-listing our downloads with one other antivirus vendor.

Now we have to wait for reaction from Symantec/Norton. I'll update this post when I have anything new to share.

Many thanks for reporting it!

UPDATE 2011-12-21

  • Received response from Symantec. They are unable to reproduce the issue with trial download. Neither do I (today). It used to be blocked yesterday.
  • Rebex SFTP trial installation packages can be downloaded. NortonAntivirus does not complain.
  • Full Rebex SFTP installation package for .NET 2.0 can be downloaded. NortonAntivirus does not complain.
  • Full Rebex SFTP installation package for .NET 4.0 download is still blocked (WS.Reputation.1).

As a quick resolution I would recommend downloading full .NET 2.0 packages. This version can be used in both .NET 2.0 and 4.0. We will work on white-listing all of our downloads with Symantec. Please note that Symantec states that white-listing can take number of weeks.

UPDATE 2012-01-19

Rebex installation packages are now signed with code signing certificate from VeriSign (using Microsoft Authenticode technology). Norton Antivirus is no longer reporting any error.

by (120 points)
edited

Thank you very much, this is the answer I was looking for...work will be pleased to know you took the appropriate steps :)

I do get Ws.Reputation.1 as well, but it also shows if you look in a different place that it's detecting the "Insight Network Threat".

...