NSIS 2.17 vs Symantec = Trojan.Zlob (here we go again)

[intelworker]

Yeah, it seems symantec updated it's virus definitions again and all uninstallation files recognize like Trojan.Zlob. And now i even can't download and run nsis installation package.
Checked using:
Norton Antivirus 2006.
Symantec Antivirus 10.0 Corporate Edition.
Developers, please do something with that idiots in symantec
Nsis is a Great job, btw

[Joel]

Well, so you know is a false positive...don't need to be alarm.

Have a nice day

[Brummelchen]

/ot
>> Developers, please do something with that idiots in symantec

rough words - forum, ban these (...) Symantec consumers.

Symatec products always suck - and they suck ev'time a bit more.

I never had a postive false with NOD, but i see lots with Symantec, McAfee, KAV, and some more.

and one more - symantec has a deal with microsoft that some nice tweaking and modifier tools where treaten as virus/trojans/aso.

[kookh]

well I am sure it is a false positive... but people using my installer are reporting Trojan.Zlob found with Norton Antivirus. I can't have that, can anyone do anything about this? or tell me what needs to be done to avoid it?

[kichik]

• Make sure they're using the latest definitions, because this has, as far as I know, already been fixed.
• If it hasn't been fixed, report this to Symantec and give them my e-mail for more details ([email protected]).
• Rebuild your installer with another version, such as the newly released 2.18.

[kookh]

Thank you, I'll follow steps 1 and 3 for now.

[Brummelchen]

>> such as the newly released 2.18

And again i miss the News for that...

[tigereye]

Kichik,

I can second intelworker's issue. SAV 10 corporate with 7/1/06 v8 defs, which are latest as of right now (10:00 AM EST). I'll email Symantec, and give them your info, as I've got over multiple packages deployed to 70,000 users that can't be updated on the fly. ;-)

Thanks for the help.

Mike

[Afrow UK]

Updated the false positives page.

-Stu

[Joel]

I think there should be a sticky about false positives

[Afrow UK]

Good idea. I'll see what I can do.

Edit: I'll let Kichik create an announcement post as he knows best

-Stu

[kookh]

Does 2.18 cause the same problem ?

[Comperio]

I had quite a few of my installs wiped out by this latest problem with Symantec.

So far, however, rebuilding them in NSIS version 2.18 seems to have worked. (Using a different compression algorithm may also work, although I've found nothing concrete to support this claim.)

[dhalsim2]

Does 2.18 cause the same problem ?

I just installed 2.18 to get around this problem. Didn't work.

[zeeh3]

I have installed 2.18 and no problems at all.