Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


Sign in to follow this  
XPero

[Important] XPize and Norton AV 2006

Recommended Posts

I've received several emails of XPize users telling me that Norton Antivirus 2006 found Trojan.Zlob in XPize. I downloaded the Norton AV demo and started to remove pieces of code to see what was causing that. After lot of testing I found the solution:

NSIS allows installers to be compressed using different compression methods. The one I use with XPize is the LZMA. Changing this method to another one like BZIP2 fixes the virus warning :blink: It seems that the crappy Norton AV does not like LZMA compression :} I will release a fixed version soon.

EDIT: Installer will weight 3MB more using BZIP2 compression!! I love you Symantec! :angry:

EDIT 2: XPize version 4.4.2 released.

EDIT 3: Reuploading version 4.4.2 compiled using NSIS 2.18 and LZMA compression. This time, Norton does not complain.

Share this post


Link to post
Share on other sites

I would rather contact Symantec or just put a note on the site.

Similiar thing happened with nLite and Antivir...someone told them and they corrected. It was Winrar Selfextracting exe.

Share this post


Link to post
Share on other sites

I cant stand Norton anymore, used to love it, but with version 2006, i hated it!

Share this post


Link to post
Share on other sites

omg, thats so lame (of norton)

any chance of putting both builds up each time?, maybe put the non-norton friendly one in 'other downloads' or something

Share this post


Link to post
Share on other sites

Why don't you compress the installer with 7zip (like the firefox one) maybe norton can't manage to extract it so it won't detect any false positive.

Share this post


Link to post
Share on other sites

@bledd:

I will think a solution for next version. AV software is killing my patience...

@Francesco:

Norton will delete the .exe automatically, not even a pre-deletion warning.

Share this post


Link to post
Share on other sites

I scrapped Norton IS 2006. V high memory and cpu usage, especially from CCAPP.EXE and VERY SLOW internet connection.

And their definition updates are like 5mb every three minutes. Byebye norton, hello Kaspersky!

@XPero Why not try something like ZOO or ARJ, something w/high ratios that Symantec haven't heard of yet?

Edited by T D

Share this post


Link to post
Share on other sites

Norton AV has the worst detection ever: It sucks so much that even a 1 byte change in an executable can avoid norton detection. Kasperksy instead doesn't rely on stupid string matches like norton does in fact it has the best detection ever (99.97%). Also kaspersky uses rootkit technology to prevent viruses/worms from disabling the scan making it the best AV ever. Kaspersky also doesn't rescan the files its checksum hasn't changed (checksums are stored in alternate NTFS streams) making Kaspersky the fastest AV ever.

Share this post


Link to post
Share on other sites

And the Worm Detection in Norton detects everything as a "worm".

Share this post


Link to post
Share on other sites

It seems that latest NSIS (2.18) fixes the problem. I will keep you updated.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...