Endpoint Protection

 View Only
  • 1.  The software is shown as trojan.ADX after latest live update

    Posted Jan 04, 2013 12:27 AM

    We develop a software which is  a valid,trusted and digiatally signed software.Our customers update the software automatically every month. The update exe file has a valid digital sign issued from verisign.but still it is shown as trojan.ADX.H by norton internet security.We had similar problem with symantec endpoint protection in our web server also. Problem started after live update of last week of December.Before it was fine. So how i can solve this?

    thank you



  • 2.  RE: The software is shown as trojan.ADX after latest live update

    Posted Jan 04, 2013 12:59 AM

    HI,

     

    For software developers, authors, and Independent Software Vendors (ISVs), the Symantec Software White-List program offers an opportunity to have their software added to a white-list of known good software maintained by Symantec to reduce the possibility of false positives.  Please note that Symantec offers this service to reduce false positives, but cannot guarantee that false positives will not occur.  Decisions made by Symantec are also subject to change depending on a variety of factors that include but are not limited to alterations in the software, distribution of the software, or vulnerabilities in the software to misuse by the publisher or others. Symantec may also change its classification criteria and policies over time to address the constantly evolving security landscape.  To submit software to participate in this program, please submit the candidate software to Symantec using the Software White-Listing Request form.

    Software White-Listing Request Form:
    https://submit.symantec.com/whitelist/

     Note: If an application for white-listing is approved it can take a number of weeks for the software in question to be white-listed.  The applicant will be notified after the white-listing process for that software is completed.  The applicant will be notified if the application is not approved.

    Reference:

    Software developer would like to add his/her software to the Symantec White-List.

    http://www.symantec.com/docs/TECH132220



  • 3.  RE: The software is shown as trojan.ADX after latest live update

    Posted Jan 04, 2013 04:39 AM

    With it tips on how to create applications that will not trigger detection, this article may also be of interest:

     

    Insight Deployment Best Practices
    Article URL http://www.symantec.com/docs/DOC5077

     



  • 4.  RE: The software is shown as trojan.ADX after latest live update

    Broadcom Employee
    Posted Jan 04, 2013 05:11 AM

    Hi,

    It's probably a false positive alert.

    Software White-Listing Request can be submit here.

    submit.symantec.com/whitelist

    Check this Symante Blog as well: www-secure.symantec.com/.../software-white-listing-program

    Go throught the follwoing helpful articles:

    Handling and preventing SONAR false positive detections

    www.symantec.com/.../index...

    Monitoring SONAR detection results to check for false positives

    www.symantec.com/.../index...