Do you have a virus in disk 2 of Aug 08 drivers for Labview ?

[Riconquistiamola]

Hi KO7Z,

I should clarify my response. We do not have access to all antivirus software packages. We do have antivirus software, but it does not recognize our own software as a virus.

If it did, I'm sure we'd be the first to call the manufacturer to report the false positive .

Cheers.

[altenbach]

In cases such as this, it would always help to submit the suspicious file to e.g. http://www.virustotal.com/ .

You'll immediately get the analysis of 30++ up-to-date AV engines, so you should get a more global picture to see if there is any consensus.

[KO7Z]

Which is part of my point... None of us can have all the antivirus programs, but I suggest that in a PSE role you should have multiple antivirus scanners to run production code through before it is released. If you stay up with the AV software, you will realize that not all of them are created equal. Just because the one you have doesn't detect it, doesn't mean there isn't a virus and that the product is "clean". I am really talking Quality Control with the production software. The fact that several of us find it to be a problem means that there are many, many others who either don't take the time to call or complain, or don't know the process to do so.

[altenbach]

I think the burden is really with the AV companies.

Most offer daily AV updates and false positives are not avoidable. Most likely, this particular file on the CD scanned clean originally, but triggered a false positive after one of the AV updates. Files on CD are more static, so the responsibility is with the AV companies to ensure that the false postive is fixed with the next AV update. NI cannot do anything here.

Only in the unlikely case that the NI cd turns out to have a real virus, it would be the responsibility of NI to contact customers.

[mishkin]

I filed a false positive report on Symantec's website. Now all we can do is wait for the results. Hopefully they let us know soon. 

---

altenbach wrote:

In cases such as this, it would always help to submit the suspicious file to e.g. http://www.virustotal.com/ .

You'll immediately get the analysis of 30++ up-to-date AV engines, so you should get a more global picture to see if there is any consensus.

---

Unfortunately, the file is too big to be uploaded to www.virustotal.com

[mishkin]

This is the response from Symantec:

"We are writing in relation to your submission through Symantec's on-line
False Positive Dispute Submission form for your Labview software being
detected by Symantec Software. After downloading, installing and
scanning your software with Symantec's latest definitions we have been
unable to reproduce this detection. Can we please ask you to ensure that
you are using Symantec's latest virus definitions for detection? They
can be found using live update or alternatively from the URL below.

http://securityresponse.symantec.com/avcenter/defs.download.html

Due to not being able to reproduce this issue we require the additional
information below to progress the dispute.

* The message or a screen shot of the message received

* A specific URL to download the software

* Exact instructions on how to recreate issue

* Symantec product and version being used for detection

If this dispute is no longer valid please respond to this email and we
will close off the dispute.  "

KO7Z, are you able to provide this additional information for me? 

Message Edited by mishkin on 01-30-2009 10:03 AM

[trouinky]

I get this virus (Trojan) warning when installing 8.6 from the main install DVD.  My version of Symantec is Symantec Endpoint Protection v 11.  All AV updates are live (active connection to a centralized server that dishes out updates to the AV list).  I've submitted a report to Symantec for them to investigate.

[asper]

Hi folk,
for your information the Panda-Security ActiveScan 2 report the same virus (Trojan) warning.

That is the ActiveScan report:

MALWARE
Id        Description     Type          Active  Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
04945818  Generic Trojan  Virus/Trojan  No      0         Yes            No          C:\Programs\National Instruments\RT Images\Utilities\BIOS Updater\10.3\7063\flashUpdate.exe
;===================================================================================================================================================================================

I have installed LV 8.6 from the main NI DVD.

Regard,
Asper

[mishkin]

Thank you for letting us know about this, asper.

If possible, please submit a false positive report to Panda Security so that they update their definitions. 

[mishkin]

I submitted a false positive report for Panda ActiveScan 2.0. I'll let you know if they get back to me.