Likno Blog – Drop-Down Menus, Javascript Menus, CSS Menus, jQuery Scrollers/Sliders, Modal Windows and more...

Knowledge Base support case for AllWebMenus, Likno Web Scroller Builder, Likno Web Accordion Builder, Likno Web Tabs Builder, Likno Web Modal Windows Builder, Likno Web Tooltips Builder, Likno Web Button Maker, abstracted and stripped of all user’s private info.

Initial Email From: User
Initial Email Subject: virus problem
Support Case Month: June 2012

Having Norton flag all your products from last upgrade downloads with a "WS.Reputation.1" virus. 

Reply From: Likno Customer Support

Hello,

Unfortunately there is not much that we can do about this!

Since last year Norton changed their policy and mark as “reputation1” all the applications they do not know about.

This is done by Sonar, and it is done even if the application is scanned and proven to be clean. It only has to do with how many Norton Users downloaded and “trusted” this app.

Since we issue updates pretty frequently (sometimes even daily) this is becoming an increasing problem for us, but according to Norton all we can do is to submit our software to them before we upload it. However, since it may take days for them to see it and process it, we are submitting our software to them and concurrently put it online for our customers. Hence, for a day or two after each release is uploaded you may receive this message regarding “reputation1”.

In any case, you do not have to worry about this message as it is completely irrelevant to whether a product is malicious or not. It only states that the program is new!

Regards,
Kostas
Likno Customer Support
www.likno.com
Create any type of javascript menu (CSS menu, drop-down menu, sliding menu), button, html tree, modal window, tooltip, accordion, tab, scroller, jQuery slider or design for your websites!
Like us on Facebook – Follow us on Twitter

Knowledge Base support case for AllWebMenus, abstracted and stripped of all user’s private info.

Initial Email From: John
Initial Email Subject: Security Breach
Support Case Month: April 2012

HI,

Downloaded and installed your upgrade to New Likno AllWebMenus #890.

The setup, allwebmenussetup.exe, created a file, regsvr32, that was identified as a high threat to my laptop.

Here is the data reported by Nortons:

Full Path: Not Available
____________________________
____________________________
On computers as of 4/25/2012 at 3:31:59 PM
Last Used 4/25/2012 at 3:31:59 PM
Startup Item Yes
Launched Yes
____________________________
____________________________
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
____________________________
Very New
This file was released less than 1 week ago.
____________________________
High
This file risk is high.
____________________________
Threat Details
SONAR Protection monitors for suspicious program activity on your computer.
____________________________

Source File:
allwebmenussetup.exe

File Created:
regsvr32.exe
____________________________
File Actions
File: {PATH REMOVED}
Removed
Event: Running process: {PATH REMOVED}
Terminated
____________________________
Startup Actions
{PATH REMOVED} (Performed by {PATH REMOVED}, PID:1168)
No action taken
{PATH REMOVED} (Performed by {PATH REMOVED}, PID:4420)
No action taken
____________________________
System Settings Actions
Event: Process start (Performed by {PATH REMOVED}, PID:1976)
No action taken
____________________________
File Thumbprint - SHA:
Not Available
____________________________
File Thumbprint - MD5:
Not Available
____________________________

Please take immediate action to notify the authorities and clear the files you are requesting us to download.

 

Thanks,

John

Reply From: Likno Customer Support

Dear John,

We always scan our installers with several antivirus products before uploading them, and I can assure you that the current version is also clean.

Here is a new scan I just did in “virustotal”:

https://www.virustotal.com/file/bb72ec07b64505c741d5817bd09e64926b3090dd8b882078437d30beb24b1fee/analysis/1335436873/

Did you download this from our own download page, or from a different server/site?

Regards,
Kostas
Likno Customer Support
www.likno.com
Create any type of javascript menu (CSS menu, drop-down menu, sliding menu), button, html tree, modal window, tooltip, accordion, tab, scroller, jQuery slider) or design for your websites!

Reply From: Likno Customer Support

Dear John,

We can now fully confirm (after contacting Symantec) that this was indeed a false-positive and will be corrected in the next definitions update of your antivirus.

For now, you can turn Sonar off while you install AllWebMenus.

Thank you for letting us know regarding this issue, so that we could contact Symantec in turn and fix the problem for all our users.

Regards,
Kostas
Likno Customer Support
www.likno.com
Create any type of javascript menu (CSS menu, drop-down menu, sliding menu), button, html tree, modal window, tooltip, accordion, tab, scroller, jQuery slider) or design for your websites!

Knowledge Base support case for Likno Web Modal Windows Builder, abstracted and stripped of all user’s private info.

Initial Email From: Eric
Initial Email Subject: Norton removes setup file Modal Window Builder
Support Case Month: May 2012

Hello,

I tried to download the latest version of the setup file for Modal Windows Builder (246.8) but Norton 360 removes the file immediately. It states that it is infected with WS.Reputation.1

Please advise.

Regards, Eric

Reply From: Likno Customer Support

Dear Eric,

First of all, we assure you that our products are clean and have no viruses or other malicious code. We carefully check each distribution with several antivirus products before uploading.

This means that Norton generates a “false-positive”. Can you please send us a screenshot of the error you receive so that we can forward it to Norton and have them correct this?

Thank you in advance for helping us resolving this issue.

PS: As it usually takes at least 3 working days for Norton to create such issues (yes they’ve done it in the past), if you are in a hurry you can temporary turn it off while installing Modal Windows.

Regards,
Kostas
Likno Customer Support
www.likno.com
Create any type of javascript menu (CSS menu, drop-down menu, sliding menu), button, html tree, modal window, tooltip, accordion, tab, scroller, jQuery slider) or design for your websites!

Reply From: Eric

Hello Kostas,

I'm sure it's a false positive, but somehow Norton finds code in the setup file that also indicates a virus. This means that I cannot install the latest update. Maybe a new build solves this problem?!?!

This is a screenshot of the error. After this, the setup file is removed by Norton.

Regards,

Eric

Reply From: Likno Customer Support

Dear Eric,

This is a known bug of “Sonar”. There are hundreds of posts online regarding this issue, as any new release is subject to being tagged as “low reputation”.

You can read some helpful information about this from Symantec’s point of view:

http://community.norton.com/t5/Norton-Internet-Security-Norton/Clarification-on-WS-Reputation-1-detection/td-p/232155

The solution is to turn off Norton and specifically “Sonar” until you finish the installation.

We have also contacted Symantec with the screenshot you sent and we expect this to be corrected in their next definitions update.

Regards,
Kostas
Likno Customer Support
www.likno.com
Create any type of javascript menu (CSS menu, drop-down menu, sliding menu), button, html tree, modal window, tooltip, accordion, tab, scroller, jQuery slider) or design for your websites!