INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: Latest Media Center version (11.301) triggers trojan warning  (Read 1255 times)

Magicland

  • Regular Member
  • World Citizen
  • ***
  • Posts: 137
  • Gabba Gabba Hey!

This hasn't happened with any previous versions, but I updated to 11.301 last night, and today when I went to run it, Norton Antivirus came up with a security alert, saying that Norton Internet Worm Protection has detected and blocked an intrusion attempt. It listed it as "Default Block Master Paradise Trojan horse", and was triggered by "Media Center.exe". It was inbound on port 3129, tcp. Just a false alarm? Is Media Center using this port, or is this something we should be worried about? As I said, it hasn't happened with any previous versions.
Logged

John Gateley

  • Citizen of the Universe
  • *****
  • Posts: 4957
  • Nice haircut
Re: Latest Media Center version (11.301) triggers trojan warning
« Reply #1 on: June 28, 2005, 11:19:48 am »

This is Norton being over-enthusiastic:

http://www.edbott.com/weblog/archives/000490.html

Basically, it's a random event (choosing a local port) hitting a magic number, happens once in a while, but not very often.

j

Mastiff

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 1977
  • The Multi-Zone Tzar
Re: Latest Media Center version (11.301) triggers trojan warning
« Reply #2 on: June 28, 2005, 11:59:13 am »

I've never seen that on any of my computers running MC/NPF, so I can vouch for that it's not something that happens often. I have seen it with a few other programs, though.
Logged
Tor with the Cinema Inferno & Multi-Zone Audio system

KingSparta

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 20056
Re: Latest Media Center version (11.301) triggers trojan warning
« Reply #3 on: June 28, 2005, 02:00:02 pm »

Norton Monitors ports, and some trojans use a fixed port# if anything goes on on that port Norton Will warn you, it is called a False Positive.

If you find that a computer on your network sends false positives you can configure Norton to ignore it.
Logged
Retired Military, Airborne, Air Assault, And Flight Wings.
Model Trains, Internet, Ham Radio
https://MyAAGrapevines.com
https://centercitybbs.com
Fayetteville, NC, USA
Pages: [1]   Go Up