INTERACT FORUM

More => Old Versions => Media Center 11 (Development Ended) => Topic started by: Magicland on June 28, 2005, 10:59:20 am

Title: Latest Media Center version (11.301) triggers trojan warning
Post by: Magicland on June 28, 2005, 10:59:20 am

This hasn't happened with any previous versions, but I updated to 11.301 last night, and today when I went to run it, Norton Antivirus came up with a security alert, saying that Norton Internet Worm Protection has detected and blocked an intrusion attempt. It listed it as "Default Block Master Paradise Trojan horse", and was triggered by "Media Center.exe". It was inbound on port 3129, tcp. Just a false alarm? Is Media Center using this port, or is this something we should be worried about? As I said, it hasn't happened with any previous versions.

Title: Re: Latest Media Center version (11.301) triggers trojan warning
Post by: John Gateley on June 28, 2005, 11:19:48 am

This is Norton being over-enthusiastic:

http://www.edbott.com/weblog/archives/000490.html

Basically, it's a random event (choosing a local port) hitting a magic number, happens once in a while, but not very often.

j

Title: Re: Latest Media Center version (11.301) triggers trojan warning
Post by: Mastiff on June 28, 2005, 11:59:13 am

I've never seen that on any of my computers running MC/NPF, so I can vouch for that it's not something that happens often. I have seen it with a few other programs, though.

Title: Re: Latest Media Center version (11.301) triggers trojan warning
Post by: KingSparta on June 28, 2005, 02:00:02 pm

Norton Monitors ports, and some trojans use a fixed port# if anything goes on on that port Norton Will warn you, it is called a False Positive.

If you find that a computer on your network sends false positives you can configure Norton to ignore it.