Symantec detects virus in Thesycon Audio Eval-Win-Driver

If you have a simple question and just want an answer.
Kasebe
Member++
Posts: 28
Joined: Tue Jan 07, 2014 7:49 am

Symantec detects virus in Thesycon Audio Eval-Win-Driver

Post by Kasebe »

Hello,

I installed XMOS USB-Audio driver for Windows made by Thesycon(TUSBAudio_EvalKit_v3.20.0.exe).
Symantec installed in my Windws7 PC detected virus(Trojan.Gen.SMH).

https://www.symantec.com/security_respo ... 22-2144-99

The corresponding files are XMOS_EVAL_KITS_DEMO_DriverSetup_v3.20.0_dgb.exe, XMOS_EVAL_KITs_DEMO_DriverSetup_v3.20.0.exe.

Does XMOS(Thesycon) plan to improve this virus problem?

Thanks and regards,
Kasebe


henk
Respected Member
Posts: 347
Joined: Wed Jan 27, 2016 5:21 pm

Post by henk »

Hi Kasebe,

Can you confirm the URL where you downloaded the file from, and the MD5 sum of the file?

Cheers,
Henk
Kasebe
Member++
Posts: 28
Joined: Tue Jan 07, 2014 7:49 am

Post by Kasebe »

Hello Henk,

I downloaded the driver USB-Audio-Class-2.0-Evaluation-Driver-for-Windows_3.20.0.zip from below link.
https://www.xmos.com/support/boards?pro ... nent=17271

MD5 calculation tool is digestIT 2004(x64) for Windows.
It can be downloaded from
http://www.colonywest.us/versions/downl ... lease_id=3

The tool's top page is here.
http://www.colonywest.us/digestit/

Calculation procedure is shown as below.
1. Download digestIT_x64.msi from above link.
2. Install digestIT_x64.msi in your 64bit windows PC.
3. Do right click on USB-Audio-Class-2.0-Evaluation-Driver-for-Windows_3.20.0.zip.
4. Select digestIT 2004 > Calculate MD5 Hash or Verify MD5 Hash(Input below MD5 result).

MD5 Result :

USB-Audio-Class-2.0-Evaluation-Driver-for-Windows_3.20.0.zip
: d40160875817655deb877843ebc28a6c

TUSBAudio_EvalKit_v3.20.0.exe
: 383b58dfaec42408e570a20f3f87ee90

Thanks & regards,
Kasebe
henk
Respected Member
Posts: 347
Joined: Wed Jan 27, 2016 5:21 pm

Post by henk »

Hello Kasebe,

It looks all good.
Is your virus-checker is up to date?
I don't know what algorithm your virus-checker uses - but can it produce a false-positive result?

Best wishes,
Henk
Kasebe
Member++
Posts: 28
Joined: Tue Jan 07, 2014 7:49 am

Post by Kasebe »

Hello Henk,

I'm using "Symantec Endpoint Protection" for my PC's security.
Today, I have tried driver install again. The virus are detected as well.

Each protection versions are
Virus&spiware : 21/6/2016 r23
Proactive : 1/6/2016 r1
Network : 21/6/2016 r11

* Sorry for Japanese attached symantec virus list.

Thanks and regards,
Kasebe
You do not have the required permissions to view the files attached to this post.
Kasebe
Member++
Posts: 28
Joined: Tue Jan 07, 2014 7:49 am

Post by Kasebe »

I would like to just say Symantec security policy refuses Thesycon Evaluation driver install.

Thanks,
Kasebe