After many months I wanted to backup data from my laptop to my Transcend Portable HDD. However, when I used the Transcendelite.exe file which is provided by Transcend for Backup Management for all its storage devices, it was detected as an infected file by NIS 2014 (21.1.0.18) on my laptop. How can I have this resolved ?
Await response and resolution from Norton team, or knowledgeable folks here. Thanks !
I didn't install it but I just downloaded it from here and did not get any detections.
http://www.transcend-info.com/support/DlCenter/DLSoftware.asp?SID=1
Dave
@floplot - Yes, I updated to version 21.1.1.7 this morning and Live Update has updated all updates as well. Yet, the error continues to show when I run the file TranscendElite.exe which I believe is a genuine file for backup management on Transcend storage drives. Also, I have submitted the file to Norton after I downloaded and executed it again from Trascend website today. Await their response or hopefully Norton will modify its virus definition files being updated thru Live Update.
@DaveH - Yes, I downloaded it again and ran with the same results. Hence, have submitted it to Norton as it seems it is being detected as a false positive, though it is a save file to execute to manage backup on Transcend storage drives.
Thanks @floplot & @DaveH for your suggestions and feedback though.
rameshiyer
Did you submit the file to Virus Total as suggested by floplot above? That will scan your file with multiple A/V products.
Another alternative which is fast you can use Virus Total
http://www.virustotal.com/index.html
@peterweb, yes I did. But, strangely it showed an OK (green check) for Symantec in the list of a/v products, but showed some other name as a trojan infecting the file Transcendelite.exe (which I had uploaded in zipped format in virustotal.com.
Would help if someone from Norton responds, or someone who knows why this file gets reported as false positive. Transcend storage drives are popular, and am sure many NIS users would be using this file too. Yet, I didn't find any post mentioning my issue in this community forum.
I went one step further than Dave above, and I did install it on my system. I got no warnings from Norton.
Have you restarted your computer after the LiveUpdates? It is not usually required, but it can always help with strange problems.
Are you getting the error when you try to install, or are you able to install and get the error when you try to run it? Maybe a screenshot of the error can help us diagnose the problem. Instructions to post screenshots can be found here
http://community.norton.com/t5/Forum-Feedback/Forum-Tip-How-to-post-screenshots-in-the-forum/m-p/254415#U254415
After many months I wanted to backup data from my laptop to my Transcend Portable HDD. However, when I used the Transcendelite.exe file which is provided by Transcend for Backup Management for all its storage devices, it was detected as an infected file by NIS 2014 (21.1.0.18) on my laptop. How can I have this resolved ?
Await response and resolution from Norton team, or knowledgeable folks here. Thanks !
Yes @peterweb, I did update to NIS version 21.1.1.7 from 21.1.0.18 this morning. Have updated all 'updates' through Live Update several times today, and also restarted my laptop 3-4 times (including after version update and virus defs updates). Have attached a screen-shot of the error shown while executing Transcendelite.exe in the attached PDF file. Hope it gives some clues on what's wrong or what is the issue.
Have attached error while executing Transcendelite.exe in image below. Hope it gives some clues on issue...
Where did you get the file you are currently trying to use? if it is from a CD that came with the drive unit? It would not be the first time that malware was included with bundled software. Have you extracted the file from the zip archive before trying to run it?
Try downloading the file again from the link Dave gave above http://www.transcend-info.com/support/DlCenter/DLSoftware.asp?SID=1
Not sure if it has any relevance, but when I downloaded and unzipped the file, the file name is just a little bit different from that shown in your Norton Insight image. Note the capital E for the Elite part on my image. Yours was a small e.
I had downloaded it from Transcend's website and not used it from any CD. When I reported the issue to Norton, I had zipped the file myself, as I felt I may not be able to upload an executable file. Also, when this file was downloaded yesterday from Transcend's website, I too noticed that very few users of Norton had downloaded the file and found it strange. But, when the file is downloaded, isn't NIS supposed to check and delete the file if it's infected with a trojan or virus ?
Anyway, I am awaiting a response from Norton as well. I had run a Full-scan on my PC only last week, and NIS didn't find any issues, except the usual tracking cookies which it deleted. No virus / worm / trojan was found on my hard drive.
Is there any other tool which can detect and remove this trojan from my notebook ?
Transcend is a very large and reputable company. If you downloaded it from the same site that I linked to I can almost certainly say it must have been a faulse positive.
Unless your computer is acting strange I would reccoment you wait.
Dave
Yes DaveH, that's what intrigues me too. Transcend is a popular and reputed company and I have been using their flash drives, external / portal hard drives etc for many years. This is the first time I found their main backup mgmt program - Transcend Elite - being detected as a trojan. While I suspect it is a false positive, I await a confirmation and update to NIS from Norton Team to remove reference to this file from being detected as a trojan. Have scanned both my local drive as well as the Portable Drive for possible infections, but NIS has found none.
Hope to get a response from Norton Team too whom I had sent the screen-shot, the executable program zipped, and also some .mcf file generated by NIS. Hopefully, will get a response and resolution soon !
Hello
From the screenshot, it looks like Sonar is detecting it as a heuristic problem. Have you run Norton Insight. If you are positive that it is safe, you could go into Settings and put that folder into the setting where it can be skipped when doing the scans. Once you hear from Norton, then you can remove it from being skipped over.
Yes, Norton Insight didn't find anything wrong with the file. Yet, each time I execute this file, it gets detected as SONAR.Heuristic.120. No further explanation is provided, so not sure why time file shows false positive !!
No response from Norton Team as yet, so shall have to wait a bit longer, I guess.
Hello
Here is some information about the possible malware.
http://www.symantec.com/security_response/writeup.jsp?docid=2014-011016-0119-99
Thanks @floplot. Norton Power Eraser too hasn't found anything on my system. My system is working fine otherwise, hence I don't wish to reinstall the OS afresh, as suggested in the Removal process in the URL mentioned in your post. The Full System Scan is fine, and so is Custom Scan of the portable HDD on which I wanted to backup my data using Transcend Elite s/w. Guess, will have to wait for Norton experts to revert, as i had submitted the issue to them yesterday.
The file that you were getting the warning for, is it the copy you downloaded yesterday, or is it a copy you had downloaded earlier? If it was an earlier download that was detected, I would try to extract and run the new download to see if you are still warned. As Dave and I noted, we received no warnings from the file we downloaded.
The Download Insight showing few users is probably because a new version has just been released. As more users download it the report will change to reflect that.
You will probably not get a personalized reply about your submission. The file will just be tested and if found to be safe, the detection definitions will be updated. You will eventually get the update through LiveUpdate.
From your original images, it looks like the trojan never made it to your system, as it was blocked.
@peterweb, I tried to use the one which was already on my portable drive which gave the error. But, as NIS deleted the file, yesterday I downloaded the same from Transcend website and ran it and again it was detected as a trojan SONAR.Heuristic.120. To me it seems Norton Team needs to exclude this program / file from its detections as it seems a false positive. I have also run a Full System Scan twice since yesterday, as also scanned the portable drive which didn't find anything. As per an earlier post, I ran Norton Power Eraser too but that too didn't find anything on my system. So, wonder where the Trojan is lying undetected, and how else I can remove it !!!
As you say, Norton Team may not revert to me, so guess I'll have to continue so long as my system doesn't become too unstable or unusable. For now will avoid a full reinstallation of the OS, which is a major task.
Did you specifically scan your external drive?
If Dave and I both had no warnings, and you are getting one, it seems there may be some other issue on your system. It might be worth your while to have your system checked out by a malware expert.
I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.
http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
