Hello. Last week, I purchased and attempted to download Soften Software’s Mailvita PST to MBOX Converter software, but Norton quarantined it as containing a trojan (Java:Malware). The manufacturer of the software says that it’s checked its program with 62 different antivirus and that it’s secure. Is there a reason Norton is quarantining it, do you know? I need the software. Thanks.
@Eric_Hobbs I downloaded and submitted the installer dmg file to Virus Total. It gave me the following results: Note: Norton is not listed in the detection scheme of A/V companies, Symantec is listed. Norton will use Symantec definitions for older versions IMA.
SA
Thanks very much, SoulAsylum. But I’m techno-ignorant. What does that result tell me about whether I’ll be able to use the current Soften program with Norton installed?
In the results it shows the antivirus tested by company name and its results. New releases of Norton use the Avast engine, Avast is shown in a “timeout” state and could not test the file. It it were me, I wouldn’t use the software for those reasons.
What is your version and build of Norton? And your OS version?
Edited: Did Norton detect the file as malware during or after installation?
SA
Caveat: I’m not Mac
https://www.mailvita.com/pst-to-mbox-converter-for-mac/
===================================================
Threat name: Java:Malware-gen [Trj]
Threat type: Trojan Horse - This threat pretends to be something else (e.g., picture, document, or other file) to trick you into running it and infecting your computer.
Status: Moved to Quarantine
On PC from: Unknown
Last Used: Unknown
Startup Item: No
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
Activity
Path | Type | Status
C:\Users\bjmer\OneDrive\Desktop\psttombox.dmg|>Pst To MBox Converter Demo.pkg|>Pst_To_MBox_Converter_Demo.pkg\Payload|>{gzip}|>.\Applications\PSTToMBOXDemo.app\Contents\Java\mbox_demo_jc.jar|>jcrypt\EncryptedClassLoader.class | File | Infected
======================================
Threat name: Java:Malware-gen [Trj]
Threat type: Trojan Horse - This threat pretends to be something else (e.g., picture, document, or other file) to trick you into running it and infecting your computer.
Status: Moved to Quarantine
On PC from: Unknown
Last Used: Unknown
Startup Item: No
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
Activity
Path | Type | Status
C:\Users\bjmer\OneDrive\Desktop\psttombox.dmg|>Pst To MBox Converter Demo.pkg|>Pst_To_MBox_Converter_Demo.pkg\Payload|>{gzip}|>.\Applications\PSTToMBOXDemo.app\Contents\Java\mbox_demo_jc.jar|>jcrypt\Main.class | File | Repaired
========================================================
File: psttombox.dmg
File size: 53.2 MB (55,764,116 bytes)
MD5 checksum: 4265357B76D03D674DCC6FB64B874787
SHA1 checksum: E96DB31E477A8EC591DDE5CE1EBB8609E271691D
Date/Time: 4/21/2025 4:08:00 PM
Caveat: I’m not Mac
Thanks again, SA. That’s good to know. I’ll have to find a different alternative to the program. I’ve got Norton 360 Deluxe, installed last week, and my OS version is Monterey 12.7.6. Does that help?
EDIT: Sorry, I missed your last question. Norton detected the virus during the attempted download.
Guru bjm also shows detection upon attempted install from what I view. Thanks bjm. Our recommendation is not using the software at this time.
SA
You guys are awesome! Thank you so much for your help. Any suggestions for a program I can use safely to convert pst to mbox?
I also might add that JAVA is NOT preinstalled on MACOS. Norton most likely nailed the attempted JAVA coding install as malicious. Windows appears to be doing the same with Norton latest versions installed. JAVA is not a part of the Windows OS as well and is actually no longer needed in that OS.
Depreciated features in Windows:
SA
They don’t make it easy, that’s for sure. Thanks again SA. I really appreciate your help today. Now to find a program I can use to convert my pst files.
You’re most welcome!! Glad to help.
SA
https://www.mailvita.com/pst-to-mbox-converter-for-mac/
~ Windows Download
File: psttomboxdemo.exe
File size: 2.28 MB (2,393,168 bytes)
MD5 checksum: 360AB0734231BD3B75D0F8FC6798B5AA
SHA1 checksum: 622DB666A2E35A4B5CF19F0044F65A0CF5DFC237
Date/Time: 4/22/2025 9:00:13 AM
===============================================
fwiw ~ I was curious to see whether my Send for analysis yesterday…changed detection:
https://www.mailvita.com/pst-to-mbox-converter-for-mac/
~ Mac Download
rt click Scan for viruses
Threat name: Java:Malware-gen [Trj]
Threat type: Trojan Horse - This threat pretends to be something else (e.g., picture, document, or other file) to trick you into running it and infecting your computer.
Status: Moved to Quarantine
On PC from: Unknown
Last Used: Unknown
Startup Item: No
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
The file release is currently unknown
High
The file risk is high.
Activity
Path | Type | Status
C:\Users\bjmer\OneDrive\Desktop\psttombox.dmg|>Pst To MBox Converter Demo.pkg|>Pst_To_MBox_Converter_Demo.pkg\Payload|>{gzip}|>.\Applications\PSTToMBOXDemo.app\Contents\Java\mbox_demo_jc.jar|>jcrypt\EncryptedClassLoader.class | File | Infected
====================================================
File: psttombox.dmg
File size: 53.2 MB (55,764,116 bytes)
MD5 checksum: 4265357B76D03D674DCC6FB64B874787
SHA1 checksum: E96DB31E477A8EC591DDE5CE1EBB8609E271691D
Date/Time: 4/22/2025 9:01:39 AM
Caveat: I’m not Mac.
https://www.macuncle.com/pst/mbox/
File: macuncle-pst-converter.dmg
File size: 41.0 MB (43,019,602 bytes)
MD5 checksum: DCD919C18ABDC023F3620821F4AE2345
SHA1 checksum: A50E236502AB1D5A8F196CEA2EA448C6D0D9801A
Date/Time: 4/22/2025 9:53:39 AM
Caveat: I’m not Mac
All: Norton is nailing these .dmg containers I believe, because they are disc image files on MAC, similar to .iso installers on Windows. On MAC it will register in MAC Finder as a “volume” and mount it for the installation. Right there is where Norton is saying, “Uh oh, not looking good” and dumps due to the JAVA code not being native to MAC OS in the first place. Bjm shows a second instance of that happening with another provider. For whatever reason Norton has been programmed to not allow JAVA scripting with an installation process both on Windows and MAC for these programs. Its a bug that needs correcting to allow the user the choice not just dump it.
SA