Norton 360 High Risk Alert for idp.generic After Upgrade (ref#S8HDHG)

Support
1

What’s happening?

· My Roon software won't start up

How can we help?

· None of the above

Other options

· My Roon software won't start up

Describe the issue

After upgrading version, Norton 360 shows a high risk alert for idp.generic and roon server has stopped working

Describe your network setup

Not related to network at all

1 Like
2

False positives are quite common and Norton has a history with IDP.Generic:

It probably moved the file to quarantine, and that’s why Roon stopped working.

You can upload the questionable file to VirusTotal, which will scan it with ~80 different scanners:

If it’s fine, you can probably set it as allowed in Norton. If that doesn’t fix it, reinstall Roon.

2 Likes
3

Hi @Felix_Carapaica,
Thanks for reaching out to us about this. And thank you to @Suedkiez for jumping in—what they mentioned is absolutely right: false positives from antivirus software are unfortunately common.

Let us know if their suggestion helps resolve the issue. If not, we’re happy to take a closer look with you.

2 Likes
4

Hi thanks everyone (and specially Suedkiez)

Actually is the very first time in 15 years using Norton Symantec that I received “false positives”. I have quite a lot of audio applications (dbpoweramp, mp3tag, jriver, minimserver …) and others (photography, etc).

I’m not saying that this is an actual threat, just that I cannot validate the comment of “several false positives”. I have never have any false positives in 15 years. I’ll run an analysis through cynet (corporate application) to check it.

Thanks

2 Likes
5

Hi @Felix_Carapaica ,

Thanks for letting us know. Yes, do run it through another virus scanner and let us know the results, though I do suspect that this is just a false-positive.

2 Likes
7

Exactly the same problem as you and the first Norton warning in 15-20 years. Keep us posted on the results of the other Antivirus!

1 Like
8

With billions of people on the internet, “quite common” doesn’t require that everyone experiences an incident :slight_smile: Sometimes, a particular code pattern in a program (often after an update) triggers some heuristic in a particular version of a virus definition file in a particular product. (With heuristic scanners, this isn’t a science anymore but statistics). Typically, it therefore happens in waves.

There were 6 instances of a false positive with IDP.Generic and Avast about a year ago:

https://community.roonlabs.com/search?q=idp.generic

and other false positives happened, too.

Nevertheless, scanning it with other products like your corporate one or the comprehensive VirusTotal website is prudent.

9

FYI, I have been using Roon since 2016; Norton much longer than that. Last night’s build 1534 update caused the first block by Norton of Roon I’ve ever experienced. After creating an exception in Norton, things seem to be working fine with Roon.