Pegasus Mail & Mercury

Welcome to the Community for Pegasus Mail and
The Mercury Mail Transport System, the Internet's longest-serving PC e-mail system!
Welcome to Pegasus Mail & Mercury Sign in | Join | Help
in
Home Blogs Forums Downloads Pegasus Mail Overview Mercury Overview

Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

Last post 05-18-2007, 23:16 by Peter Strömblad. 85 replies.
Page 3 of 6 (86 items)   < Previous 1 2 3 4 5 Next > ... Last »
Sort Posts: Previous Next
  •  05-17-2007, 23:45

    Re: How to contact Symantec??

    Eric Begbie:

    Does anyone know how to report this problem to Symantec?

     

    Return your NAV product to the  reseller and ask for a refund Big Smile

  •  05-17-2007, 23:48

    • leasty is not online. Last active: 2007-05-17, 23:57 leasty
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 20

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

     
    On Norton 2007 you can also add SecurityRisk.Dropper to the Signature Exclusions part of the Advanced Options. Works for me - it hasn't tried to remove it again even though I've turned AutoProtect back on.
     
    Just wish I hadn't done a LiveUpdate now !
     
    At least finding it on this site made me breath a sign of relief after seeing Norton had got rid of Pegasus.
     
    Thanks for your help.
  •  05-18-2007, 0:06

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    what version of symantec is everyone running? We're on Symantec System Center 10.1.4.4000
  •  05-18-2007, 0:15

    • BarendM is not online. Last active: 05-19-2007, 16:21 BarendM
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 40

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I use 2006 on my laptop, 2007 on my desktop and another 2007 version on my wife's desktop. We share the mailboxes and could not access our mail from any computer.

    For restore, first I copied the whole map c:\pmail to a memory stick, excl winpm-32.exe which was deleted by Norton.

    Then I excluded the map c:\pmail from being scanned, as suggested before. The solution suggested in this forum works on 2007; the 2006 version refuses to option out Trojan.Dropper and will probably kill the file when scanning.

    Then I downloaded 4.1 version of the pmail installer and copied it into c:\pmail (where my pegasus mail is). After reinstalling I copied back from my memstick and had all my settings again.

    I wonder if I can read my mailboxes if I install 3.1 instead of 4.1 Anybody any experiences with that? 

  •  05-18-2007, 0:22

    • barbarab is not online. Last active: 05-19-2007, 16:26 barbarab
    • Top 500 Contributor
    • Joined on 05-17-2007
    • Member
    • Points 60

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I tried some of the solutions listed below but there's not enough detail for a novice.  I run Windows XP.  I could not figure out how to uncheck Autoprotect or how to restore anything.  I'd appreciate step by step instructions for "dummies" if possible.  Please help,  I'm desparate.
  •  05-18-2007, 0:26

    • AllanP is not online. Last active: 18 May 2007, 0:53 AllanP
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 35

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I'm running Norton AV 2007 on 2 machines and Norton Internet Security on the 3rd.

    They all experienced this problem - obviously after taking the 17.05.2007 virus definitions update...

    But, at least one thing positive came out of this - doesn't the new Pegasus Foruym work well? I had seen the release note and taken a quick look but when I found this NAV problem tonight, I suddenly thought to look at the new Pegasus Support forum and got my answer straight away! Great stuff! Thank you David Harris (again).

    Leyt's hope Symantec can correct th error of their ways very soon.

     

  •  05-18-2007, 0:52

    • barbarab is not online. Last active: 05-19-2007, 16:26 barbarab
    • Top 500 Contributor
    • Joined on 05-17-2007
    • Member
    • Points 60

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I alerted Norton Antivirus PR department (directly) and their CTO via voicemail of the problem and its urgency to the large PMAIL community at 6:50 EST.  Hopefully, they will get us a solution/workaround soon.  The PR agency seemed as concerned as we are.
  •  05-18-2007, 0:53

    • Chrisbry is not online. Last active: 05-29-2007, 5:09 Chrisbry
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 25

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I reported it using the link as it being a "false" trojan.  I wasn't very nice in my "suggestions".  I have had nothing but problems the last 2 mos with Symantec products.  I am running Security 2007 on a Lap top and NAV 2006 on 4 PC's.  Needless to say, we have 80 days left on our sub and if they don't get this fixed pronto -- I'll be spending my $$$$ elsewhere for an A/V program.  McAfee isn't any better.  Anyone have any suggestions for a GOOD A/V program besides those two?
  •  05-18-2007, 0:58

    • Trader is not online. Last active: 08-17-2008, 6:57 Trader
    • Top 100 Contributor
    • Joined on 05-17-2007
    • Member
    • Points 160

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    Hi,

    I'm running XP PRO with Norton Antivirus 2007 V14.2.0.29   The following instructions should enable you to restore your winpm-32.exe file and set the exclusion so that Norton Antivirus ignores the file.


    1. Open Norton Antivirus
    2. Select "Settings"
    3. Select "Auto-protect"
    4. Turn Off Auto-protect
    5. Select "View History" on the lower left to bring up the Security History window.
    5. Select the "Detection of Trojan.Dropper" on the Security History window.
    6. Select "More Details" on the lower right
    7. Select "Restore Risk" to restore the winpm-32.exe file. 
    8. Upon completion of the restore process, close the "Security History" window, go back to the main Settings window and select "Virus and Spyware Protection Options" on the bottom of the window.
    9. Select "Scan Exclusions" from the Advanced Options.
    10.  In the top window for the Risk Scanning exclusions, select "New" on the right and in the next pop up window, navigate to the location of the winpm-32.exe file and select the file.  The should result in the winpm-32.exe file showing in the exclusions window.
    11.  Do the same for the Bottom Auto-Protect window and you should see the winpm-32 file when completed.
    12.  With that completed, select "OK" to close the Virus and Spyware Protections Options page, scroll back up to the Auto-protect selection within the "Settings" window, select "Auto-protect" and turn it back on.  
    13. Close or minimize Norton Antivirus.
    14.  Your Pegasus mail program should now be back in operation with the Scan and Auto-protect ignoring the winpm-32.exe file.
    15.  You may have to reset the some of the properties for your pegasus mail icon.  Check it by selecting the icon or drop-down XP menu item, right click and select properties on the bottom.  You should see a target pointing to the winpm-32.exe file and a "Start In" which should be your Pegasus Mail directory.  If the target is missing, use the find target button and navigate to the winpm-32.exe file.  If the "Start In" directory is missing, type in the correct location of your PMAIL directory.
    16.  You should now be completed.
  •  05-18-2007, 0:59

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    We use AVG Free at home - I'm thinking of buying the corporate server edition for work if this doesn't get fixed.
  •  05-18-2007, 1:09

    • barbarab is not online. Last active: 05-19-2007, 16:26 barbarab
    • Top 500 Contributor
    • Joined on 05-17-2007
    • Member
    • Points 60

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I can't find "settings".  I open NAV 2006 and I have two choices Norton Protection and Norton Antivirus.  Neither allows me to touch any settings.  I seem to have a "lesser" version.  In fact, all I can do is view status, reports, and run scans.  It doesn't allow me to do anything.  I'm going out for a couple of hours and hoping that when I return, that I can download Pegasus again without having Norton delete winpm-32 and be up and running again.  I hope this is a realistic hope. 
  •  05-18-2007, 1:38

    • Trader is not online. Last active: 08-17-2008, 6:57 Trader
    • Top 100 Contributor
    • Joined on 05-17-2007
    • Member
    • Points 160

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    HI,

    I don't know if there is an administrator login on XP Home.  You would have to have administrator privileges to  change any program settings.  As long as you have them, you should be able to navigate to the Norton Antivirus program settings. 

  •  05-18-2007, 3:17

    • Chrisbry is not online. Last active: 05-29-2007, 5:09 Chrisbry
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 25

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I just went and did a Live Update.  It updated my AV 2006 program and (knock on wood) Pegasus seems to be working ok.  I just checked mail and it didn't delete me!
  •  05-18-2007, 3:18

    • hbreder is not online. Last active: 05-23-2007, 12:03 hbreder
    • Not Ranked
    • Joined on 05-18-2007
    • Member
    • Points 25

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I spent all afternoon trying to fix the problem, even downloaded a German version in order to get my mailbox back, until I found this thread. I am going to get rid of Norton Antivirus, but now that I have installed a new version, how do I transfer my old mail into the new one? I copied the contents of my old PMail folder into the new one but am still not able to access any of my mail. HB
  •  05-18-2007, 3:19

    • luahiwa is not online. Last active: 05-18-2007, 3:19 luahiwa
    • Not Ranked
    • Joined on 05-17-2007
    • Member
    • Points 5

    Re: Norton AntiVirus detecting winpm-32.exe as Trjan.Dropper!!!!

    I encountered the same thing and found the Norton Internet Security personal firewall was blocking Pegasus. Once I changed that setting, Pegasus worked okay.

     

Page 3 of 6 (86 items)   < Previous 1 2 3 4 5 Next > ... Last »
View as RSS news feed in XML

Copyright © 2007 David Harris / Peter Strömblad. All Rights Reserved. | Terms of Use | Privacy Statement
Questions/Problems with community.pmail.com? | Visit our Hoster: PraktIT | Pegasus Mail Home Page