UMS 2.6.0 & Symantec reporting security risk

For help and support with Universal Media Server
Forum rules
Please make sure you follow the Problem Reporting Guidelines before posting if you want a reply
Post Reply
john3voltas
Posts: 21
Joined: Sun Mar 31, 2013 1:14 am

UMS 2.6.0 & Symantec reporting security risk

Post by john3voltas »

Hello.
I am trying UMS on a laptop PC running Windows 7 x64 (intel coreduo 1.8Ghz/4GB RAM).
This is "the company's laptop" so it has symantec endpoint protection 12.0 installed.
When I install UMS on it, symantec detects a "suspicious.emit" in mplayer.exe.
Since I don't manage symantec (corporate rules) I can't disable it and apparently UMS doesn't work without it.
So I downloaded mplayer.exe for windows from mplayerhq.hu and put it in UMS/win32 folder. Then I started UMS and apparently it is working fine.
1-I sure hope this is a false positive but is there any reason why a "stock" mplayer.exe doesn't trigger the AV while the one that comes with UMS triggers the AV?
2-Am I missing anything by using the stock mplayer.exe instead of the one that comes with UMS?

Full symantec log:

Code: Select all

Scan type: Auto-Protect Scan
Event: Risk Found!
Security risk detected: Suspicious.Emit
File: C:\Program Files (x86)\Universal Media Server\win32\mplayer.exe
Location: C:\Program Files (x86)\Universal Media Server\win32
Computer: corporate_computer_name
User: corporate_user_name
Action taken: Pending Side Effects Analysis : Access denied
Date found: sábado, 30 de Março de 2013  13:28:08
Laptop 1,8Ghz intel coreduo with 4GB RAM
Windows 7 x64
User avatar
SubJunk
Lead Developer
Posts: 3707
Joined: Sun May 27, 2012 4:12 pm

Re: UMS 2.6.0 & Symantec reporting security risk

Post by SubJunk »

It's probably just because they have manually allowed the standard mplayer but not our one. We've had lots of problems with Symantec blocking things before. Our version of MPlayer has more reliable audio sync and is needed for DVD support, Xbox support, and some other things. If the stock one works for you then stick with it :)
Post Reply