DJI Assistant 2 update contains virus
2270 9 2018-3-29
Uploading and Loding Picture ...(0/1)
o(^-^)o
wataero
lvl.3
Flight distance : 1719619 ft
United States
Offline

I installed latest version (1.2.3) that was released on March 23d, of DJI Assistant 2 on my PC.  Installation completed OK,  but Norton Antivirus immediately reported high risk virus in file "TOFStarter.exe", and removed the file, see details below.
Removal of TOFStarter does not stop DJI Assistant from starting up.  Does anyone know what this program does and why DJI can't find a version of it that doesn't set off all the virus alarms?

____________________________________________
Filename: tofstarter.exe
Threat name: Trojan.Gen.2Full Path: c:\program files (x86)\dji product\dji assistant 2\assistant\tofstarter.exe

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


Few Users
Hundreds of users in the Norton Community have used this file.

New
This file was released more than 7 days  ago.

High
This file risk is high.

File Actions

File: c:\program files (x86)\dji product\dji assistant 2\assistant\ tofstarter.exe Threat Removed
Infected file: c:\program files (x86)\dji product\dji assistant 2\assistant\ tofstarter.exe Repaired
____________________________

File Thumbprint - SHA:
ca9177819b6a0866228ade822e94992982e9ac09384fde7f858f665ca6369b83
File Thumbprint - MD5:
9196dde064cf86272476c25d74a6cac1



2018-3-29
Use props
Eric13
Second Officer
Flight distance : 13982031 ft
  • >>>
Offline

I think this is more a Norton problem than DJI or Tofstarter.
I checked the file with Malwarebytes and Windows Defender. No issue.

Do you have Windows 10? You might want to get rid then of any exterior antivirus program.
At least it says everywhere in the net that with Windows 10 it is useless or even harmful rather than it helps.
But what do I know... ;-)
2018-3-29
Use props
merc slk amg
lvl.2
Flight distance : 32054 ft
Sweden
Offline

Eric13 Posted at 2018-3-29 10:47
I think this is more a Norton problem than DJI or Tofstarter.
I checked the file with Malwarebytes and Windows Defender. No issue.

I aggre this is not the first time "Norton" report "fake alarm"
Report to Norton instead of here........

Regards
2018-3-29
Use props
ALABAMA
First Officer
Flight distance : 10442687 ft
United States
Offline

It's almost always a false positive with Norton.
2018-3-29
Use props
Vendex
Second Officer
Flight distance : 16722920 ft
  • >>>
Bulgaria
Offline

Probably the instructions of Assistant 2 is close to virus instructions, but it's not a virus, fake alarm yes.
2018-3-29
Use props
DJI Susan
Administrator
Online

Thanks for bringing this to our attention. It looks like the false positive, but we still need the below info for further investigation:
1. What's the OS version of your PC? How many digits?
2. What's the version of the Norton Antivirus?
3. The screenshot of error message.
Thanks in advance!
2018-3-29
Use props
wataero
lvl.3
Flight distance : 1719619 ft
United States
Offline

DJI Susan Posted at 2018-3-29 19:35
Thanks for bringing this to our attention. It looks like the false positive, but we still need the below info for further investigation:
1. What's the OS version of your PC? How many digits?
2. What's the version of the Norton Antivirus?

Windows 10 Home, Version 1709, Build 16299.309
Norton Anti-virus version 22.12.1.15

I posted text of screen shot in my original message

Also I saw similiar issue noted in Mavic Air forum

DJI Assistant 2 File Infected: tofstarter.exe ?
2018-3-30
Use props
DJI Susan
Administrator
Online

wataero Posted at 2018-3-30 10:18
Windows 10 Home, Version 1709, Build 16299.309
Norton Anti-virus version 22.12.1.15

Received with thanks! I've reported to our engineers for review.
Also, it seems that the hyperlink does not work well as it directs to the forum homepage directly...
2018-4-2
Use props
DJI Susan
Administrator
Online

Update: I just got an update from our engineers that this issue will not affect the normal usage for now, and our engineers will optimize it in the next version. Thanks so much for your feedback.
2018-4-13
Use props
KedDK
First Officer
Flight distance : 1133038 ft
Denmark
Offline

DJI Susan Posted at 2018-4-13 02:40
Update: I just got an update from our engineers that this issue will not affect the normal usage for now, and our engineers will optimize it in the next version. Thanks so much for your feedback.

This really can be read in different ways, i read:

The Engineers didn't manage to make a virus that could do any harm but are hardly working to improve it.

Hopefully i just can't read properly ...
2018-4-13
Use props
Advanced
You need to log in before you can reply Login | Register now

Credit Rules