Jabber for Windows 10.5.2 Triggering Symantec AV with "Trojan.gen"

[Gary Parker]

​Hi, our desktop support people are working in deploying Jabber for Windows 10.5.2 to our managed service at the moment. This is with the 2nd of November 2014 r2 Virus and Spyware definitions.

Two days ago it was installing OK, but since the virus defs have been updated it now detects on C:\Windows\Installer\*****.tmp

• has anyone else seen this? (update: a colleague at another institution has also since observed the same behaviour)
• is the installer infected or is this a false positive?

[Gary Parker]

virustotal also doesn't seem to like the .msi:

[Rob Pettigrew]

Having the same issue in our SEP 12.1.5 environment with Jabber 10.5.2. 

Edit: Looks like virustotal reporting that its clean in SEP def 11132014