PTC software is recognized as malware by different antivirus software

[johrndorf]

Why does PTC not contact the producers of most used AV software, so that the software is included in an kind of white list?

We as VAR have nearly every day one or more support cases concerning this issue.

Theese cases are time consuming for us and our customers and annoying especially when the license server is blocked and the complete construction department cannot work.

-----------------

Warum kontaktiert PTC nicht die Hersteller der am häufigsten genutzten Antivirus Software damit die Software in eine Liste der gutartigen Programme aufgenommen werden?

Wiri als Händler haben fast jeden Tag ein oder mehrere Supportfälle mit diesem Thema.

Die Fälle sind oft zeitaufwändig für uns und unsere Kunden und ärgerlich wenn der Lizenzserver geblockt wird und eine ganze Konstruktionsabteilung nicht arbeiten kann.

[MaxR.Kublin]

If you have a reproducible case (which PTC Software? which AV Software?), report it to PTC.

Sharing some details with the Community would also be helpful.

Special question related to "license server": CED License Server (=MEls) or PTC License Server?

[johrndorf]

As virus signatures are updated frequently and use heuristic criteria, there is no chance to reproduce the problem.

That was the reason why I wrote that PTC should contact the most important AV program producers (Kaspersky, Avira, G-Data, Norton, and some others).

When I wrote that arrticle I just had a case with CED License Server and Kaspersky, the MEls32.exe was blocked.

[MaxR.Kublin]

Kaspersky is one of the candidates known to interfere with CED License Server.

The issue is that Kaspersky is "sniffing" Network traffic to detect virus patterns.

However, the data exchanged between CED License Server and the "Clients" (e.g. CED Modeling, CED Drafting etc.) is *encrypted*,

so any kind of data pattern may be transferred between the CED license Server and the Clients.

Therefore, the AV should be configured to *not* sniff traffic on port 17171 (=the port used by MEls).

The same issue can occur with data traffic between Modelmanager and the Database Server, so that traffic should also be excluded from sniffing.

[olivierlp]

Hello,

We are archiving your idea as part of a general review. This action is based on the age of your idea and the total number of votes received, as per this announcement.

You can always post a new idea with all the details required in the form.

Thank you for your participation.