Virus In Architectural Iray Shaders?
Xenomorphine
Posts: 2,421
The other day, I obtained this for the metal grating and fencing shaders:
https://www.daz3d.com/architectural-iray-shaders
I haven't been using the DIM for a while and, instead, now just download any purchases directly from within the Daz Studio application. As usual, all of my other purchases downloaded fine, but this... After around 29% of downloading the architectural shaders, DS just hangs until Norton gives me a warning that, "A programme is behaving suspiciously on your computer," specifying this as the culprit:
SONAR.AM.C!g9
My browser is not on and DS is the only thing downloading anything. Allowing Norton to quarantine the file causes DS to shut down (and have to be reinstalled with a completely fresh copy). Did risk just allowing it to continue, but that simply causes Norton to instantly keep looping the same warning message, until a quarantine is allowed.
So, does anyone have this product and have you encountered the same issue? Is 'SONAR.AM.C!g9' a virus which has unwittingly infected the file on the servers or is it a legitimate part of the product? Not sure why else Norton would keep on triggering.
Daz 3D is part of 
Connect
DAZ Productions, Inc.
7533 S Center View Ct #4664
West Jordan, UT 84084
Licensing Agreement | Terms of Service | Privacy Policy | EULA
© 2025 Daz Productions Inc. All Rights Reserved.
Comments
A quick search reveals SONAR.AM.C!g9 to be a trojan. It also reveals that MAYBE its a false positive. I don't want to say go ahead and ignore it, you need to decide that based on your research.
But its hard to imagine the creator of the product missing an infection. Harder to imagine DAZ missing an infection. Or that nobody else got an actual infection - but then again someone has to be first :)
I have it but installed through DIM. No issue that it has caused for me.
Ugh! Is there any way for Daz to be notified to double-check their files, in case that is a trojan in it?
If you can access the file, try to upload it to http://virustotal.com. If there are 3 or less hits, it's normally considered safe.
Wouldn't be able to. It's hosted on Daz's servers.
EDIT: I could manually download it, I suppose, but wouldn't have a clue which file it's located in.
SONAR reports aren't saying they have found a specific virus, just that there are possibly suspect elements. By all means check, but such things should be regarded as highly tentative in themselves. I have that set and Norton hasn't objected.
Good to know! Recommend shutting Norton off when downloading it, maybe?
Other then the software, nothing you purchase from Daz3D has executable files or DLL libraries in them. So the likelyhood of anything being viral is impossible.
I just bought it a couple days ago when it was on sale, installed through DIM, and did a render on my Art Studio product showcase thread. No problem with the files.
Been using this for a while now, no issues, rendering computer has remained "clean". Great product BTW, very useful.
Mattymanx, malware does not have to be an executable. It is often a malformed data file specially designed to exploit a vunerability in an existing, otherwise benign application. E.g. the multitude of buffer overflow exploits. Hell, a while back you could even craft a JPG that injected malware into a system when it was read by a specific viewer app.
OK, briefly deactivated Norton's automated protection and it seemed to download. Thank you to those who verified this product was harmless, after all!
Just goes to show how anti-virus guardians can be triggered by relatively innocent stuff.