From: Jeffrey Sondeen <sondeen@usc.edu>
To: Noam Postavsky <npostavs@gmail.com>
Cc: "31572@debbugs.gnu.org" <31572@debbugs.gnu.org>
Subject: bug#31572: 26.0.91; emacs-26.1 RC1 fails norton virus check
Date: Wed, 23 May 2018 23:04:55 +0000 [thread overview]
Message-ID: <SN1PR07MB4062BB08AC1187361F5B947FBD6B0@SN1PR07MB4062.namprd07.prod.outlook.com> (raw)
In-Reply-To: <SN1PR07MB4062E5F69B839ACDEC6E7386BD6B0@SN1PR07MB4062.namprd07.prod.outlook.com>
[-- Attachment #1: Type: text/plain, Size: 2924 bytes --]
Hi all, Norton answered that they corrected runemacs.exe, so i submitted the 6 other files that had the same problem, etags.exe emacsclient.exe addpm.exe ctags.exe ebrowse.exe emacsclientw.exe, now i just have to track the ones that got removed rather than quarantined...
/jeff
from Norton:
falsepositives@symantec.com
In relation to submission 91222.
Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:
File name: runemacs.exe
MD5: 7A42917614CED759A404B3ABE569BFB9
SHA256: D51EBF9AB1465666C7FBC30BFDA93610879761EE0C5E89DF928853FD6B635C5B
Note: Whitelisting may take up to 24 hours to take effect via Live Update
________________________________
From: Jeffrey Sondeen
Sent: Wednesday, May 23, 2018 1:19:27 PM
To: Noam Postavsky
Cc: 31572@debbugs.gnu.org
Subject: Re: bug#31572: 26.0.91; emacs-26.1 RC1 fails norton virus check
Hi Noam, thanks for the link, i used it to upload some of the emacs programs, reporting them as being falsely anti-virus detected. I also submitted some of the exe's to virustotal.com, as mentioned in some other Norton community message, and none of the emacs exe's triggered any other anti-virus detections.
It's still a hassle, though, since, while many of the emacs programs are Quarantined by the Norton anti-virus (and can be easily restored), some others are Removed, for which there's no undo operation (all with the falsely detected WS.Reputation.1 message).
thanks,
/jeff
________________________________
From: Noam Postavsky <npostavs@gmail.com>
Sent: Wednesday, May 23, 2018 11:41:51 AM
To: Jeffrey Sondeen
Cc: 31572@debbugs.gnu.org
Subject: Re: bug#31572: 26.0.91; emacs-26.1 RC1 fails norton virus check
On 23 May 2018 at 14:03, Jeff Sondeen <sondeen@usc.edu> wrote:
>
> Hi all, i've been running Emacs version 26.091, but just downloaded
> emacs-26.1-rc1-x86_64.zip, but Norton Security has quarantined several
> *.exe's (runemacs.exe, etags.exe, etc) under
> emacs-26.1-rc1-x86_64/bin, complaining about a virus called
> "WS.Reputaton.1 Insight Network Threat" as per the attached pix (I
> didn't have this problem with 26.091)
According to https://urldefense.proofpoint.com/v2/url?u=https-3A__community.norton.com_en_forums_clarification-2Dwsreputation1-2Ddetection&d=DwIFaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=yx7WeBO4vNFR2eleLG4z-w&m=o9Wkgj_Y9o3uwCY0WRrKyP4cX03_nVur3WsvHwtHGfY&s=qZ0lBbq4-JjwBbDalE5G8WHRkRB8NKGNShuCa4iCQ44&e=,
this warning doesn't represent a virus finding specifically:
WS.Reputation.1 is a detection for files that have a low
reputation score based on analyzing data from Symantec’s community
of users and therefore are likely to be security risks.[...]
The reputation-based system uses "the wisdom of crowds"[...]
[-- Attachment #2: Type: text/html, Size: 6440 bytes --]
prev parent reply other threads:[~2018-05-23 23:04 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-05-23 18:03 bug#31572: 26.0.91; emacs-26.1 RC1 fails norton virus check Jeff Sondeen
2018-05-23 18:26 ` Eli Zaretskii
2018-05-23 18:41 ` Noam Postavsky
2018-05-23 20:19 ` Jeffrey Sondeen
2018-05-23 23:04 ` Jeffrey Sondeen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=SN1PR07MB4062BB08AC1187361F5B947FBD6B0@SN1PR07MB4062.namprd07.prod.outlook.com \
--to=sondeen@usc.edu \
--cc=31572@debbugs.gnu.org \
--cc=npostavs@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).