buggnubg - Bugs: bug #38750, Set-up.exe Security Threat

 
 

bug #38750: Set-up.exe Security Threat

Submitter:  None
Submitted:  Tue 16 Apr 2013 07:04:51 AM UTC
   
 
Originator Name:  Ongun Alsac Originator Email:  * -email is unavailable-
Item Group:  Installation Error Category:  Other
Release:  * 0.90-devel Privacy:  Public
Operating System:  Windows 7 Severity:  3 - Normal
Open/Closed:  Closed Assigned to:  mdpetch
Priority:  5 - Normal Status:  Fixed
* Mandatory Fields

Add a New Comment Rich Markup
   

Wed 17 Apr 2013 08:20:20 AM UTC, comment #3: 

This bug is now resolved.

gnubg-Main-20121023-setup.exe downloads and installs properly.

Thank you!

Ongun Alsac

Anonymous
Wed 17 Apr 2013 05:14:50 AM UTC, comment #2: 

Symantec sent a response to my request for this false positive detection and they concur that it is in error. The response was as follows:

"Upon further analysis and investigation we have verified your submission and as such this detection will be removed from our products.

The updated detection will be distributed in the next set of virus definitions, available via LiveUpdate or from our website at http://securityresponse.symantec.com/avcenter/defs.download.html "

Virustotal.com as of this post also shows no positive hits where it showed Symantec with a positive for WS.Reputation.1 earlier in the day. Updating the virus definition files should resolve this problem.

Michael Petch <mdpetch>
Group administrator
Tue 16 Apr 2013 01:48:04 PM UTC, comment #1: 

The system that is used to produce these builds was recently scanned (again) by latest BitDefender (Without Windows running), and there are no known viruses or Malware on it. Opening the setup.exe doesn't even register any actual malware threat either.

WS.Reputation.1 isn't even a Virus or Trojan classification, it is actually a reputation based hit. It is a false positive. Norton gave an earlier version of the product such a hit as well some time ago. Norton does have a dispute process, and I have now filled out a report for them to look into it (It can take upto 2 business days for them to look at it). If they find it is a false positive their database will be updated. That was done via https://submit.symantec.com/false_positive/

Michael Petch <mdpetch>
Group administrator
Tue 16 Apr 2013 07:04:51 AM UTC, original submission:  

When trying to download to install gnubg, Norton detects a security threat in gnubg-Main-20121023-setup.exe and immediately deletes the file, with the following information:

Threat Name: WS.Reputation.1
Actio: Removed

I have a computer with Windows 8.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by mdpetch (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-06-07 mdpetch Open/ClosedOpen Closed
    2013-04-17 mdpetch StatusIn Progress Fixed
    2013-04-16 mdpetch Assigned toNone mdpetch
        StatusNone In Progress

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code