Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Running saver prompts Norton to declare suspicious behavior - SONAR.Heuristic.138 #52

Closed
tgoeke opened this issue Dec 22, 2015 · 4 comments

Comments

@tgoeke
Copy link

tgoeke commented Dec 22, 2015

Running the saver on Windows 10 causes Norton to quarantine the saver .scr file on some computers. (1 of 2 in my office).

http://www.symantec.com/security_response/writeup.jsp?docid=2015-100115-2953-99

@alistairmcmillan
Copy link
Collaborator

It's a false positive. It's taking a guess "based on certain attributes". Duplicate of #9 .

Which version are you running? Try the latest version. Virus scanners don't make this mistake with the latest version. https://www.virustotal.com/en/file/954b4ac9e8661fdf6b9dc15947ac83689ab051ba0ca9535aa679b2d7deef9ef6/analysis/

@tgoeke
Copy link
Author

tgoeke commented Dec 22, 2015

I'm using version 3.1 of Aerial.

@tgoeke
Copy link
Author

tgoeke commented Dec 22, 2015

Note, the virustotal scan will always show as passed, Norton does too until you run the saver, then it deletes the file. So I think this is slightly different.

@alistairmcmillan
Copy link
Collaborator

Norton should have a way to report false positives.

@cDima cDima closed this as completed Nov 14, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants