topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Thursday March 28, 2024, 6:35 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: norton internet security sonar blocks mixtape and flags it as trojan  (Read 11665 times)

nailzuk

  • Participant
  • Joined in 2010
  • *
  • Posts: 2
    • View Profile
    • Donate to Member
Not Available
____________________________
____________________________
On computer as of
04/11/2010 at 20:17:55
Last Used:
04/11/2010 at 20:18:30
Startup Item: No
Launched: Yes
____________________________
____________________________
Few Users
Fewer than 100 users in the Norton Community have used this file.
____________________________
High
This file risk is high.
____________________________
Threat Details
SONAR Protection monitors for suspicious program activity on your computer.
____________________________
Origin

Downloaded from  Not Available
____________________________
URL Not Available
UNTESTED

Source
mixtape.exe
____________________________
File Actions
File: e:\downloads\mixtape.exe
Restart Required
____________________________
File Thumbprint:
Not Available
____________________________
computer must be restarted to delete this malware 
 have the coder send an email to norton and get this sorted out, we dont want donationcoder getting a bad rep, pity mixtape sounded like a decent app

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: norton internet security sonar blocks mixtape and flags it as trojan
« Reply #1 on: November 05, 2010, 06:00 AM »
hi nailzuk.

Thanks for the report -- i'm sure it's a false positive and just another case of a lazy antivirus company falsely labeling it.
I'm going to upload it now to one of the multi-engine scanners and i will post report, and then then contact Norton, and we will see how good they are at fixing false positives.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: norton internet security sonar blocks mixtape and flags it as trojan
« Reply #2 on: November 05, 2010, 06:24 AM »
Ok so here's the virustotal report:

http://www.virustota...9805257e4-1288954986

This confirms that it is indeed a false positive and that there is no malware in the file.

Here's how you can be confident of that.  The scan of 43 engines shows 3 lower tier engines flag it with issues.  Of these three, two mark it as "suspicious" which is a term of art in the antivirus world meaning "we have no friggin idea what we are talking about but we don't want to get a lower score from a reviewer for missing something"; and the third company (ClamAv) is being a tad bit more honest, but exhibiting their stupidity, by identifying the "malware" as: "PUA.Packed.PECompact-1" which is basically complaining that the program is packed with a compressor called "PECompact" which is a highly reputable and excellent packing tool that has nothing to do with malware; they are basically saying -- we don't know how to scan inside this packed program so we are just going to throw up our hands and label this as dangerous.

Screenshot - 11_5_2010 , 6_20_04 AM.pngnorton internet security sonar blocks mixtape and flags it as trojan

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: norton internet security sonar blocks mixtape and flags it as trojan
« Reply #3 on: November 05, 2010, 06:25 AM »
ps. we've had a long running rant against the irresponsible behavior of antivirus companies with regard to false positives; see in particular here.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,896
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: norton internet security sonar blocks mixtape and flags it as trojan
« Reply #4 on: November 05, 2010, 06:27 AM »
since i don't use norton i don't have an easy way to report to them that this is a false alarm -- can you and anyone else using norton please do so.
the mixtape maker download page is here if it helps: http://seedling.dcmembers.com/rmtm.html

(and it's an excellent program!)

nailzuk

  • Participant
  • Joined in 2010
  • *
  • Posts: 2
    • View Profile
    • Donate to Member
Re: norton internet security sonar blocks mixtape and flags it as trojan
« Reply #5 on: November 05, 2010, 07:31 AM »
indeed i will report the fp to norton, thanx for all the feedback , BTW. i do have  nortons sonar set to aggressive mode, but still if it aint malware it shouldnt be blocked. thanks for all the feedback guys.