Page 1 of 1

Norton Security reports SAPE.Adload.259 in download

Posted: Tue Jul 07, 2015 10:47 pm
by awol
Today I downloaded
http://cintanotes.com/download-start?fi ... _Setup.exe
and Norton Security reported

Filename:
3c81cc809d3148941926439c7ea59835da17d248
Threat name:
SAPE.Adload.259
Origin:
http://cintanotes.com/files/CintaNotes_2_9_2_Setup.exe


Symantec acknowledges that SAPE is a heuristic, but still, any thoughts?
https://www.symantec.com/security_response/sape/

Re: Norton Security reports SAPE.Adload.259 in download

Posted: Thu Jul 09, 2015 12:04 pm
by CintaNotes Developer
Hi awol,

Thanks for letting me know!
This is most probably a false positive related to our anti-piracy protection.
Before publishing the new version I checked both portable and installer on VirusTotal and there were 0
detections:
https://www.virustotal.com/file/2671382 ... /analysis/
https://www.virustotal.com/file/6eafd3a ... /analysis/

As you see Norton Security is not there, I don't know why.
We generally don't support AV software not used by VirusTotal.

If you'd like this warning to be removed, please submit a false positive to Symantec. Thanks!

Re: Norton Security reports SAPE.Adload.259 in download

Posted: Thu Jul 09, 2015 12:46 pm
by usbpoweredfridge
Alex: Could you publish the md5 (or SHA1) hashes of the downloads on the downloads page, so if anyone has any concerns, they could verify the hashes?

(Of course someone could then point out that if someone had managed to gain access to the CN downloads to modify them, they would likely have enough access to modify the hashes listed on the downloads page as well)

Chris

Re: Norton Security reports SAPE.Adload.259 in download

Posted: Thu Jul 09, 2015 3:19 pm
by awol
Thanks for the explanation.

Norton does report that the site is fine:
https://safeweb.norton.com/report/show? ... _Setup.exe

Re: Norton Security reports SAPE.Adload.259 in download

Posted: Fri Jul 10, 2015 12:02 pm
by CintaNotes Developer
usbpoweredfridge wrote:Alex: Could you publish the md5 (or SHA1) hashes of the downloads on the downloads page, so if anyone has any concerns, they could verify the hashes?

(Of course someone could then point out that if someone had managed to gain access to the CN downloads to modify them, they would likely have enough access to modify the hashes listed on the downloads page as well)


Exactly. But still the idea has its merits. I'll add it to our website task backlog, thanks.

Re: Norton Security reports SAPE.Adload.259 in download

Posted: Fri Jul 10, 2015 12:02 pm
by CintaNotes Developer
awol wrote:Thanks for the explanation.

Norton does report that the site is fine:
https://safeweb.norton.com/report/show? ... _Setup.exe


No problem! please let me know if you have any further issues with the app.