Norton Security reports SAPE.Adload.259 in download

awol
Posts: 2
Joined: Thu Feb 28, 2013 4:23 am
Contact:

Norton Security reports SAPE.Adload.259 in download

Postby awol » Tue Jul 07, 2015 10:47 pm

Today I downloaded
http://cintanotes.com/download-start?fi ... _Setup.exe
and Norton Security reported

Filename:
3c81cc809d3148941926439c7ea59835da17d248
Threat name:
SAPE.Adload.259
Origin:
http://cintanotes.com/files/CintaNotes_2_9_2_Setup.exe


Symantec acknowledges that SAPE is a heuristic, but still, any thoughts?
https://www.symantec.com/security_response/sape/
User avatar
CintaNotes Developer
Site Admin
Posts: 5001
Joined: Fri Dec 12, 2008 4:45 pm
Contact:

Re: Norton Security reports SAPE.Adload.259 in download

Postby CintaNotes Developer » Thu Jul 09, 2015 12:04 pm

Hi awol,

Thanks for letting me know!
This is most probably a false positive related to our anti-piracy protection.
Before publishing the new version I checked both portable and installer on VirusTotal and there were 0
detections:
https://www.virustotal.com/file/2671382 ... /analysis/
https://www.virustotal.com/file/6eafd3a ... /analysis/

As you see Norton Security is not there, I don't know why.
We generally don't support AV software not used by VirusTotal.

If you'd like this warning to be removed, please submit a false positive to Symantec. Thanks!
Alex
User avatar
usbpoweredfridge
Posts: 410
Joined: Fri Jan 17, 2014 11:08 pm
Contact:

Re: Norton Security reports SAPE.Adload.259 in download

Postby usbpoweredfridge » Thu Jul 09, 2015 12:46 pm

Alex: Could you publish the md5 (or SHA1) hashes of the downloads on the downloads page, so if anyone has any concerns, they could verify the hashes?

(Of course someone could then point out that if someone had managed to gain access to the CN downloads to modify them, they would likely have enough access to modify the hashes listed on the downloads page as well)

Chris
awol
Posts: 2
Joined: Thu Feb 28, 2013 4:23 am
Contact:

Re: Norton Security reports SAPE.Adload.259 in download

Postby awol » Thu Jul 09, 2015 3:19 pm

Thanks for the explanation.

Norton does report that the site is fine:
https://safeweb.norton.com/report/show? ... _Setup.exe
User avatar
CintaNotes Developer
Site Admin
Posts: 5001
Joined: Fri Dec 12, 2008 4:45 pm
Contact:

Re: Norton Security reports SAPE.Adload.259 in download

Postby CintaNotes Developer » Fri Jul 10, 2015 12:02 pm

usbpoweredfridge wrote:Alex: Could you publish the md5 (or SHA1) hashes of the downloads on the downloads page, so if anyone has any concerns, they could verify the hashes?

(Of course someone could then point out that if someone had managed to gain access to the CN downloads to modify them, they would likely have enough access to modify the hashes listed on the downloads page as well)


Exactly. But still the idea has its merits. I'll add it to our website task backlog, thanks.
Alex
User avatar
CintaNotes Developer
Site Admin
Posts: 5001
Joined: Fri Dec 12, 2008 4:45 pm
Contact:

Re: Norton Security reports SAPE.Adload.259 in download

Postby CintaNotes Developer » Fri Jul 10, 2015 12:02 pm

awol wrote:Thanks for the explanation.

Norton does report that the site is fine:
https://safeweb.norton.com/report/show? ... _Setup.exe


No problem! please let me know if you have any further issues with the app.
Alex

Return to “Bug Reports”