Re: WS.Trojan.H on install

Steve Dougherty <steve-kVTqj8yhOEv2eFz/[email protected]>
Newsgroups gmane.network.freenet.support
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/27/2013 11:30 AM, Ronnie Humphries wrote:
> I thought I would try Freenet.  But when I started downloading,
> Norton detected WS.Trojan.H in the install file and deleted.
> Could the download file be infected with a trojan virus?  Mmmm.
> Just thought I would pass this info on.   Thanks, R.H.


I think we can say that's a false positive, and the installer is not
infected.

WS.Trojan.H is Symantec's "cloud based heuristic" detection for
nothing in particular. [0] We should submit a false positive report.
[1] VirusTotal reports the build 1440 installer as clean. [2]

If you are a developer and would like to audit the Windows installer
source code and build script, it is here. [3][4]

Steve

[0]
https://www.symantec.com/security_response/writeup.jsp?docid=2011-102713-4647-99
[1] https://submit.symantec.com/whitelist/
[2]
https://www.virustotal.com/en/file/17b486ef341fc86ac56c0586c388abb81b4a6ad7df6c51464720db7ce00ef666/analysis/1367116058/
[3] https://github.com/freenet/wininstaller-official
[4] https://github.com/freenet/scripts/blob/master/release-wininstaller
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=OVnv
-----END PGP SIGNATURE-----
_______________________________________________
Support mailing list
[email protected]
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-request-RdDMkVZAZeuJnvDnx1genB2eb7JE58TQ@public.gmane.org?subject=unsubscribe
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.