Page 1 of 1

Norton antivirus stops Sharpcap web page

Posted: Mon May 15, 2017 10:26 am
by db48
Hi,
today when I tried to connect to sharpcap.co.uk I was stopped by Norton antivirus. Apparently a Trojan virus has been detected in one of the previous releases of Sharpcap (see attachment) and now the site is classified by Norton as "potentially dangerous".

Re: Norton antivirus stops Sharpcap web page

Posted: Mon May 15, 2017 1:55 pm
by admin
Thanks for letting me know about this - sadly anti-virus is a pain - all the scanners are rigged up to be highly sensitive to try to catch real viruses, but that means that they throw up many false positives like this one :(

Any anti-virus warning that has the word 'generic' or 'gen' in it has to be taken with a pinch of salt - that's the name they use when code doesn't match any known virus signatures but has managed to trip one of the 'heuristic' based altorithms because some pattern of bytes in it looks a bit like one that might be used by a virus.

For anyone who hadn't noticed, every SharpCap build is scanned by VirusTotal, which runs the file through about 60 different scanners - the VirusTotal report link is about 4 lines down from the download link. The web site also includes the md5 and SHA1 hashes of the download file so you can validate that the download has not been tampered with if you want.

I've removed the download in question anyway, since it was an expired beta version, but it would be helpful if you could fill in a 'false positive' report here https://submit.symantec.com/false_positive/ to try to get Norton to stop being so silly!

cheers,

Robin

Re: Norton antivirus stops Sharpcap web page

Posted: Wed May 17, 2017 7:10 am
by admin
This issue should now be resolved.

cheers,

Robin

Re: Norton antivirus stops Sharpcap web page

Posted: Tue May 30, 2017 10:13 am
by TimHaymes
McAfee BT-net-protect also warns of virus/malware after scanning the download, but I have ignored the warning on the strength of the previous post - Tim ;)

Re: Norton antivirus stops Sharpcap web page

Posted: Thu Jun 08, 2017 7:19 am
by jimmyscotts
Why is it that the Norton antivirus stops the Sharpcap web page?

Re: Norton antivirus stops Sharpcap web page

Posted: Thu Jun 08, 2017 7:26 am
by admin
There was a virus false positive from Norton AV in one of the beta builds of SharpCap 3.0. This is now resolved.

https://safeweb.norton.com/report/show_ ... pcap.co.uk

Robin