Author

Topic: Heuristic Virus in Electrum 3.0.5 exe? (Read 137 times)

full member
Activity: 234
Merit: 100
January 10, 2018, 10:45:58 AM
#3
Yes, I reported it to Norton as a false positive (https://submit.symantec.com/false_positive) and this was their response:

Code:
In relation to submission xxxxx.

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

    File name: electrum-3.0.5.exe
    MD5: 8e2e9f384665aeddbb8085246df3f28e
    SHA256: 7255debdcf9cdb6dfd1811df6d350b94849a3927d545ae7d9bbb7f9415d25aea
    Note: [b][color=green]Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update[/color][/b]
Further Information:
Required RAPID RELEASE sequence >= 190034

The latest Rapid Release definition available here: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease
To check the current sequence number of the Rapid Release definition: https://www.symantec.com/security_response/definitions/rapidrelease
More information on Rapid Release definitions can be found: https://support.symantec.com/en_US/article.TECH103326.html

Upon live updating my Norton app, I was able to install Electrum properly.
legendary
Activity: 2758
Merit: 6830
January 08, 2018, 11:05:25 PM
#2
It's probably just a false positive. I just run a virus total scan and there are some.

Just make sure to:

1. Download only from electrum.org;
2. Verify the integrity of the file[1].

[1] https://steemit.com/bitcoin/@jklepatch/how-to-verify-the-integrity-of-electrum-wallet-executable-on-windows
full member
Activity: 234
Merit: 100
January 08, 2018, 07:52:10 PM
#1
Norton popped this threat up upon installing the new electrum version.



Let me know if this is any false positive since heuristic isn't really a virus in my opinion. It tells the antivirus is trying to detect "HEURistically" that a file MIGHT be dangerous, which might not be in actual case.
Jump to: