Symantec Download Insight is warning that 4.5.0.575 is a dangerous file [False Positive]

pherrhus
pherrhus
Community Member
edited June 2015 in 1Password 4 for Windows

symantec 12.1.2015 SEP says that https://d13itkw33a7sus.cloudfront.net/dist/1P/win4/1Password-4.5.0.575.exe is a malicious file and has been known to be that for a week. Please respond asap since this is a grave concern if it is true and it has been compromised.


1Password Version: 4.5
Extension Version: 575
OS Version: windows 8.1
Sync Type: direct download

Comments

  • MikeT
    edited June 2015

    Hi @Pherrhus,

    It's a false positive. Can you submit the information to Symantec to let them know it is a false positive here: https://submit.symantec.com/false_positive/standard/

    They need to know what the Download Insight is detecting, so they can flag it.

    In the future, you can upload it to virustotal.com to see if other AVs report it as a virus. Here's what they show for the same file: https://www.virustotal.com/en/file/c10827ecb2b06314d18a61c405b914738a226ec193c423459e9111447b5ca74a/analysis/

  • We reported this false positive to Symantec, too, and have contacted the company about it.

  • lauri_schindler
    lauri_schindler
    Community Member
    edited June 2015

    Help - I can't get started. Working in Chrome. Windows 7. Symantec Endpoint Protection. Symantec.cloud - Cloud Agent and Endpoint Protection.


    1Password Version: not yet downloaded
    Extension Version: Not Provided
    OS Version: windows 7
    Sync Type: Not Provided

  • lauri_schindler
    lauri_schindler
    Community Member

    Help - I can't get started. Working in Chrome. Windows 7. Symantec Endpoint Protection. Symantec.cloud - Cloud Agent and Endpoint Protection.

  • Hi @lauri_schindler,

    I've merged your thread with one from yesterday.
    @pherrhus made us aware of this quickly, we have contacted Symantec about this, and they got back to us a few minutes ago:

    They've corrected the false positive detection and the change will roll out to all clients through a virus definitions update within the next 24 hours.

    Please let us know if the download still doesn't work after that.

    Cheers!

This discussion has been closed.