4.0.2.1.dmg has OSX.Trojan.Gen virus

[Bob-Bogardus]

Hi,
Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with Norton Security 7.9.1
... says it contains a virus "OSX.Trojan.Gen" and deleted the file.

Previous versions are OK (4.0.1.1 and 3.0.0.0)

Can you advise?

Thanks.
Bob

[NoLimitCoin]

Hi Bob Let me study. Thank you Rafael

…

Sent from my iPhone

On Feb 15, 2019, at 8:05 PM, Bob-Bogardus ***@***.***> wrote: Hi, Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with Norton Security 7.9.1 ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. Can you advise? Thanks. Bob — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[NoLimitCoin]

Devs say its a false positive Can you tell your AV to run it? We ran scans on site and others and came out clean. You may want to re downloa

…

On Fri, Feb 15, 2019 at 8:05 PM Bob-Bogardus ***@***.***> wrote: Hi, Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with Norton Security 7.9.1 ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. Can you advise? Thanks. Bob — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#25>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AT-8s2cU3q-Nx1tSx-DeeqeLGhNiznATks5vN4N0gaJpZM4a-xMv> .

-- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079

[Bob-Bogardus]

Hi Raphael, OK, I’ll try another download and look into my AV settings. Is there a hash you could send me so I can verify the download (e.g. MD5, SHA1, etc)? Or is that available on gitlab? Thanks, Bob

…

Sent from my iPhone On Feb 16, 2019, at 5:50 PM, NoLimitCoin <notifications@github.com> wrote: Devs say its a false positive Can you tell your AV to run it? We ran scans on site and others and came out clean. You may want to re downloa

On Fri, Feb 15, 2019 at 8:05 PM Bob-Bogardus ***@***.***> wrote: Hi, Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with Norton Security 7.9.1 ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. Can you advise? Thanks. Bob — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#25>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AT-8s2cU3q-Nx1tSx-DeeqeLGhNiznATks5vN4N0gaJpZM4a-xMv> .

-- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[NoLimitCoin]

Let me see if I can get that hash. Thanks Rafael On Sat, Feb 16, 2019 at 7:15 PM Bob-Bogardus <notifications@github.com> wrote:

…

Hi Raphael, OK, I’ll try another download and look into my AV settings. Is there a hash you could send me so I can verify the download (e.g. MD5, SHA1, etc)? Or is that available on gitlab? Thanks, Bob Sent from my iPhone On Feb 16, 2019, at 5:50 PM, NoLimitCoin ***@***.***> wrote: Devs say its a false positive Can you tell your AV to run it? We ran scans on site and others and came out clean. You may want to re downloa On Fri, Feb 15, 2019 at 8:05 PM Bob-Bogardus ***@***.***> wrote: > Hi, > Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with > Norton Security 7.9.1 > ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. > > Can you advise? > > Thanks. > Bob > > — > You are receiving this because you are subscribed to this thread. > Reply to this email directly, view it on GitHub > <#25>, or mute the > thread > < https://github.com/notifications/unsubscribe-auth/AT-8s2cU3q-Nx1tSx-DeeqeLGhNiznATks5vN4N0gaJpZM4a-xMv > > . > -- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#25 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AT-8swateOFCVTnVCrisQOHCwHCKxzHKks5vOMlkgaJpZM4a-xMv> .

-- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079

[Bob-Bogardus]

Hi, I submitted a “false positive” report to Symantec and they confirmed it. See note below (it has the MD5 and SHA256). Thanks. Bob From: falsepositives@symantec.com Subject: [No Reply] False Positive submission (134494) Date: February 19, 2019 at 1:00:14 AM PST To: bobbogardus@bunnydidit.com Reply-To: falsepositives@symantec.com In relation to submission 134494. Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products: File name: NoLimitCoin-Qt-4.0.2.1.dmg MD5: B75E68A18E3448B497FC9C1D3B54A458 SHA256: 089B103067994D8BB9EE7EF1D275117B5D878CA97D1A01BFE179FD0E3E095DAE Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update If detection persists, please contact support: * Norton: https://support.norton.com/sp/en/us/home/current/info * SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape. For more information on best practices to reduce false positives: https://www.symantec.com/content/en/us/enterprise/white_papers/b-to_increase_downloads-instill_trust_first_WP.en-us.pdf Sincerely, Symantec Security Response https://www.symantec.com/security-center This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you. On Feb 16, 2019, at 10:54 PM, NoLimitCoin <notifications@github.com> wrote: Let me see if I can get that hash. Thanks Rafael On Sat, Feb 16, 2019 at 7:15 PM Bob-Bogardus <notifications@github.com> wrote:

…

Hi Raphael, OK, I’ll try another download and look into my AV settings. Is there a hash you could send me so I can verify the download (e.g. MD5, SHA1, etc)? Or is that available on gitlab? Thanks, Bob Sent from my iPhone On Feb 16, 2019, at 5:50 PM, NoLimitCoin ***@***.***> wrote: Devs say its a false positive Can you tell your AV to run it? We ran scans on site and others and came out clean. You may want to re downloa On Fri, Feb 15, 2019 at 8:05 PM Bob-Bogardus ***@***.***> wrote: > Hi, > Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with > Norton Security 7.9.1 > ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. > > Can you advise? > > Thanks. > Bob > > — > You are receiving this because you are subscribed to this thread. > Reply to this email directly, view it on GitHub > <#25>, or mute the > thread > < https://github.com/notifications/unsubscribe-auth/AT-8s2cU3q-Nx1tSx-DeeqeLGhNiznATks5vN4N0gaJpZM4a-xMv > > . > -- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#25 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AT-8swateOFCVTnVCrisQOHCwHCKxzHKks5vOMlkgaJpZM4a-xMv> .

-- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#25 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/Anq9BwwcFXm3weLYMJdgZKU9-JSqqqRMks5vOPy3gaJpZM4a-xMv>.

[NoLimitCoin]

nice, thank you !! On Tue, Feb 19, 2019 at 6:01 AM Bob-Bogardus <notifications@github.com> wrote:

…

Hi, I submitted a “false positive” report to Symantec and they confirmed it. See note below (it has the MD5 and SHA256). Thanks. Bob From: ***@***.*** Subject: [No Reply] False Positive submission (134494) Date: February 19, 2019 at 1:00:14 AM PST To: ***@***.*** Reply-To: ***@***.*** In relation to submission 134494. Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products: File name: NoLimitCoin-Qt-4.0.2.1.dmg MD5: B75E68A18E3448B497FC9C1D3B54A458 SHA256: 089B103067994D8BB9EE7EF1D275117B5D878CA97D1A01BFE179FD0E3E095DAE Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update If detection persists, please contact support: * Norton: https://support.norton.com/sp/en/us/home/current/info * SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape. For more information on best practices to reduce false positives: https://www.symantec.com/content/en/us/enterprise/white_papers/b-to_increase_downloads-instill_trust_first_WP.en-us.pdf Sincerely, Symantec Security Response https://www.symantec.com/security-center This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you. On Feb 16, 2019, at 10:54 PM, NoLimitCoin ***@***.***> wrote: Let me see if I can get that hash. Thanks Rafael On Sat, Feb 16, 2019 at 7:15 PM Bob-Bogardus ***@***.***> wrote: > Hi Raphael, > OK, I’ll try another download and look into my AV settings. > Is there a hash you could send me so I can verify the download (e.g. MD5, > SHA1, etc)? Or is that available on gitlab? > > Thanks, > Bob > > Sent from my iPhone > > On Feb 16, 2019, at 5:50 PM, NoLimitCoin ***@***.***> wrote: > > Devs say its a false positive > > Can you tell your AV to run it? > > We ran scans on site and others and came out clean. You may want to re > downloa > > On Fri, Feb 15, 2019 at 8:05 PM Bob-Bogardus ***@***.***> > wrote: > > > Hi, > > Just downloaded NoLimitCoin-Qt-4.0.2.1.dmg on my Mac and scanned it with > > Norton Security 7.9.1 > > ... says it contains a virus "OSX.Trojan.Gen" and deleted the file. > > > > Can you advise? > > > > Thanks. > > Bob > > > > — > > You are receiving this because you are subscribed to this thread. > > Reply to this email directly, view it on GitHub > > <#25>, or mute the > > thread > > < > https://github.com/notifications/unsubscribe-auth/AT-8s2cU3q-Nx1tSx-DeeqeLGhNiznATks5vN4N0gaJpZM4a-xMv > > > > . > > > > > -- > Rafael Groswirt > 1407 Foothill Blvd #305 > La Verne, CA 91750 > Cell 909 438 4079 > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub, or mute the thread. > > — > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > < #25 (comment) >, > or mute the thread > < https://github.com/notifications/unsubscribe-auth/AT-8swateOFCVTnVCrisQOHCwHCKxzHKks5vOMlkgaJpZM4a-xMv > > . > -- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub < #25 (comment)>, or mute the thread < https://github.com/notifications/unsubscribe-auth/Anq9BwwcFXm3weLYMJdgZKU9-JSqqqRMks5vOPy3gaJpZM4a-xMv >. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#25 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AT-8s-2WykNuF7PFwBPjtOk6Ms4IlyGVks5vPAO0gaJpZM4a-xMv> .

-- Rafael Groswirt 1407 Foothill Blvd #305 La Verne, CA 91750 Cell 909 438 4079