[Rd] symantec treating R-devel r73003 for Windows as malware

[Tomas Kalibera]

Hi Petr,

I can repeat this behavior (or similar) with Norton Security:

R-devel-win.exe is reported by Download Insight
R-3.4.1patched-win.exe is reported by Download Insight
R-3.4.1-win.exe is fine

And the report is that the binary is very new (released less than 1 week 
ago) and has very few users (less than 5 in "Norton Community"), which 
is not surprising given that these files are updated frequently. There 
is no other report/warning. With Norton Security, one has the option to 
allow execution of the file and to check "Always allow this file (if Run 
is chosen)".

Best
Tomas

On 08/02/2017 11:46 AM, PIKAL Petr wrote:
> Hallo Martin
>
> The result is the same. The R exe file is downloaded with some note about possible danger. When I try to run it, it is inspected and deleted from its location.
>
> Symantec message is enclosed.
>
> Our IT said it has something to do with installer type, but it is beyond my expertise.
>
> Petr Pikal
>
>
>> -----Original Message-----
>> From: Martin Maechler [mailto:maechler at stat.math.ethz.ch]
>> Sent: Wednesday, August 2, 2017 10:09 AM
>> To: PIKAL Petr <petr.pikal at precheza.cz>
>> Cc: r-devel at r-project.org
>> Subject: Re: [Rd] symantec treating R-devel r73003 for Windows as malware
>>
>>>>>>> PIKAL Petr <petr.pikal at precheza.cz>
>>>>>>>      on Wed, 2 Aug 2017 07:01:55 +0000 writes:
>>      > Dear all
>>      > I am not sure if this is appropriate for the list, but I have recently found
>> that Symantec blocks R devel from installation. Enclosed is copy of Symantec
>> message.
>>
>> Thank you, Petr.   I do think it is quite appropriate for this list.
>>
>>      > Our IT installed it but I wont be probably alone with this problem.
>>
>> We will see...
>>
>>      >> sessionInfo()
>>      > R Under development (unstable) (2017-07-31 r73003)
>>      > Platform: x86_64-w64-mingw32/x64 (64-bit)
>>      > Running under: Windows 10 x64 (build 14393)
>>
>>      [..............]
>>
>> I'm appending a (less compressed but notably correctly cropped) version of the
>> screen shot (also with a slightly more descriptive name) because I needed
>> several minutes before I could correctly view your first attachment
>>
>> What happens if you try "R 3.4.1-patched" for Windows?
>> I think they are built with the same tools... and that one is much more
>> important as closer to release.
>>
>> Thank you (and others) for diagnosing and giving feedback on this.
>>
>> Martin Maechler,
>> ETH Zurich
>>
>
> ________________________________
> Tento e-mail a jakékoliv k němu připojené dokumenty jsou důvěrné a jsou určeny pouze jeho adresátům.
> Jestliže jste obdržel(a) tento e-mail omylem, informujte laskavě neprodleně jeho odesílatele. Obsah tohoto emailu i s přílohami a jeho kopie vymažte ze svého systému.
> Nejste-li zamýšleným adresátem tohoto emailu, nejste oprávněni tento email jakkoliv užívat, rozšiřovat, kopírovat či zveřejňovat.
> Odesílatel e-mailu neodpovídá za eventuální škodu způsobenou modifikacemi či zpožděním přenosu e-mailu.
>
> V případě, že je tento e-mail součástí obchodního jednání:
> - vyhrazuje si odesílatel právo ukončit kdykoliv jednání o uzavření smlouvy, a to z jakéhokoliv důvodu i bez uvedení důvodu.
> - a obsahuje-li nabídku, je adresát oprávněn nabídku bezodkladně přijmout; Odesílatel tohoto e-mailu (nabídky) vylučuje přijetí nabídky ze strany příjemce s dodatkem či odchylkou.
> - trvá odesílatel na tom, že příslušná smlouva je uzavřena teprve výslovným dosažením shody na všech jejích náležitostech.
> - odesílatel tohoto emailu informuje, že není oprávněn uzavírat za společnost žádné smlouvy s výjimkou případů, kdy k tomu byl písemně zmocněn nebo písemně pověřen a takové pověření nebo plná moc byly adresátovi tohoto emailu případně osobě, kterou adresát zastupuje, předloženy nebo jejich existence je adresátovi či osobě jím zastoupené známá.
>
> This e-mail and any documents attached to it may be confidential and are intended only for its intended recipients.
> If you received this e-mail by mistake, please immediately inform its sender. Delete the contents of this e-mail with all attachments and its copies from your system.
> If you are not the intended recipient of this e-mail, you are not authorized to use, disseminate, copy or disclose this e-mail in any manner.
> The sender of this e-mail shall not be liable for any possible damage caused by modifications of the e-mail or by delay with transfer of the email.
>
> In case that this e-mail forms part of business dealings:
> - the sender reserves the right to end negotiations about entering into a contract in any time, for any reason, and without stating any reasoning.
> - if the e-mail contains an offer, the recipient is entitled to immediately accept such offer; The sender of this e-mail (offer) excludes any acceptance of the offer on the part of the recipient containing any amendment or variation.
> - the sender insists on that the respective contract is concluded only upon an express mutual agreement on all its aspects.
> - the sender of this e-mail informs that he/she is not authorized to enter into any contracts on behalf of the company except for cases in which he/she is expressly authorized to do so in writing, and such authorization or power of attorney is submitted to the recipient or the person represented by the recipient, or the existence of such authorization is known to the recipient of the person represented by the recipient.
>
>
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel



	[[alternative HTML version deleted]]