From tomas.kalibera at gmail.com  Wed Aug  2 23:04:41 2017
From: tomas.kalibera at gmail.com (Tomas Kalibera)
Date: Wed, 2 Aug 2017 23:04:41 +0200
Subject: [Rd] symantec treating R-devel r73003 for Windows as malware
In-Reply-To: <6E8D8DFDE5FA5D4ABCB8508389D1BF88FFAA8B37@SRVEXCHCM301.precheza.cz>
References: <6E8D8DFDE5FA5D4ABCB8508389D1BF88FFAA8A88@SRVEXCHCM301.precheza.cz>
 <22913.34997.686161.34289@stat.math.ethz.ch>
 <6E8D8DFDE5FA5D4ABCB8508389D1BF88FFAA8B37@SRVEXCHCM301.precheza.cz>
Message-ID: <ba9b8148-8185-1b9b-feba-ae4bed0dffeb@gmail.com>

Hi Petr,

I can repeat this behavior (or similar) with Norton Security:

R-devel-win.exe is reported by Download Insight
R-3.4.1patched-win.exe is reported by Download Insight
R-3.4.1-win.exe is fine

And the report is that the binary is very new (released less than 1 week 
ago) and has very few users (less than 5 in "Norton Community"), which 
is not surprising given that these files are updated frequently. There 
is no other report/warning. With Norton Security, one has the option to 
allow execution of the file and to check "Always allow this file (if Run 
is chosen)".

Best
Tomas

On 08/02/2017 11:46 AM, PIKAL Petr wrote:
> Hallo Martin
>
> The result is the same. The R exe file is downloaded with some note about possible danger. When I try to run it, it is inspected and deleted from its location.
>
> Symantec message is enclosed.
>
> Our IT said it has something to do with installer type, but it is beyond my expertise.
>
> Petr Pikal
>
>
>> -----Original Message-----
>> From: Martin Maechler [mailto:maechler at stat.math.ethz.ch]
>> Sent: Wednesday, August 2, 2017 10:09 AM
>> To: PIKAL Petr <petr.pikal at precheza.cz>
>> Cc: r-devel at r-project.org
>> Subject: Re: [Rd] symantec treating R-devel r73003 for Windows as malware
>>
>>>>>>> PIKAL Petr <petr.pikal at precheza.cz>
>>>>>>>      on Wed, 2 Aug 2017 07:01:55 +0000 writes:
>>      > Dear all
>>      > I am not sure if this is appropriate for the list, but I have recently found
>> that Symantec blocks R devel from installation. Enclosed is copy of Symantec
>> message.
>>
>> Thank you, Petr.   I do think it is quite appropriate for this list.
>>
>>      > Our IT installed it but I wont be probably alone with this problem.
>>
>> We will see...
>>
>>      >> sessionInfo()
>>      > R Under development (unstable) (2017-07-31 r73003)
>>      > Platform: x86_64-w64-mingw32/x64 (64-bit)
>>      > Running under: Windows 10 x64 (build 14393)
>>
>>      [..............]
>>
>> I'm appending a (less compressed but notably correctly cropped) version of the
>> screen shot (also with a slightly more descriptive name) because I needed
>> several minutes before I could correctly view your first attachment
>>
>> What happens if you try "R 3.4.1-patched" for Windows?
>> I think they are built with the same tools... and that one is much more
>> important as closer to release.
>>
>> Thank you (and others) for diagnosing and giving feedback on this.
>>
>> Martin Maechler,
>> ETH Zurich
>>
>
> ________________________________
> Tento e-mail a jak?koliv k n?mu p?ipojen? dokumenty jsou d?v?rn? a jsou ur?eny pouze jeho adres?t?m.
> Jestli?e jste obdr?el(a) tento e-mail omylem, informujte laskav? neprodlen? jeho odes?latele. Obsah tohoto emailu i s p??lohami a jeho kopie vyma?te ze sv?ho syst?mu.
> Nejste-li zam??len?m adres?tem tohoto emailu, nejste opr?vn?ni tento email jakkoliv u??vat, roz?i?ovat, kop?rovat ?i zve?ej?ovat.
> Odes?latel e-mailu neodpov?d? za eventu?ln? ?kodu zp?sobenou modifikacemi ?i zpo?d?n?m p?enosu e-mailu.
>
> V p??pad?, ?e je tento e-mail sou??st? obchodn?ho jedn?n?:
> - vyhrazuje si odes?latel pr?vo ukon?it kdykoliv jedn?n? o uzav?en? smlouvy, a to z jak?hokoliv d?vodu i bez uveden? d?vodu.
> - a obsahuje-li nab?dku, je adres?t opr?vn?n nab?dku bezodkladn? p?ijmout; Odes?latel tohoto e-mailu (nab?dky) vylu?uje p?ijet? nab?dky ze strany p??jemce s dodatkem ?i odchylkou.
> - trv? odes?latel na tom, ?e p??slu?n? smlouva je uzav?ena teprve v?slovn?m dosa?en?m shody na v?ech jej?ch n?le?itostech.
> - odes?latel tohoto emailu informuje, ?e nen? opr?vn?n uzav?rat za spole?nost ??dn? smlouvy s v?jimkou p??pad?, kdy k tomu byl p?semn? zmocn?n nebo p?semn? pov??en a takov? pov??en? nebo pln? moc byly adres?tovi tohoto emailu p??padn? osob?, kterou adres?t zastupuje, p?edlo?eny nebo jejich existence je adres?tovi ?i osob? j?m zastoupen? zn?m?.
>
> This e-mail and any documents attached to it may be confidential and are intended only for its intended recipients.
> If you received this e-mail by mistake, please immediately inform its sender. Delete the contents of this e-mail with all attachments and its copies from your system.
> If you are not the intended recipient of this e-mail, you are not authorized to use, disseminate, copy or disclose this e-mail in any manner.
> The sender of this e-mail shall not be liable for any possible damage caused by modifications of the e-mail or by delay with transfer of the email.
>
> In case that this e-mail forms part of business dealings:
> - the sender reserves the right to end negotiations about entering into a contract in any time, for any reason, and without stating any reasoning.
> - if the e-mail contains an offer, the recipient is entitled to immediately accept such offer; The sender of this e-mail (offer) excludes any acceptance of the offer on the part of the recipient containing any amendment or variation.
> - the sender insists on that the respective contract is concluded only upon an express mutual agreement on all its aspects.
> - the sender of this e-mail informs that he/she is not authorized to enter into any contracts on behalf of the company except for cases in which he/she is expressly authorized to do so in writing, and such authorization or power of attorney is submitted to the recipient or the person represented by the recipient, or the existence of such authorization is known to the recipient of the person represented by the recipient.
>
>
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel



	[[alternative HTML version deleted]]



[Rd] symantec treating R-devel r73003 for Windows as malware
Tomas Kalibera