• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Freemake Video COnverter Blocked

I run Windows 8.1 and have the latest NIS installed. I have been trying to download a new version of Freemake Video Converter which NIS Blocks under the threat name "WS.Reputation1" the report also says thousands of users in the Norton Community have used this file and that the file was released 9 days ago. Is there genuinely an issue with this application?

David

Replies

Kudos0

Re: Freemake Video COnverter Blocked

Symantec WS.Reputation.1
http://www.symantec.com/security_response/writeup
Clarification on WS.Reputation.1 detection
https://community.norton.com/forums/clarification-wsreputation1-detection
For second opinion choose File and / or Search hash at VirusTotal or upload file to VirSCAN and/or Jotti and/or submit to Symantec for review analysis >
see > How to report false positives

Does this SHA: > https://www.virustotal.com/en/file/4da07aec58bb3ca56e5eae6e91a45686016b42284860d5937f15184086ab1365/analysis/ look like yours.
with Heuristics at Automatic, I get... 
Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.
freemakevideoconvertersetup.exe Threat name: Suspicious.Cloud.9
Many Users
Thousands of users in the Norton Community have used this file.
New
This file was released 9 days ago.
High
This file risk is high.
http://download_freemake_net/FreemakeOriginals2/FreemakeVideoConverterSetup_exe
Downloaded File freemakevideoconvertersetup_exe Threat name: Suspicious.Cloud.9 from freemake.net
YMMV

Kudos0

Re: Freemake Video COnverter Blocked

I've used Freemake for years, but as most of you know, it has come packaged with one PUP or another.  I finally managed to get the new version installed on two computers doing custom installation but still somehow got OpenCandy.  Running Malwarebytes and/or SuperAntiSpyware got rid of it.  Perhaps the OpenCandy thing is why Norton blocks the download?

Kudos0

Re: Freemake Video COnverter Blocked

Hello EssaTD2,
I'm not seeing OpenCandy.   Download Insight detects Suspicious.Cloud.9 and Auto-Protect (on setup launch) detects Trojen.Gen.2.
Norton does not seem to like FreeVideoConverter v4.1.9 by my observe.
Curious, how File Insight reports > High - This file risk is high for Threat name: Suspicious.Cloud.9 and Trojen.Gen.2 and Security Response reports for both Risk Level 1: Very Low.
Maybe, there's Very Low Risk for infection while risk if infected is High. 
YMMV
Caveat:  I have Heuristics at Automatic and SONAR Advanced Mode at Aggressive. 

Kudos0

Re: Freemake Video COnverter Blocked

I've used Freemake Video Converter for years.  It is very easy to use and will covert virtually any file format.  It's also extremely simple to burn content to DVDs.  I have an abundance of experience with its PUPS.  Getting rid of them if they manage to get installed is no problem.  I am able to install the new converter by disabling Norton while doing the installation, but if a scan is run it is removed.  I'm hoping Freemake and/or Norton will be able to overcome this problem.

Kudos0

Re: Freemake Video COnverter Blocked

>> How to report false positives

EssaTD2: I am able to install the new converter by disabling Norton while doing the installation, but if a scan is run it is removed.  I'm hoping Freemake and/or Norton will be able to overcome this problem.

Have you tried to Exclude from Auto-Protect
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832


If no joy.....have you tried to Exclude by Signature
https://www.symantec.com/security_response/writeup.jsp?docid=2017-040616-1325-99

https://support.norton.com/sp/en/us/home/current/solutions/v54298598


Freemake Video Converter
https://community.norton.com/en/forums/false-positive-31

Kudos0

Re: Freemake Video COnverter Blocked

I have just started to have this problem. I have used Freemake Video Converter for years with no problems, and now the program just won't start. (An error window appears, saying "Freemake Video Converter can't start".!) I think that I have traced the problem to Norton intervention, but I do wonder if it is a false positive. I agree with Essa TD2 (above), and am also hoping that Norton and Freemake will contact each other and overcome this very annoying problem.

Kudos0

Re: Freemake Video COnverter Blocked

Same here, I noticed that Freemake was missing from my desktop and then couldn't find it listed in my programs.

When I try to re-install, Norton intervenes and reports TROJAN.GEN.2 and also the other warnings as highlighted above by bjm.

Unlike bjm, on my PC, Norton is reporting a high severity level with these items and I notice it also now gives download.freemake.net a 'BAD' reputation level.

This is so annoying.

Kudos1 Stats

Re: Freemake Video COnverter Blocked

https://safeweb.norton.com/report/show?url=download.freemake.net


FWIW ~ majorgeeks.com/files/details/freemake_video_converter
Freemake Video Converter 4.1.9.83 License: Ad-Supported

File: FreemakeVideoConverterFull.exe  (majorgeeks.com)
File size: 32.8 MB (34,371,576 bytes)
SHA256 checksum: 7CA581087F91609

File: FreemakeVideoConverterFull.exe  (freemake.com)
File size: 33.1 MB (34,656,256 bytes)
SHA256 checksum: F30ED14E53D95C

YMMV

Kudos0

Re: Freemake Video COnverter Blocked

Very annoying. What can we do to get the use of this program back (safely)?

Kudos0

Re: Freemake Video COnverter Blocked

What users do regarding Norton detection...is up to users.
Have you contacted vendor regarding software proactive whitelist
https://submit.symantec.com/whitelist/


Have you tried to Exclude from Auto-Protect
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832


If no joy.....have you tried to Exclude by Signature
https://www.symantec.com/security_response/writeup.jsp?docid=2017-040616-1325-99

https://support.norton.com/sp/en/us/home/current/solutions/v54298598


Have you tried >> How to report false positives

Have you tried >>> http://support.freemake.com/hc/en-us/requests/new

http://www.freemake.com/support/

http://www.freemake.com/eula_fvc/
http://www.freemake.com/privacy_policy/
http://www.freemake.com/usage_statistics_info/


Ad-Supported: Advertising supported or third party (additional) software included. 
by my read....  FVC derives revenue thru ads, by monetizing users.

*Items rated as a PUP - which does not mean malware. A PUP can download and install other software that might turn out to be, indeed, malicious. However, security soft vendors do not install every piece of software and watch every single thing that the software does and then create a signature for it. That isn't how file signatures are created. If vendors had to do all that, then it would take a very long time to create signatures, it would be very expensive, and security soft vendors would never tolerate it.

*A PUP can be installed at the user's discretion. The signature detection is just to bring the file to the user's attention.

*What some users consider a PUP, other users will not; what one AV company rates as a PUP, another will not.

*In general, be more vigilant and discerning. PUPs in particular usually install with your consent, and your consent can often be implied when you take shortcuts like a default installation, fail to read all the installation options presented, fail to read Terms & EULA. (*google)

Kudos0

Re: Freemake Video COnverter Blocked

Some good, helpful ideas here, bjm_. I will try a couple of these to see what happens.

Kudos1 Stats

Re: Freemake Video COnverter Blocked

I followed bjm_'s advice. Here is a link to Freemake's solution to the problem. Let's hope that it works!

http://support.freemake.com/hc/en-us/articles/115001849743-Norton-blocks...

Well, I've tried it, installed Freemake Video Converter (being very careful about PUPs etc.) and it works. I will report back if I have any problems.

Kudos0

Re: Freemake Video COnverter Blocked

FWIW ~ file from Freemake article Permalink

File: FreemakeVideoConverterFull.exe
File size: 32.9 MB (34,479,040 bytes)
MD5 checksum: DD93FE44392DBE97A52D4345BB3A8756
SHA256 checksum: 820B45C8AF677E01D3FB34A4785E66A6E7F029422B7C2AFF282C06D46CDA7DA5


File name: FreemakeVideoConverterFull.exe
Detection ratio: 14 / 58
Analysis date: 2017-04-18

YMMV

Kudos1 Stats

Re: Freemake Video COnverter Blocked

Hi Norton Community,

This is Victoria from Freemake. As of July 2017, Norton doesn't block Freemake Video Converter anymore.

Freemake Video Converter doesn't have any unwanted programs (PUP) in the installer. There are NO toolbars, browser add-ons, extenstion, OpenCandy or any other third-party extra stuff.

Freemake Video Converter is safe and clean. Please download the latest version of Freemake software only from official site www.freemake.com. Please make sure your Norton virus database is up-to-date.

Kudos0

Re: Freemake Video COnverter Blocked

Still blocked on my machine

Norton not only blocks it - it removes it from my machine.

not even in deleted items - see norton popup in lower right hand corner of attachement

File Attachment: 
Kudos0

Re: Freemake Video COnverter Blocked

For information re event > from Norton pop-up > View Details > Copy to Clipboard > paste &or from Norton history > More Options > Copy to Clipboard > paste.


Report a Suspected Erroneous Detection (False Positive)
https://submit.symantec.com/false_positive/


For second opinion choose File &or Search hash at VirusTotal

File name: FreemakeVideoConverterSetup.exe
Detection ratio: 14 / 65
Analysis date: 2017-08-26

Kudos0

Re: Freemake Video COnverter Blocked

Filename: freemakevideoconvertersetup.exe
Threat name: Trojan.Gen.2Full Path: c:\users\movie_000\desktop\freemakevideoconvertersetup.exe

____________________________

____________________________


On computers as of 
8/25/2017 at 8:29:23 PM

Last Used 
8/25/2017 at 8:31:21 PM

Startup Item 
No

Launched 
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


freemakevideoconvertersetup.exe Threat name: Trojan.Gen.2
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


download[dot]freemake[dot]net/FreemakeOriginals2/EP/FreemakeVideoConverterSetup.exe
Downloaded File  from freemake.net
Source: External Media

freemakevideoconvertersetup.exe

____________________________

File Actions

Infected file: c:\users\movie_000\desktop\ freemakevideoconvertersetup.exe Access Denied
____________________________


File Thumbprint - SHA:
9148bb1cb5b74a9a7b74c5ccb431c32f9444956c0d26f63357f7846a0739037e
File Thumbprint - MD5:
faf577d499a1609b37755ea62e6c617c
 

Kudos0

Re: Freemake Video COnverter Blocked

Victoria from Freemake:

Hi Norton Community,

This is Victoria from Freemake. As of July 2017, Norton doesn't block Freemake Video Converter anymore.

Freemake Video Converter doesn't have any unwanted programs (PUP) in the installer. There are NO toolbars, browser add-ons, extenstion, OpenCandy or any other third-party extra stuff.

Freemake Video Converter is safe and clean. Please download the latest version of Freemake software only from official site www.freemake.com. Please make sure your Norton virus database is up-to-date.

It appears that the main download link is just a downloader stub... Why not just link directly to the real download?

It seems you just released a new version on the 23rd. You will want to submit a false positive report to Symantec/Norton.

Also, what is the purpose of this in your program:

netsh.exe http add urlacl url=http://+:11425/ user=everyone

Kudos0

Re: Freemake Video COnverter Blocked

Just tried downloading from your link.  Norton blocked and removed the download.  I have Freemake installed on one computer.  I had to fight it out, but finally got it installed successfully. 

Kudos0

Re: Freemake Video COnverter Blocked

Kudos0

Re: Freemake Video COnverter Blocked

password_password:   It appears that the main download link is just a downloader stub... Why not just link directly to the real download?

http://www.freemake.com/offline/offline_all/ 


File: FreemakeVideoConverterFull.exe
File size: 31.1 MB (32,637,808 bytes)
MD5 checksum: B01C913F167A66FE67660657218F0D3D
SHA256 checksum: 4C6424FB48F045581FA5F5A16A23DA4FF36094FB18A77814CAE69D2EFCBD0FD6

File name: FreemakeVideoConverterFull.exe
Detection ratio: 11 / 62
Analysis date: 2017-08-26

Kudos0

Re: Freemake Video COnverter Blocked

No Good - when i went to http://www.freemake.com/offline/offline_all/(link is external) i was able to download the file.

when i scanned it, Norton removed it stating that Trojan.Gen2 had been fully resolved.

Kudos0

Re: Freemake Video COnverter Blocked

Respectfully, what User does regarding Norton detection...is up to the User.

Restore an item from Quarantine
https://support.norton.com/sp/en/us/home/current/solutions/v6200368

My Norton product alerts that the file I downloaded is not safe, and deletes it
https://support.norton.com/sp/en/us/home/current/solutions/v80629965

My Norton product incorrectly alerts that a file is infected, or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832

Add items to the Signature Exclusions
https://support.norton.com/sp/en/us/home/current/solutions/v54298598

Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640


For information re event > from Norton pop-up > View Details > Copy to Clipboard > paste &or from Norton history > More Options > Copy to Clipboard > paste.


Report a Suspected Erroneous Detection (False Positive)
https://submit.symantec.com/false_positive/

Kudos0

Re: Freemake Video COnverter Blocked

Respectfully, some of us are not as sophisticated as you are and trust Norton to keep our computer safe.  The links you gave me, as a relatively unsophisticated user, are gobbledygook.

Kudos0

Re: Freemake Video COnverter Blocked

holysmokes:  Respectfully, some of us are not as sophisticated as you are and trust Norton to keep our computer safe.  The links you gave me, as a relatively unsophisticated user, are gobbledygook.

I hear ya'.  Okay.  Then don't run Freemake Video Converter.  


Norton Product Manuals
https://support.norton.com/sp/en/us/home/current/solutions/v96047160

Norton Video Tutorials
https://support.norton.com/sp/en/us/home/current/solutions/v102698236


There are many different ways to get Official Norton support:
In order to make sure you are visiting the correct Norton support page, be sure to type in support.norton.com in the URL bar of your browser. You can use Norton Support: Live Chat, which is the fastest way to solve your issue. There is also the Norton Forums, where you can browse through a library of Top Solutions around common problems. Request help via Norton’s phone support.

Additionally, you can stay up-to-date on the most current threats and scams on the Official Norton Protection Blog.


Official Norton Support is always free to current subscribers.

Regards w Respect

Kudos0

Re: Freemake Video COnverter Blocked

then i guess it's the university of illinois

Kudos0

Re: Freemake Video COnverter Blocked

you really need to fix this

the same thing happens with the freemake audio converter.

can you make older versions such as 4.1.5 available?  i never had issues with that one.

Kudos0

Re: Freemake Video COnverter Blocked

Visit support.freemake.com if you need help with Freemake software

http://www.freemake.com/support/ 

Kudos0

Re: Freemake Video COnverter Blocked

Hello holysmokes

bjm is another user as you are. We are not Symantec Employees. This is a user to user Forum. Sometimes Employees post in the threads.. They will have a red sign that is next to their names that will say Symantec Employees. We have blue signs which say Guru on it. We are Volunteers who have been picked by Norton to help other users with their Norton product issues. We do have contact with some Symantec Employees.Symantec Employees are not generally around on the weekends.

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Freemake Video COnverter Blocked

i am totally aware of that and appreciate the assistance.

Kudos0

Re: Freemake Video COnverter Blocked

Followed your link to the Freemake website, Norton is still blocking TROJAN.GEN2 and it removes the convertersetup.exe file on install. So I cannot see how to progress beyond this point.

Kudos0

Re: Freemake Video COnverter Blocked

Accepted Solution
Kudos0

Re: Freemake Video COnverter Blocked

Hello

Please submit the file to Norton as a false-positive.

To report a false positive, please use this link

https://submit.symantec.com/false_positive/

Please see this KB

https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100222230832EN_EndUserProfile_en_us

Thanks

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Freemake Video COnverter Blocked

thanks for the link!.  I submittedit - let's see what happens.

Kudos0

Re: Freemake Video COnverter Blocked

HELLO TO ALL.

FloPlot suggested i submit the information to Norton and report it as a false positive which i did.

I was able to download the exe file with no issues now.

Kudos0

Re: Freemake Video COnverter Blocked

Hello holysmokes

Glad to hear that you can now use your file.

Since your issue seems to be solved now, could you please pick the post which solved your issue and mark that post as the solution by clicking on Mark As Solution on the bottom of each post.?

Thanks.

/                                                                                                                                    

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Freemake Video COnverter Blocked

i was able to install the exe file with no issues - Norton made whatever changes they had to on the back-end.

This thread is closed from further comment. Please visit the forum to start a new thread.