SAPE.heur.9BDD4
Posted: 01-Sep-2015 | 10:34PM · 32 Replies · Permalink
Please Sign In with Norton Account to Ask a Question or comment in the Community
Posted: 01-Sep-2015 | 10:34PM · 32 Replies · Permalink
Posted: 02-Sep-2015 | 1:06AM · Permalink
Ich verwende das Programm "TIA-Portal V12" von Siemens. Beim Öffnen der "Gerätekonfiguration" kommt der Norton mit der Meldung: "SAPE.Heur.9BDD4" File ....dll wurde gelöscht.
Das TIA-Portal wird dann geschlossen mit der Meldung "Es ist ein Fehler aufgetreten......"
Posted: 02-Sep-2015 | 1:49AM · Permalink
For the past few days i too have had continual reports of sape.heur.9bdd4. Performing all the scans available to me, many listed by RDLee have so far found nothing. i then noticed that the reports were generally coming every half an hour. Checking the Scheduled Task list, I found an HP "Registration" task which was executing every half an hour, times which coincided exactly with the virus reports. Disabling and now deleting this task has stopped the reports being generated. I'm not sure if this task, or the thing it executes has been hijacked, or maybe its just the false positive issue, but at least the randomly named dll's which were causing NIS to react have stopped being spawned?
Posted: 02-Sep-2015 | 7:20AM · Permalink
Our company has also been hit with this for the last 4 days. Please fix this as soon as possible.
Posted: 02-Sep-2015 | 7:33AM · Permalink
Posted: 02-Sep-2015 | 10:03AM · Permalink
Hi Everyone,
Sorry for the inconvenience. Team has resolved the False Positive detections of "SAPE.HEUR.9BDD4" signature issue. If you are still experiencing the problem, please run the LiveUpdates, restart the computer and then check for the issue.
Thanks,
Sunil G A
Norton Forums Administrator
Symantec Corporation
Posted: 02-Sep-2015 | 10:09AM · Edited: 02-Sep-2015 | 10:32AM · Permalink
Really need an answer, does anyone know what the solution to this is?
Posted: 02-Sep-2015 | 10:16AM · Permalink
I'm still experiencing this. Every 2 minutes I get an alert and then an email. Is this really a virus? Is this a false positive? How can I make it stop???
Posted: 02-Sep-2015 | 10:33AM · Permalink
Posted: 02-Sep-2015 | 10:42AM · Edited: 02-Sep-2015 | 10:45AM · Permalink
since some days i get same sape.heur.9bdd4 messages..., when i try to start games from steam
please fix this
e: i formated my system and installed win10 again and still get this ****
Posted: 02-Sep-2015 | 10:54AM · Permalink
@Glassware, @Damiro & @hideouz,
Please try updating the Norton Virus definitions files using Intelligent Updater by following Norton Support article and restart the computer. Let us know if this resolve the false positive detections alerts of SAPE.heur.9BDD4 signature.
Norton Support Aritcle: How to update the virus definition files using Intelligent Updater
Posted: 02-Sep-2015 | 11:00AM · Permalink
I'm using Symantec Endpoint, and I've already run Live Update successfully. Is this updater compatible?
Posted: 02-Sep-2015 | 11:01AM · Permalink
i had another update in norton now, but i download this intelligent updater now, then i will check to repruduce it
hope it is fixed then
thank you
Posted: 02-Sep-2015 | 11:09AM · Edited: 02-Sep-2015 | 11:10AM · Permalink
wow, i think, it is fixed now - started game like over 10 times and nothin
hope it will stay so - im thankfull
but ++++, i formated my disk, had to install win10 again and all the other things #wasted time
e: so nice, no more this messages!
Posted: 02-Sep-2015 | 11:11AM · Permalink
Sunil,
Followed your directions to the letter and still getting the same issue. Have scanned the 6 computers having this issue with 4 different malware/virus scanners and have found no threats. This issue is tied to a program, Time Clock Plus. It places a .dll file in the users\username\Appdata\local\temp folder when it runs. This file has a different name each time the application runs making it impossible to exclude. I am quite certain it is a false positive.
Posted: 02-Sep-2015 | 11:14AM · Permalink
This is pretty much what is happening to me, except I have no idea what program it's tied to. Tried 5 different AV and malware removal tools that found nothing.
Posted: 02-Sep-2015 | 11:31AM · Permalink
oh no, it came back..
i added my log from intelligent updater
Posted: 02-Sep-2015 | 11:35AM · Permalink
Still having same issue Sunil after doing as you recommended. Please advise.
Posted: 02-Sep-2015 | 11:38AM · Permalink
Posted: 02-Sep-2015 | 11:40AM · Permalink
@Damiro
How did you isolate the program that is tied to this?
Posted: 02-Sep-2015 | 11:47AM · Permalink
Since you are using Symantec Endpoint Protection, i would recommend you to post the issue in Symantec Enterprise forums http://www.symantec.com/connect/. These Norton forums are specifically for consumer product discussion. I apologize for this inconvenience.
Posted: 02-Sep-2015 | 11:51AM · Permalink
Posted: 02-Sep-2015 | 11:55AM · Permalink
@Sunil
Gee thanks.....
Posted: 02-Sep-2015 | 11:59AM · Permalink
There are no forums regarding this issue on that site. Sorry Sunil, I'm staying right here because you guys are the only ones talking about it.
Posted: 02-Sep-2015 | 12:17PM · Permalink
Posted: 02-Sep-2015 | 12:31PM · Permalink
@Damiro, Thanks for the Update. The new definitions contains the fix for the false positive detections for the SAPE.heur.9BDD4 signature.
@btarjick, @lwbonner & @hideouz, Please try updating the IU again and Liveupdates from the Norton product following the system restart. If you are still getting false positive threat alerts, i have sent you a private message via forums with steps to collect logs. Thanks.
Posted: 02-Sep-2015 | 12:32PM · Permalink
jus hope Damiro
i had that to and now it is back..
Posted: 02-Sep-2015 | 12:34PM · Permalink
Do these definitions also apply to the Cloud product?
Posted: 02-Sep-2015 | 12:55PM · Permalink
i downloaded the newer intelligent updater, then before 1-2hours, and let em run through, included restart pc
we will see what happen now, i started the game from steam now over 10 times and no messages - i jus hope, that it will stay without alert message
when not, i will be back here
thanks for the fast and good help
laterz (i hope not ;] )
Posted: 02-Sep-2015 | 1:05PM · Permalink
Posted: 02-Sep-2015 | 10:44PM · Permalink
Posted: 08-Sep-2015 | 1:26AM · Permalink
I am now getting something similar since installing the definitions on 2 September
I have updated to the latest but the issue remains. SAPE.Heur.804F3 giving false positive and preventing use of software.
There are currently 7 users online.
This thread is closed from further comment. Please visit the forum to start a new thread.